Privacy Policy

At outstudy, your privacy matters to us. This policy explains what information we collect, how we use it, and the choices you have. It applies to the outstudy website and app at outstudy.ca.

1. Information we collect

We collect only what we need to run the service.

• Account information from Google OAuth when you sign in: your name, email address, and Google profile picture.
• Profile information you provide: username, school (optional), study category, and profile picture.
• Study data you generate by using the timer: subject names and colors, session start/end times, durations, dates, and your streak totals.
• Group data: the rooms you create or join, and your live presence (subject and timer state) while you have a room open.
• Technical information: basic device and browser details, pages visited in the app, and interaction events (for example, timer started). This is used in aggregate for product analytics.

2. How we use your information

• To provide and maintain the core features: timer, stats, leaderboard, and group rooms.
• To display your username, avatar, and stats on leaderboards, in group rooms you join, and on your public profile if you enable it.
• To understand how the product is used in aggregate so we can improve it.
• To prevent abuse and protect the security of the service.
• To respond to support requests you send us.

3. Cookies and analytics

We use a small number of cookies and similar technologies. Essential cookies from Supabase keep you signed in. We use PostHog for product analytics, including page views, feature events, and aggregate heatmaps. We do not record individual session replays or keystrokes. We do not use cookies for advertising.

4. What is visible to others

outstudy is a social product, so some of your information is shown to other users by design:

• Your username, avatar, school, category, and study totals are visible on the global leaderboard.
• In group rooms you have joined, other members can see your username, avatar, current subject, and live timer while you are active there.
• Your full stats are visible at outstudy.ca/u/username when your profile is public. New or older profiles may be public by default unless you explicitly turn this off in Settings → Privacy.

5. Service providers

We rely on a small set of trusted providers to operate outstudy. Your data is processed by them only to run the service:

• Supabase — authentication, database, file storage, and realtime presence.
• Vercel — hosting of the website.
• Google — OAuth sign-in.
• PostHog — anonymized product analytics and aggregate heatmaps.

We do not sell your personal information, and we do not share it with advertisers.

6. Where your data is stored

Our providers may process your data in Canada, the United States, or the European Union. By using outstudy, you understand that your information may be transferred to and stored in these regions under their applicable laws.

7. Data retention

We keep your account and study data for as long as your account is active. When you delete your account from Settings → Danger zone, we permanently remove your profile, sessions, logs, room memberships, and authentication record. Some uploaded files and anonymized analytics events may remain for a limited period in backups or aggregate systems where they are no longer tied to an active account.

8. Your rights

You can access and update most of your information directly in Settings. You can delete your account and all associated data at any time from the Danger zone. If you are in Canada, the European Economic Area, the United Kingdom, or California, you may have additional rights under applicable law, including rights to access, correct, export, or restrict processing of your personal data. To exercise these rights, email us at the address below.

9. Children

outstudy is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact us and we will remove it.

10. Security

We use industry-standard safeguards, including HTTPS, Supabase row-level security, and scoped access controls, to protect your information. No method of transmission or storage is 100% secure, but we work to keep your data safe.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Effective" date above and, for significant changes, take reasonable steps to notify you in the app.

12. Contact

Questions, requests, or concerns about this policy? Email us at outstudyapp@gmail.com.