Privacy Policy

StudyClock.com is run by one person, Maulik Joshi, in India. It is a sole proprietorship, which means a business owned by one individual. Under data-protection laws, including the EU and UK GDPR and India's Digital Personal Data Protection (DPDP) Act 2023, StudyClock is the “controller” of your personal data. That means we decide why and how it is used.

This policy covers studyclock.com and its study rooms at studyrooms.studyclock.com. Both use the same StudyClock account and the same servers, so one policy applies to both.

We do not publish a postal address. To reach the person responsible for privacy, email info@studyclock.com. Lemon Squeezy takes payments for paid plans and credit packs. It is the “merchant of record”, so it is responsible for the payment data it collects.

We work with a small set of carefully chosen third parties:

Firebase (Google)

Authentication, user identity

PostgreSQL (hosted)

Encrypted user data storage

Lemon Squeezy

Payment processing — PCI compliant

Google Analytics

Anonymous aggregate usage data

Google AdSense

Display advertising — uses cookies to serve relevant ads

Cloudflare R2

Note attachments & OCR uploads (file storage)

LiveKit

Live audio in study rooms

EmailJS

Sends the messages you write in our contact and feedback forms

Spotify / YouTube

Music players that load only when you open them. They may set their own cookies

Google Funding Choices

Shows the consent message in the EEA, UK and Switzerland

Anthropic / OpenAI / Google AI

AI Tools features (content not stored beyond your saved items)

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

Your data is stored on encrypted PostgreSQL databases. All communication between your browser and our servers uses TLS (HTTPS). Authentication tokens are verified server-side on every request via Firebase Admin SDK with revocation checking enabled.

Payments are processed exclusively by Lemon Squeezy — we never receive, handle, or store your payment card details.

No method of transmission over the Internet is 100% secure. We implement appropriate technical and organizational safeguards, but cannot guarantee absolute security.

We use a minimal set of cookies:

• Essential cookies: Authentication session tokens — required for login to work.
• Analytics cookies: Google Analytics sets anonymized cookies (_ga, _gid) to count visits and measure feature usage. No personal data is attached.
• Preference cookies: localStorage entries for your timer settings, ambient presets, and UI preferences — stored locally in your browser, never sent to third parties.
• Advertising cookies: Google AdSense sets cookies to serve ads relevant to your interests. Where the law requires consent, they are used only after you agree in the consent message shown on your first visit.

You can opt out of personalized advertising at Google Ads Settings. Essential cookies cannot be disabled without breaking authentication. In the EEA, UK and Switzerland, non-essential cookies are used only after you agree in the consent message shown on your first visit. You can change that choice later from the privacy settings link provided by that message.

StudyClock uses Google AdSense to display advertisements. Google AdSense uses cookies to serve ads based on your prior visits to this website and other websites on the Internet.

Google's use of advertising cookies enables it and its partners to serve ads based on visits to this site and/or other sites. You may opt out of personalized advertising by visiting Google's Ads Settings.

Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this site or other sites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet. You can also opt out of a third-party vendor's use of cookies for personalized advertising by visiting aboutads.info.

Ads can also use web beacons, which are small image requests that tell the ad provider your browser loaded an ad. With cookies, they let providers count views and clicks. Your IP address is sent with these requests, as with any web request.

Ads may be personalized or non-personalized. Personalized ads use your past activity to choose what you see, and non-personalized ads rely on the content of the page you are viewing and your general location. In regions where the law requires consent (such as the EEA, UK and Switzerland), we ask for it before personalizing ads.

If you are in the EEA, the UK or Switzerland, the law says we need a reason, called a legal basis, for each way we use your data. Elsewhere we use your data for the same reasons, and we ask for your consent where your local law requires it.

Running your account, timers, rooms, notes and AI tools

Contract: you need it to use the service (GDPR Art. 6(1)(b))

Billing and credit packs

Contract, and the law on tax records (Art. 6(1)(b) and (c))

Security, abuse prevention and bug fixes

Our legitimate interest in keeping the service safe and working (Art. 6(1)(f))

Aggregate analytics

Your consent in the EEA, UK and Switzerland (Art. 6(1)(a)). Elsewhere, our legitimate interest in seeing how the site is used

Personalized ads and ad measurement

Your consent in the EEA, UK and Switzerland (Art. 6(1)(a)), collected by Google’s consent message

Replying to your messages

Our legitimate interest, or a step you asked for (Art. 6(1)(f) and (b))

You can withdraw your consent at any time with the “Privacy settings” link in the site footer, or from the consent message where it is shown. If the footer link does not open anything for you (the message is only shown in the EEA, UK and Switzerland), email us and we will act on your request. Withdrawing does not undo what we did before you withdrew.

• Account, profile and content: We keep them while your account is open. If you delete your account in settings, we delete your account and its content from our database and remove your sign-in from Firebase.
• Payment records: Lemon Squeezy keeps these under its own policy. We keep only the subscription and credit status we need to give you access, plus records the law requires for tax.
• Room chat, presence and voice records: We keep them until the room or your account is deleted. If you delete your account, your chat messages, room membership and voice records are deleted with it.
• Support messages: We keep them as long as we need to answer you and follow up, then delete them.
• Analytics and ad data: Google keeps these for the periods set in our Google account. Ad cookies expire on Google’s schedule.
• Server logs: We keep them for a short time to keep the service secure and fix problems.

StudyClock runs from India. The services listed above also process data in other countries, including the United States.

When data about people in the EEA, UK or Switzerland leaves those regions, the providers rely on protections such as the EU-US Data Privacy Framework or standard contractual clauses. Their own terms say which one applies.

You have the following rights regarding your personal data, regardless of your location:

• Access — request a copy of the data we hold about you
• Correction — ask us to fix inaccurate data
• Deletion — request that your account and associated data be deleted
• Portability — export your study session history and notes
• Objection — opt out of analytics tracking via your browser or Google settings
• Withdraw consent — close your account at any time from the settings page
• Restriction: ask us to pause using your data while we check a request
• Complain: contact your local data-protection authority in the EEA, UK or Switzerland, or the Data Protection Board of India under the DPDP Act

To exercise any of these rights, email us at info@studyclock.com. We reply within 30 days. If you are in India, this address is also our grievance contact under the DPDP Act.

If you live in a US state with a privacy law

Residents of some US states, including California, Colorado, Connecticut, Texas, Virginia and others, have extra rights. You can ask to know what personal information we hold about you and to get a copy of it, to correct it, and to delete it. You can ask for a portable copy of your data. You can opt out of the sale of your personal information and of its use for targeted advertising. You will not be treated worse for using any of these rights.

We do not sell your personal information for money. Personalized ads from Google may count as targeted advertising under some of these laws. To opt out, use Google Ads Settings or aboutads.info, or email us at info@studyclock.com.

To make any request, email us from the address on your account so we can match it to you. We handle requests the same way whether or not your state's law applies to us. If we decline a request, you can ask us to review that decision, and you can contact your state attorney general.