Privacy policy

• We collect what you give us and what your device sends while you use StudyNest.
• We never sell your data. StudyNest has no ads and no tracking or analytics scripts.
• You decide who sees your notes and your online status.
• Calls go straight between the people in the room. Our servers do not record or store them.
• You delete your account from Settings whenever you want.

You give us this information when you sign up, fill in your profile or use a feature.

• Account: your name, username, email and password. We store a scrambled form of the password (a bcrypt hash), never the password itself. With Google sign-in, Google sends us your name, email and profile photo.
• Profile: photo, cover image, bio, school, major, subjects, interests, study level and style, country, city and the times you are free to study. Your phone number and date of birth only if you add them.
• Posts: your notes, comments, likes, saved notes and the reports you send.
• Messages: the text, photos, videos, documents and voice notes you send in chats.
• Sessions and rooms: the study sessions you create or join, and the rooms you open.
• Nour: your questions, the files you share with Nour and the answers. We save these chats on your account so you see them on every device.
• Profile import: the LinkedIn export or CV you upload. We read the file to suggest profile details and do not keep the file. Only the details you approve reach your profile.

• Sign-in history: device, browser, IP address, and an approximate city and country based on the IP address. You see this list in Settings under Privacy & Security. We delete each record 7 days after its last use.
• Study time: the minutes you spend with StudyNest open on screen, counted per day in your time zone. We use them for your streak and your weekly chart.
• Online status: whether you are active now. Turn off "Show when you're active" to hide this from everyone.
• Error logs: technical details of failed requests, so we find and fix problems. We delete them after 14 days at most.

• Video, audio and screen sharing travel directly between the people in the room. Your browser encrypts the stream.
• When a direct connection fails, the call passes through a relay server run by Cloudflare. The relay forwards encrypted data and does not see or hear the call.
• StudyNest does not record calls on its servers. A person who records a room saves the file to their own device, and everyone in the room gets a notice.
• Chat messages inside a call reach the people in the room only. We do not save them.

• To run StudyNest: show your profile, suggest study partners by subject, level and free time, deliver messages, and run sessions and rooms.
• To keep accounts safe: send sign-in alerts and verification codes, limit repeated attempts and stop abuse.
• To send the emails you need: verification codes, password resets and security alerts. We send no marketing email.
• To answer you through Nour: Nour sends your question, the recent messages of the same chat and any file you attach to Google's Gemini service, which writes the answer.
• To fix bugs and improve the app.

We do not use your data for advertising, and we do not train AI models on your data.

• Your name, username, photo and public profile details: people signed in to StudyNest.
• Notes: each note follows the setting you pick when you post: everyone, your partners, people you choose, or only you.
• Messages: only the people in the chat.
• Blocking: when either of you blocks the other, neither of you sees the other's profile, notes, comments or messages.
• Reports: StudyNest staff read the reports people send and the content reported, and nothing more.

These companies handle data for us so StudyNest works. Each one processes your data only to provide its service to us. Some of them store data outside your country.

• MongoDB Atlas: our database.
• Render: runs our server.
• Vercel: serves the website.
• Cloudinary: stores photos, files and voice notes.
• Google: Google sign-in, and the Gemini service behind Nour.
• Upstash: a short-term cache so pages load faster.
• Cloudflare: the relay for calls.
• ipapi.co and ipwho.is: turn an IP address into an approximate city for your sign-in history.
• Our email provider: sends codes and alerts.

StudyNest uses no advertising or tracking cookies. We use these:

• sn_lang, sn_colour and sn_mode: remember your language and theme.
• A trusted-device cookie, only when you tick "Trust this device": skips the sign-in code on this device for 30 days.
• Browser storage: keeps you signed in and remembers settings such as notification sound and your camera and microphone choice.

Clearing your browser data signs you out and resets these settings.

• Your account and content: until you delete them.
• Sign-in records: 7 days after their last use.
• Verification codes: 10 minutes.
• Sign-ups you did not finish: 24 hours.
• Error logs: 14 days at most.

Open Settings, then Privacy & Security, then Delete account. We remove your name, photo, bio, school, subjects, interests, phone number, birth date and free times straight away. We end every sign-in and free your email and username for reuse.

Messages you sent stay in the other person's chat under the name Deleted User. Notes and comments you posted stay up under the same name. Delete the ones you want gone before you delete your account.

You have the right to see, correct, download and delete your data. Most of this happens in the app: edit your profile, change who sees each note, hide your online status, delete posts and messages, or delete your account.

For a copy of your data, or anything the app does not cover, email support@studynest.dev. We reply within 30 days.

• Every connection uses HTTPS.
• We store passwords as bcrypt hashes.
• You turn on two-step sign-in: a code we email you at each new sign-in, with backup codes for when email is out of reach.
• You get an alert for every new sign-in, and you sign out other devices from Settings.
• We limit repeated sign-in and code attempts.

No system is perfect. If a breach affects your data, we tell you by email.

StudyNest is for people aged 13 and over. If the law where you live sets a higher age for using online services without a parent's consent, ask a parent or guardian first.

When we change this page, we update the date at the top. For important changes, we tell you in the app or by email before they apply.

Questions about your privacy or your data: support@studynest.dev.