Privacy policy

Last updated: October 7, 2026

School Study Partner is provided by Joseph Canova. Contact joe@stuffedcart.com for support, privacy or accessibility requests.

Your study library

You do not need a School Study Partner online account to use local study features. The native iPhone and iPad app stores imported materials, extracted text, topic names, highlights, guides, cards, questions, practice answers, saved sessions and progress on your device. Appearance, reading and speech preferences are also stored locally. We do not operate a cloud library or receive these local records simply because you use the app. The native app has no advertising or publisher-operated analytics SDK.

Your library and original-file storage are excluded from the app's automatic iCloud backup path. Use Save backup before changing devices or deleting the app. We cannot recover a library that was never exported.

Camera, files and reading aloud

The app accesses the camera when you choose to scan material. PDF reading, image text recognition and document extraction take place on your device. Files providers such as Google Drive and OneDrive handle their own sign-in and downloads; Study Partner receives the files you select through Files.

Read aloud uses available Apple speech voices. It starts only when you choose it and does not record your voice or send narration to an AI service. You can change camera and local-network access in iOS Settings. Pasting notes and local practice do not require camera permission.

Optional AI and the information you send

Public AI generation is intended for eligible adults using their own OpenRouter account. Before connecting, the app asks for a local age declaration. Before generation, it also requires permission for the selected account to receive notes. This is a self-declaration, not identity verification or verified parental consent. No birth date or identity document is requested by Study Partner.

When you choose AI generation, the app sends the lesson title, learning level, extracted note text, source names and page references, selected highlights, and generation instructions. Adding questions may include existing question wording to avoid duplicates. It does not send the original photo/document binary or your recorded quiz answers in that generation request. Review notes and remove personal or confidential information before sending them.

Requests go from your device to OpenRouter, which routes them to model providers. The chosen model and provider availability can change. See OpenRouter's provider information for provider-specific practices. Our requests disallow provider routes marked as collecting data, but this does not establish zero retention or change your OpenRouter logging preferences. OpenRouter retains request statistics, including token usage and response time, for account logs, reporting and model rankings. Its optional prompt/output logging and product-improvement settings are off by default, but your account may already have enabled them. Review those choices in OpenRouter. See OpenRouter's data collection explanation. Services may also retain account, billing, security or legally required records. Retention and processing depend on the selected service and its terms. Do not upload private student records, children's personal information or sensitive documents.

The service can receive network information, including your IP address, account identifiers, model selection, request time and token usage. You authenticate on its own page. The app stores the returned authorization credential, local account label, available models and any returned account identifier in device-only Keychain storage. Study Partner never asks for your AI provider password. AI credentials are excluded from exported study backups.

OpenRouter usage is paid by the account holder using their own credits. A ChatGPT or Claude subscription does not cover it. There is no publisher-paid AI fallback. Direct ChatGPT sign-in is a private testing feature and is unavailable in this public release; it must not be understood as access included with the public app.

You can withdraw notes permission for an account or disconnect it in Settings. Withdrawal stops new generation requests; it cannot unsend a request that already started. To revoke the service's authorization or request deletion of records it holds, use that service's own account settings and privacy process.

Younger students

Students can use offline questions, imported quizzes, saved tools and read aloud without an AI account. OpenRouter access is restricted to adults aged 18 or over. A child should not use someone else's adult account. A teacher or parent can prepare appropriate study material separately and share a quiz, after checking that it contains no private records. School use remains subject to the school's own rules. Selecting a school level does not establish a student's age.

Uploads from a computer

Starting From computer opens a temporary upload page on your local Wi-Fi network and shows a pairing code. That browser can send selected files or pasted notes and see upload names and status. It uses a temporary pairing cookie. The upload session closes after ten minutes or when the app goes into the background.

This connection uses plain HTTP. The pairing code limits access but does not encrypt traffic against someone able to observe the network. Use a trusted private Wi-Fi network, or use Files import instead. This feature does not create a public website or synchronize your study library.

Exports and backups

You control sharing through the device share sheet. Backups include original files, study tools and practice progress, but exclude AI credentials. Shared quizzes may include relevant source excerpts, questions, answers, explanations and highlights. Review the contents before sharing. The app does not add password encryption to exported files. Recipients and destinations you select may retain copies under their own policies.

Retention and deletion

Local study material remains until you remove a source or delete its topic. Topic deletion removes its library records and queues original files for removal; if iOS cannot remove a file immediately, the app retries on a later local action. Removing a source can reset that topic's study tools and practice progress; the app asks you to confirm. Export anything you want to retain first.

Disconnect removes that account's locally saved credentials, identity, model cache and notes permission. Saved study tools remain. For older private-test ChatGPT accounts, the updated Disconnect action also removes the local registration/name/email record and attempts remote revocation. A failed or unavailable remote revocation is reported separately. OpenRouter authorization must also be revoked in OpenRouter's key settings when needed.

Deleting the app removes its local app-container library. iOS Keychain and records held by an AI provider are separate; disconnect and revoke accounts before deleting the app. Deleting local material cannot delete exported backups, shared copies or information already sent to another service. We cannot remotely erase your device library.

Website and support

Our website is schoolstudypartner.com, hosted by Shopify. Shopify processes ordinary web requests and may use cookies, identifiers and logs to deliver, operate and secure the website. Shopify Network Intelligence is disabled for this site, so we do not share customer data through that optional feature. This setting does not turn off Shopify's hosting, security or other necessary platform processing. See Shopify's privacy information.

Website processing is separate from the app's on-device study features. Our website theme does not add advertising pixels, marketing signup forms, student uploads or third-party analytics; this does not mean Shopify performs no collection. We will update this policy if the site's services or privacy settings change.

If you email us at joe@stuffedcart.com, we receive your address, message and attachments through Gmail. We use them to answer the request, investigate problems and address privacy or accessibility concerns. Do not send passwords, API keys, sign-in tokens or confidential student records. We keep support messages as needed for troubleshooting and support history, including follow-up or recurring issues. We do not automatically delete resolved messages after a fixed number of days. Gmail processes messages under Google's privacy policy; its backups and operational logs follow Google's retention processes.

You may request access, correction or deletion of information you sent to support by emailing joe@stuffedcart.com. We will review deletion requests and explain any information we still need to retain for an ongoing issue or legal obligation. Rights and applicable response requirements depend on your jurisdiction. We will not ask for more information than needed to understand the request and verify any necessary authority.

Changes

We will update this policy when the app's data practices change. The current policy and help are available in Settings and on our website. Contact joe@stuffedcart.com if you need this information in another accessible format.