Last Updated: February 17, 2026
1. Introduction
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.
We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy.
2. Information We Collect
2.1 Information You Provide
Our Service offers optional user registration and account creation. When you create an account, we collect:
- Account Information: Name, email address, and password (hashed and securely stored)
- Birth Year: We ask for your birth year at sign-up to determine whether you are under 13 and apply the appropriate child-safety protections (see "Children's Privacy" below). We store only the year, not a full date of birth.
- OAuth Data: If you sign in with Google, we receive your name, email, and profile picture from Google
- Learning Progress: Topic completion, quiz scores, flashcard review data, and competitive match history
- Profile Data: Avatar selections and display preferences
We may also collect information you voluntarily provide through contact forms or feedback mechanisms.
2.2 Automatically Collected Information
When you visit our Service, we and our third-party partners may automatically collect certain information about your device and usage, including:
- Device Information: Browser type, operating system, device type (mobile/desktop)
- Usage Data: Pages visited, time spent on pages, click patterns, navigation paths
- Study Activity: For signed-in students, active study time (time while the page is open and in use; idle and background time is not counted), flashcard ratings and time per card, and answers to lesson, quiz and test questions. This powers the student's own progress and is shown to the teachers of any class the student joins.
- Technical Data: IP address, referring URLs, timestamps
- Performance Data: Page load times, error messages
2.3 Cookies and Tracking Technologies
We use cookies, web beacons, and similar tracking technologies to:
- Remember your preferences and settings
- Understand how you use our Service
- Improve Service performance and user experience
Types of cookies we use:
- Essential Cookies: Required for basic Service functionality
- Analytics Cookies: Help us understand user behavior and improve the Service
- Preference Cookies: Remember your settings (e.g., dark mode, language)
3. Third-Party Analytics
Study Mondo does not display third-party advertising and does not use advertising cookies or ad networks. We use a small number of analytics services only to understand and improve the Service.
3.1 Analytics Services
We may use third-party analytics services to help us understand how users interact with our Service:
- Google Analytics: Tracks user behavior, demographics, and interests
- Vercel Analytics: Monitors Service performance and usage patterns
- Microsoft Clarity: Session replay and heatmaps that record how pages are used (clicks, scrolls, navigation). Clarity loads only after you grant analytics consent, and is never enabled for accounts identified as under 13.
These services may collect information such as:
- How you found our Service (search engines, referral sites)
- Which pages you visit and how long you stay
- What content you interact with
- Geographic location (country/region level)
- Device and browser information
3.2 Third-Party Privacy Policies
Our analytics partners have their own privacy policies. We encourage you to review:
4. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our Service
- Improve, personalize, and expand our Service
- Understand and analyze how you use our Service
- Develop new features, products, and services
- Communicate with you (if you contact us)
- Detect and prevent technical issues or security threats
- Comply with legal obligations
5. Information Sharing and Disclosure
5.1 Third-Party Service Providers
We may share information with:
- Analytics Providers: To analyze Service usage and performance
- Hosting Services: To host and deliver our Service (e.g., Vercel)
- Database Providers: To store educational content (e.g., Neon, PostgreSQL)
5.2 Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Valid legal requests from government authorities
- Court orders or subpoenas
- Protection of our legal rights or safety
- Prevention of fraud or security threats
5.3 Business Transfers
If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
6. Data Security
We implement reasonable security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- HTTPS encryption for data transmission
- Secure hosting infrastructure
- Regular security updates and monitoring
- Access controls for sensitive systems
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.
7. Your Privacy Rights and Choices
7.1 Cookie Controls
Most web browsers allow you to control cookies through settings. You can:
- Block all cookies
- Accept only first-party cookies
- Delete cookies after browsing sessions
- Receive notifications when cookies are set
Note: Blocking cookies may affect your ability to use certain features of our Service.
7.2 Do Not Track
Some browsers include a "Do Not Track" (DNT) feature. Currently, there is no industry standard for responding to DNT signals. We do not currently respond to DNT signals, but we will update this policy if standards are established.
7.4 Rights for EU/UK Users (GDPR)
If you are located in the European Union or United Kingdom, you have certain rights under GDPR:
- Right to Access: Request copies of your personal data
- Right to Rectification: Request correction of inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restrict Processing: Request limitation of data processing
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to certain types of processing
7.5 Rights for California Users (CCPA)
If you are a California resident, you have rights under CCPA:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information
- Right to request deletion of personal information
- Right to non-discrimination for exercising your rights
Note: We do not sell personal information to third parties.
8. Children's Privacy
Our Service covers a wide range of learners — from elementary and middle-school math (grades 4–8) through high-school and AP®-level courses. Because some of our content is intended for children under 13, we ask for a birth year at sign-up and apply additional protections to accounts identified as under 13:
- No advertising — the Service displays no ads to anyone, so there is no ad targeting or ad tracking of children.
- No session-replay analytics (Microsoft Clarity is never loaded for under-13 accounts).
- We collect only the information needed to operate the learning features, and a child's name is shown to other students as a first name and last initial only.
Parents and guardians: we encourage you to be involved in your child's use of the Service and to review this policy with them. You may contact us at any time to review, correct, or delete your child's information, or to delete the account entirely. We are continuing to expand our verifiable parental-consent process; if you have questions about how your child's data is handled, please reach out.
9. International Data Transfers
Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Service, you consent to the transfer of your information to the United States and other countries where our service providers operate.
10. Data Retention
We retain automatically collected information (analytics, cookies) for as long as necessary to:
- Provide and improve the Service
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Maintain business records
Typically, analytics data is aggregated and anonymized over time. Cookie data is retained according to the settings of each specific cookie (see Section 7.1).
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes by:
- Updating the "Last Updated" date at the top of this page
- Posting a notice on our homepage (for significant changes)
Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.
12. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices — including parent/guardian requests to review or delete a child's information — email us at privacy@studymondo.com.
You can also delete your account and its associated data yourself at any time from your Profile page (Danger zone → Delete account).
For specific privacy requests (access, deletion, opt-out), please include:
- Your request type (access, deletion, etc.)
- Sufficient information to identify your data
- Verification of your identity
- Preferred contact method