← Back to Home
Privacy Policy
Last Updated: October 16, 2026
StudyFirst is made by Sevelopment OÜ, a company registered in Estonia (registry code 14002422). In this policy, "StudyFirst," "we," "our," and "us" mean Sevelopment OÜ, which is responsible for your data (the "controller"). This policy explains what we collect when you use the StudyFirst app for iPhone and iPad, the StudyFirst web app and our website studyfirst.app, how we use it, who can see it, and the choices you have.
1. Information We Collect
Accounts and Profiles
- Parents: your name and email address from Sign in with Apple or Google Sign-In (if you use Apple's Hide My Email, we get a relay address instead), and the family you belong to
- Children: a first name and grade level. Children don't create accounts: their phone signs in anonymously once a parent links it with a code
- Learning topics: what a parent or child adds for practice, as text or photos of homework, worksheets or notes
Study Data
- Each study session: when it happened, how long it took, and every question with your child's answer, whether it was right, how long it took and the explanation shown
- The settings you choose: subjects, daily study time, grade level, difficulty, language, and what's blocked until study is done
- A record of the questions your child was asked (the topic and the fact each one tested), so new questions don't repeat them
Devices
- Your child's phone reports whether StudyFirst's Screen Time access is on, whether today's study is done and when the app was last used. We also keep an identifier for the phone
- Push notification tokens, so we can send notifications to parents and settings changes to children's phones
- Usage analytics from parents' devices only (Firebase Analytics: screens viewed and actions taken, without the advertising identifier). In the EU, the EEA and the UK the app asks first and collects nothing unless you allow it. Anywhere, you can switch it off in the app under Profile → Share Usage Data. Children's devices send no analytics
Subscriptions
- Apple handles payments, so we never see your card or bank details. Apple sends us your subscription's details: the plan, its status, renewal and end dates, its transaction ID and, if you used one, the name of the offer code
Feedback and Support
- What you send us through the app's feedback form (with the name you give, the app version and the platform), and the emails you send us
Our Website
- Only if you accept them in our cookie banner, studyfirst.app uses Google Analytics to count visits and Google Ads to measure whether our ads lead to sign-ups. Both use cookies and collect the pages viewed, device and browser type, and approximate location. Your choice is remembered in your browser for a year, and you can change it at any time with Cookie settings, at the bottom of each page
- If you join our early access list: your email address, the page you signed up on, the page that referred you and your browser type
- These website cookies aren't used in the StudyFirst app or web app. The web app keeps your sign-in in your browser and uses Google reCAPTCHA to check that requests come from a real browser rather than a bot
2. Children's Privacy
StudyFirst is built for children under a parent's control, following children's privacy laws such as the Children's Online Privacy Protection Act (COPPA) and the GDPR:
- Children don't create accounts. A parent sets up the child's profile and links their phone, and so gives consent for the child's use of StudyFirst
- We collect only what StudyFirst needs: a first name, grade level, study settings and results, and the learning topics and photos added for practice
- A child's data is seen by the parents in their family and the child's own linked phone, and by our team only as described in section 4
- StudyFirst shows no ads, to children or parents, and we never use children's data for advertising
- Parents can review, change or delete their child's information at any time in the app, or by emailing us
3. How We Use Information
- To run StudyFirst: create study questions, show progress to parents, block apps until study is done and send notifications (for example, when your child finishes studying)
- To keep questions fresh for your child and check their quality
- To manage subscriptions, including which offer code a subscription started with
- To answer your questions and feedback, and to fix problems
- To keep StudyFirst secure and prevent abuse
- To learn how parents use the app and how people find our website
- To tell people on our early access list when StudyFirst is available for them
Under the GDPR, we rely on: providing the service you signed up for (contract); your consent, as a parent, for your child's data, and your consent for our early access list, the website's analytics and advertising cookies and, in the EU, the EEA and the UK, the app's usage analytics; and our legitimate interests in security, support and improving StudyFirst (including the app's usage analytics elsewhere).
4. Who Can See Your Data
- Your family: the parents in your family see your children's profiles, settings, topics and study history. A child's linked phone sees only that child's data
- Our team: to support you, fix problems and run StudyFirst, our administrator can see parent accounts (name, email and sign-in method), families and their plans, and children's settings, topics and study sessions with their answers. Every time a family's data is viewed this way, it's logged
- Promoters: people who share a StudyFirst offer code see how many subscriptions started with their code and, for each one, when it started, the plan, and whether it's in the free week, using the discount, paying full price or has ended. They never see names, emails, children or anything else that identifies a family
- Service providers that run parts of StudyFirst for us (section 5)
- Authorities, when the law requires it
We do not sell your personal information.
5. Service Providers
- Google Firebase and Google Cloud: sign-in, database, file storage, server functions, push notifications, hosting, and analytics (parents' devices only)
- OpenAI: writes the study questions and reads learning-topic photos. We send the subject, grade level, difficulty and language, the topic's text or photos, and the topics and facts your child was recently asked, but not your child's name. OpenAI doesn't use data sent through its API to train its models
- Apple: Sign in with Apple, App Store payments and subscriptions, Screen Time (Family Controls), push notifications, and App Attest, which confirms that requests come from the genuine StudyFirst app
- Google: Google Sign-In; reCAPTCHA in the web app, which looks at your browser and device to tell people from bots; and Google Analytics and Google Ads on our website
They process data for us under their own terms and privacy policies.
6. Where Data Is Stored and How We Protect It
- StudyFirst's data is stored on Google Cloud servers in the United States. When data moves there from the EU, the EEA or the UK, we rely on our providers' safeguards, such as the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses
- Data is encrypted in transit (HTTPS/TLS) and at rest
- Our security rules let each parent read only their own family's data, and a child's phone only that child's
- Our servers accept requests only from the genuine StudyFirst app and web app (Firebase App Check)
7. Data Retention
We keep your data while your account exists. You can delete your account at any time in the app (Profile → Delete Account) or by emailing us.
- If you're your family's only parent, deleting your account deletes the family with all of its data: children's profiles, settings, topics and photos, study history, feedback and the record of your subscription. If other parents remain, your account and your feedback are deleted, and the family stays with them
- Deleting a child's profile deletes that child's data
- Deleting your account doesn't cancel an App Store subscription; cancel it in your Apple Account's subscription settings
- Link codes stop working after 15 minutes and invite codes after 24 hours. Our servers' technical logs are kept for 30 days, and the log of our team's views of family data is kept for security
- We keep early access emails only to tell you when StudyFirst is available. Ask us at any time to delete yours
8. Your Rights
You can ask us to:
- Show you the personal data we hold about you and your children, or give you a copy
- Correct it
- Delete it
- Restrict how we use it, or object to it
- Stop using it where you gave consent (you can withdraw consent at any time)
Email support@studyfirst.app and we'll answer within a month. You can also complain to the Estonian Data Protection Inspectorate (aki.ee) or to the data protection authority where you live.
9. Changes to This Policy
We may update this policy from time to time. We'll post the new version on this page, update the "Last Updated" date, and tell you about significant changes through the app or by email.
10. Contact Us
Questions about this policy or your data? Contact us:
Sevelopment OÜ (registry code 14002422), Viimsi, Estonia
Email: support@studyfirst.app