Privacy Policy — Studyleap

Last updated: 23 March 2026

This Privacy Policy explains how Studyleap VOF ("we", "us", or "our") collects, uses, and protects information when you use the Studyleap mobile application (the "App"). We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

If you have any questions, contact us at info@studyleap-app.com.

1. Who We Are (Data Controller)

Studyleap VOF is the data controller for the personal data described in this policy. Contact: info@studyleap-app.com

2. What Information We Collect

The App does not require you to create an account or log in. We collect the following categories of information:

2.1 Location Data

When you grant permission, the App collects your precise or approximate device location to display nearby study places and events on a map. Location is only accessed while the App is in use ("When In Use") and is not stored on our servers. It is processed in real time and passed to Google Maps services to render the map.

2.2 Information You Submit

• Feedback Form: If you submit feedback through the App, we receive the text of your message. This is stored in our backend (Supabase).

• Suggest an Event / Suggest a Place: If you voluntarily submit a suggestion, we receive the details you provide (e.g. name, description, address). This is stored in our backend (Supabase).

2.3 Usage and Analytics Data

We collect anonymised usage data to understand how the App is used and to improve it:

• Firebase Analytics (Google LLC): Events such as screen views, button taps, and feature usage. No names or email addresses are collected.

• Firebase Crashlytics (Google LLC): Crash reports including device model, OS version, and a stack trace at the time of the crash. No personally identifying information is deliberately included.

2.4 Advertising Identifiers

The App displays ads served by Google AdMob (Google LLC). AdMob may collect the following to serve personalised ads:

• Advertising ID (IDFA on iOS / GAID on Android)

• Approximate location (derived from IP address)

• Interaction data (whether an ad was tapped)

This processing is carried out by Google as an independent data controller under Google's own privacy policy. On iOS, App Tracking Transparency (ATT) consent is requested before personalised ads are shown. On Android, you may reset or opt out of personalised ads in your device settings.

2.5 Device and Technical Data

Automatically collected when you use the App:

• Device type, operating system, and OS version

• App version

• General country/region (not precise location) derived from IP address by analytics services

3. How We Use Your Information

Purpose

Data Used

Legal Basis (GDPR Art. 6)

Show nearby places and events on the map

Location

Consent (you grant location permission)

Respond to and act on your feedback/suggestions

Submitted text

Legitimate interest

Monitor app stability and fix crashes

Crash reports

Legitimate interest

Understand feature usage and improve the App

Analytics events

Legitimate interest

Display advertisements

Advertising identifier

Consent (ATT on iOS) / Legitimate interest (contextual ads)

4. Third-Party Services

The App uses the following third-party processors. Each operates under its own privacy policy.

Service

Provider

Purpose

Privacy Policy

Firebase Analytics

Google LLC

App analytics

policies.google.com/privacy

Firebase Crashlytics

Google LLC

Crash reporting

policies.google.com/privacy

Google AdMob

Google LLC

Advertising

policies.google.com/privacy

Google Maps SDK

Google LLC

Map display, location search

policies.google.com/privacy

Google Places SDK

Google LLC

Place search and autocomplete

policies.google.com/privacy

Supabase

Supabase Inc.

Backend database (feedback, suggestions)

supabase.com/privacy

We enter into Data Processing Agreements (DPAs) with processors where required under GDPR.

5. Data Retention

• Location data: Processed in memory only; not stored on our servers.

• Feedback and suggestions: Retained as long as needed to action them, then deleted or anonymised. You may request deletion at any time (see Section 7).

• Analytics and crash data: Retained for up to 14 months by Firebase per their default retention policies.

• Advertising data: Managed by Google AdMob under their own retention policy.

6. International Data Transfers

Google (Firebase, AdMob, Maps) and Supabase may transfer and process data outside the European Economic Area (EEA). These transfers are governed by Standard Contractual Clauses (SCCs) or equivalent safeguards approved by the European Commission, as detailed in each provider's privacy policy.

7. Your Rights Under GDPR

If you are in the EEA, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.

• Right to erasure: Request deletion of personal data you have submitted (feedback, suggestions).

• Right to restrict processing: Request that we limit how we use your data.

• Right to object: Object to processing based on legitimate interest.

• Right to withdraw consent: For location access or ad personalisation, revoke permission at any time in your device settings.

• Right to lodge a complaint: You may file a complaint with your national data protection authority (e.g. the ICO in the UK, or your local EU supervisory authority).

To exercise any of these rights, contact us at info@studyleap-app.com. We will respond within 30 days.

8. Children's Privacy

The App is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted personal information through the App, please contact us and we will delete it promptly.

9. Data Security

We implement appropriate technical and organisational measures to protect the information collected through the App, including secure HTTPS transmission and access controls on our backend systems. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

10. Cookies and Similar Technologies

The App does not use browser cookies. Third-party SDKs (AdMob, Firebase) may use device-level identifiers and local storage equivalents. See each provider's policy for details.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. We encourage you to review this page periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

For any privacy-related questions or to exercise your GDPR rights:

Studyleap VOF Email: info@studyleap-app.com