Privacy Policy
Last updated:
This Privacy Policy explains how OmniStudy collects, uses, shares and protects personal data when you use the OmniStudy app for Android, published on Google Play by Suvedita Ambashtha, and the website at https://www.omnistudyai.com (together, the “Service”). It also explains the choices and rights you have. OmniStudy is developed and operated by Suvedita Ambashtha, an individual developer based in India (“OmniStudy”, “we”, “us”, “our”).
1. Who we are and how to contact us
Suvedita Ambashtha, trading as OmniStudy, is the controller of your personal data (the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023). OmniStudy is not yet a registered company.
Privacy questions, requests and complaints
- Email: suvedita7@gmail.com
- Grievance Officer: Suvedita Ambashtha, at the same email address.
- We acknowledge complaints within 48 hours and aim to resolve them within one month.
2. The short version
- We collect what we need to run your study tools: your account details, the material you give us, what you create, and how you study.
- Your prompts, documents and voice questions are sent to Google’s Gemini AI to produce your study material. Under Google’s terms for paid use, Google does not use them to improve its products.
- We do not sell your personal data. The Android app shows no ads and contains no advertising or analytics SDKs.
- You can delete individual items, or your whole account, at any time from inside the app. See “Deleting your account”.
3. Data we collect
What we collect depends on the features you use. Items marked optional are collected only if you use that feature.
Account data
- Your name, email address and password. The password is handled by Google Firebase Authentication; we never see it in plain text.
- If you sign in with Google: the name, email address and profile picture Google shares with us. We get no other access to your Google account.
- Optional: a profile photo you upload.
- Your answers to the onboarding questions, such as the kind of learner you are, your level of study, subjects, goals, exam date and how much time you can study each day.
Study content
- Topics, prompts and questions you type.
- Optional: documents, images and notes you upload or paste, and YouTube links you share.
- Optional: voice questions. When you tap the microphone during a Live Class, the app records your question, sends the audio to be answered, and then deletes the recording from your phone. We do not store voice recordings.
- The study material we generate for you: live classes, notes, flashcards, quizzes, mind maps, timelines, podcasts, study plans and answers.
Learning activity
- How you study: study time, sessions, XP and streaks, quiz answers and scores, topics you have mastered or find difficult, and which tools you use.
- If you join a Study Circle on the website: your name, photo, XP and study statistics are visible to the other members of that circle.
Purchases
- Your plan, subscription status, product, price, currency, and the dates of purchases, renewals, cancellations and refunds.
- Purchases in the Android app are made through Google Play. Google handles your payment details; we and RevenueCat receive a purchase record, never your card or bank details.
- Purchases on the website are made through Dodo Payments, which handles your payment details. We receive the transaction record, never your full card details.
Messages and reports
- Reports you send about AI-generated content (in the app: Profile → Settings → Help → Report AI content), feedback and support emails, together with your account ID and email address.
Technical data
- IP address and the time of each request to our servers, recorded in server logs for security and troubleshooting.
- Before you create an account, the app generates a random installation ID. Our server stores a scrambled (hashed) copy of it and of your IP address, with a counter, so that free study plans can be limited per device. The website’s free tools work the same way with a browser identifier (see the Cookie Policy).
- Basic device and app information, such as Android version, app version, language and country, which Google Play and RevenueCat use to process purchases.
- On the website only: the cookies and similar technologies described in our Cookie Policy at https://www.omnistudyai.com/legal/cookies.
We do not collect your location, contacts, messages, call logs, calendar, health data, your device’s advertising ID, or any files or photos other than those you choose to upload.
4. Android permissions
- Microphone: used only while you ask a question in a Live Class, after you tap the microphone and allow access. You can refuse or withdraw it in Android settings; the rest of the app keeps working.
- Internet and network state: to reach our servers and to tell when you are offline.
- Google Play Billing: to let you buy a subscription through Google Play.
- Vibration, wake lock and audio settings: for haptic feedback, and so lessons play smoothly.
- Files and photos: the app uses Android’s system file picker, so it can read only the files you pick. It does not ask for access to your storage or photo library.
5. How we use your data, and our legal bases
We use personal data only for the purposes below. Where the GDPR, the UK GDPR or a similar law applies, each purpose relies on the legal basis shown in brackets. Under India’s DPDP Act we process your data with the consent you give when you create an account and use these features, or for the legitimate uses the Act permits.
To provide the Service (contract)
- Create and secure your account and sign you in.
- Generate, store, sync and show your study material and progress.
- Answer your typed and spoken questions.
- Provide the plan you bought, apply usage limits, and restore purchases.
- Send account emails: email verification, password resets, and notices about your plan and payments.
To personalise your learning (contract and legitimate interests)
- Adapt lessons, quizzes and reviews to your level, goals and weak topics, using your learning activity. This is automated, but it only shapes the study material you see and has no legal or similarly significant effect on you.
To keep OmniStudy safe and lawful (legitimate interests and legal obligation)
- Prevent fraud, abuse and attempts to get around usage limits, and enforce our Terms of Service.
- Review reports of harmful or inaccurate AI content, and improve our safeguards.
- Find and fix errors and keep the Service secure.
- Keep the purchase records that tax and accounting law require, and respond to lawful requests from authorities.
To improve OmniStudy (legitimate interests, or consent where required)
- Understand, in aggregate, which features are used so we know what to build. In the Android app this uses only the activity data stored with your account; the app has no third-party analytics SDK.
- On the website: product analytics and session replay with PostHog, as described in the Cookie Policy.
To tell you about OmniStudy (consent, or legitimate interests where the law allows)
- Emails about getting started, new features, and plans that fit how you use OmniStudy, and our newsletter if you subscribe. Each of these emails has an unsubscribe link, and unsubscribing does not stop account emails.
- On the website: measuring whether our ads on Facebook and Instagram lead to sign-ups (the Meta Pixel), as described in the Cookie Policy.
We do not sell personal data. We do not show ads in the app, and we do not use your content to train AI models.
6. How the AI processing works
- To create your study material, our server sends the relevant prompt, document, image, link or recording to the Google Gemini API. Google also produces the voices you hear in live classes and podcasts.
- We use Gemini under Google’s terms for paid services. Google processes this content to return a result to us and does not use it to improve its products. Google may keep it for a limited time to detect abuse and meet legal obligations.
- AI output can be wrong. Check important facts with your teacher, your textbook or another reliable source.
- Please do not put sensitive personal data, such as health information or other people’s personal details, into prompts or uploads. Studying does not need it.
8. Where your data is stored
- Your account, study material and progress (Cloud Firestore), and our server (Cloud Run), are in Google Cloud’s Mumbai region, India.
- Files you upload, profile photos and podcast audio (Cloud Storage) are stored in Google Cloud’s us-central1 region, United States.
- Google (Gemini API and Firebase Authentication), RevenueCat, Loops, PostHog and Meta may process data in the United States and in other countries where they operate.
These countries may not have the same data protection laws as yours. For personal data transferred out of the EU, EEA or UK, we rely on the European Commission’s Standard Contractual Clauses (and the UK’s equivalent) in our providers’ data processing terms, or on the EU-US Data Privacy Framework where a provider is certified. Transfers out of India follow the DPDP Act and any restrictions the Government of India notifies. Email us for a copy of the relevant safeguards.
9. How long we keep data
- Account data, study material and learning activity: for as long as your account exists. You can delete individual items at any time.
- Voice questions: we do not keep them. The recording is deleted from your phone once it has been answered.
- Onboarding answers given before you sign up: kept only on your phone until you create an account, then stored with your account. Our server uses them to write your study plan and does not store them.
- Hashed installation IDs, IP addresses and browser identifiers used for free-use limits: deleted automatically within about 40 days.
- Server and security logs: up to 90 days.
- Purchase and transaction records: for as long as tax and accounting law requires, generally up to 8 years.
- Content reports, feedback and support emails: for as long as we need to deal with them and improve our safeguards, then deleted. You can ask us to delete them sooner.
- Your contact in our email system: until you delete your account. Marketing emails stop as soon as you unsubscribe.
- Website analytics and session replays: up to 12 months.
- After you delete your account, your data is removed from our live systems straight away and from any backups within 90 days, except the records described in “Deleting your account”.
10. Deleting your account
You can delete your account and its data at any time. The full instructions, including what is deleted and what we keep, are on our account deletion page: https://www.omnistudyai.com/legal/delete-account
In the Android app
- Open the Profile tab → Settings → Data controls → Delete account, and confirm.
On the website
- Sign in at https://www.omnistudyai.com, open Settings, and choose Delete account.
Without the app
- Email suvedita7@gmail.com from the address on your account with the subject “Delete my account”. We will delete the account within 30 days and confirm by email.
Deleting your account does not cancel a subscription bought through Google Play. Cancel it first in the Google Play Store app: Profile → Payments & subscriptions → Subscriptions.
You can also delete some data and keep your account: delete saved study items, remove uploaded files (Profile → Settings → Uploads), change your profile photo, and unsubscribe from marketing emails.
11. Your rights
Wherever you live, you can ask us to access, correct, export or delete your personal data, and you can withdraw your consent at any time. You can do much of this yourself in the app. Depending on where you live, you may also have the rights below.
India (Digital Personal Data Protection Act, 2023)
- Obtain a summary of your personal data, how we process it, and who we have shared it with.
- Correct, complete, update or erase your personal data.
- Withdraw consent at any time, as easily as you gave it. This does not affect processing already done, and some features may stop working.
- Nominate someone to exercise your rights if you die or become unable to.
- Have your grievance handled by us and, if you are not satisfied, complain to the Data Protection Board of India.
EU, EEA and UK (GDPR and UK GDPR)
- Access, rectification, erasure, restriction of processing, and data portability.
- Object to processing based on legitimate interests, and to direct marketing at any time.
- Withdraw consent at any time.
- Complain to your local data protection authority.
United States, including California
- Depending on your state, you may have the right to know about, access, correct, delete and get a copy of your personal information, and to opt out of targeted advertising, “sales” and “sharing”.
- We do not sell personal information. The Meta Pixel on our website may count as “sharing” for targeted advertising under some state laws. You can opt out with “Cookie preferences” in the website footer. The Android app does not share data for advertising.
- We will not treat you differently for exercising your rights.
Brazil (LGPD) and other countries
- You have the rights your local law gives you, including confirmation that we process your data, access, correction, anonymisation or deletion, portability, information about sharing, and withdrawal of consent.
To exercise a right, email suvedita7@gmail.com from your account’s email address, or tell us which account your request is about. We may need to confirm your identity first. We reply within one month. Some laws let us extend that for complex requests; if we need to, we will tell you why.
12. Children and teenagers
OmniStudy is for students aged 13 and over. It is not directed at children under 13, and we do not knowingly collect personal data from them. If you are under 13, please do not use OmniStudy.
If you are under 18, or under the age at which you can consent to data processing where you live (up to 16 in some EU countries), you may use OmniStudy only with the permission of a parent or legal guardian, who should read this policy with you. Parents and guardians can contact us to review or delete their child’s data.
The app contains no ads and does not track anyone for advertising. If you believe a child under 13 has given us personal data, email us and we will delete it.
13. How we protect your data
- Data travelling between the app, the website and our servers is encrypted in transit (HTTPS/TLS).
- Data is stored on Google Cloud, which encrypts it at rest.
- Security rules limit each account’s data and files to the account’s owner, and our server checks who you are before every request.
- Payment details are handled only by Google Play and our payment processor.
- Access to production systems is limited to the developer.
No system is completely secure. If a personal data breach affects you, we will tell you and notify the authorities the law requires, including the Data Protection Board of India and CERT-In and, where the GDPR applies, the supervisory authority within 72 hours.
15. Links to other services
OmniStudy links to services we do not control, such as Google Play and YouTube. Their own privacy policies apply to them.
16. Changes to this policy
We may update this policy when our practices or the law change. We will change the “Last updated” date above. Before an important change takes effect, we will tell you in the app or by email, and ask for your consent again where the law requires it.
17. Contact
OmniStudy, operated by Suvedita Ambashtha, India. Email: suvedita7@gmail.com. This is also the contact for our Grievance Officer.
If you are not satisfied with our reply, you can complain to the Data Protection Board of India, to your data protection authority in the EU, EEA or UK, or to the regulator where you live.