Privacy Policy

1. Data Controller

The data controller for this platform is Artur Mata Rodriguez. For any privacy-related queries, contact us at contact@studybridge.es.

2. Age Restriction

StudyBridge is restricted to users aged 14 and over. By creating an account, you confirm that you are at least 14 years old. Under Spanish data protection law (LOPDGDD, Art. 7), individuals aged 14 and over may consent to the processing of their personal data without parental consent.

3. Data We Collect

We collect the following personal data when you use StudyBridge:

  • Account information: Name, email address, year group, password (stored as a SHA-256 hash — we never store your password in plain text)
  • Academic information: Subjects, curriculum, exam board, grades, learning style preferences
  • Scheduling data: Available time slots
  • Meeting data: Session records, reviews, and feedback
  • Usage data: Anonymous analytics collected via Vercel Analytics

4. Legal Basis for Processing

We process your data based on:

  • Consent: You provide explicit consent when creating your account and accepting these terms
  • Legitimate interest: To operate and improve the peer tutoring service

5. How We Use Your Data

Your data is used to:

  • Match students with appropriate tutors
  • Display relevant information to tutors (subject needs, availability, learning style)
  • Schedule and manage tutoring sessions
  • Track tutoring hours for CAS and DofE portfolios
  • Send email confirmations when sessions are booked

6. Data Storage and Security

Data is stored in Supabase (hosted in the London, UK region). Passwords are hashed using SHA-256 before storage — we never have access to your plain text password. All connections use HTTPS/TLS encryption.

7. Data Retention

Your data is retained for as long as your account is active. After account closure, personal data will be deleted within 12 months. Anonymous, aggregated data (e.g. total sessions count) may be retained indefinitely for impact reporting.

8. Data Sharing

We do not sell or share your personal data with third parties for marketing purposes. Your data is only shared with:

  • Other users: Tutors can see student requests (name, subject, year, availability, learning style). Students can see tutor profiles.
  • Service providers: Supabase (database hosting), Vercel (web hosting and analytics), Resend (transactional emails)

9. Your Rights (GDPR)

Under the GDPR and Spanish LOPDGDD, you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Erase your data (“right to be forgotten”)
  • Restrict processing of your data
  • Data portability — receive your data in a structured format
  • Object to processing
  • Withdraw consent at any time

To exercise any of these rights, email contact@studybridge.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

10. Cookies

StudyBridge uses localStorage for session management. We use Vercel Analytics, which collects anonymous, aggregated usage data without cookies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

Last updated: August 2026

← Back to home