Privacy Policy

01

Information we collect

Information you provide

• Account information: your email address and password. Your password is transformed into a one-way bcrypt hash before it is stored. We do not retain the readable password you enter.
• Study information: the subject, number of hours, date, and optional journal entry for each study session you save.
• Communications: the information you include if you contact us for support or make a privacy request.

Journal fields are free-form. Please do not enter sensitive personal information that is not needed to track your studying.

Information collected automatically

• Authentication and security information: session identifiers, login status, and related security data used to keep you signed in and protect your account.
• Technical and request information: our hosting provider may process IP address, browser and device type, requested pages, request timestamps, referring page, approximate location derived from IP address, and error or diagnostic information in ordinary server and security logs.
• Preferences:your light or dark theme choice is stored in your browser's local storage under the keytrack-my-studying-theme. This preference is not saved in your Track My Studying account.

Information we create

We calculate totals, calendar views, trends, and other study analytics from the study sessions you save. We collect information directly from you, automatically from your browser and device, and from these calculations.

02

How we use information

We use personal information to:

• create your account, authenticate you, and maintain your session;
• save, retrieve, display, aggregate, and delete your study records;
• provide your private journal, calendar, and study analytics;
• operate, troubleshoot, secure, maintain, and improve the service;
• respond to support requests and privacy requests;
• prevent fraud, abuse, or security incidents; and
• comply with law and protect our rights and the rights of others.

Where European Economic Area or United Kingdom data protection law applies, our legal bases are performance of our contract with you for account and study-tracking features; our legitimate interests in operating, securing, and improving the service; your consent for optional processing where we ask for it; and compliance with legal obligations.

03

Artificial intelligence

We use AI-assisted tools provided by OpenAI in connection with developing, maintaining, troubleshooting, supporting, and improving Track My Studying. Those tools may process the information we choose to provide for a specific task, such as source code, limited technical logs, or the contents of a support request. We aim to minimize or de-identify personal information before using it in this way when practical, and we do not intentionally provide account passwords to an AI provider.

As of the effective date, the website's application code does not automatically send your email address, password, journal entries, or other saved study records to OpenAI or another AI model. If we introduce an optional AI feature that processes user content, we will identify the AI use at the point of use and update this policy before that new processing begins.

We do not use AI to make decisions that produce legal or similarly significant effects about you. AI output can be inaccurate, so it should not be treated as professional advice.

04

Third parties and sharing

We do not sell personal information or share it for cross-context behavioral advertising. Based on the current code and deployment configuration, these are the named service providers that may receive or process personal information:

These providers may use their own subprocessors under their agreements and published privacy materials. The current application code does not include third-party analytics, advertising networks, social-login providers, payment processors, or email-delivery services.

We may also disclose information to courts, regulators, law enforcement, or other parties when reasonably necessary to comply with law, protect safety or rights, investigate misuse, or respond to valid legal process. If the service is involved in a merger, financing, reorganization, or sale, information may be disclosed to professional advisers and the identified transaction parties, subject to appropriate confidentiality protections. These recipients cannot be named in advance because they do not currently exist or depend on the circumstances.

05

Cookies and local storage

We use strictly necessary authentication and security cookies, including a session token, to keep you signed in and protect account requests. You can block or delete cookies in your browser, but account login may stop working. The theme preference described above uses local storage rather than a cookie.

We do not use advertising cookies or third-party analytics. Because we do not sell personal information or use cross-context behavioral advertising, the service does not change its behavior in response to browser Do Not Track or Global Privacy Control signals; there is no sale or advertising share to opt out of under the current practices.

06

Retention

We retain account, authentication, and study information while your account is active and afterward only as reasonably necessary to provide the service, honor deletion requests, maintain security, resolve disputes, enforce agreements, and comply with legal obligations. Session cookies remain until they expire, you sign out, or you delete them. Infrastructure logs and backups follow the applicable provider's retention schedules.

When information is no longer needed, we will delete it or de-identify it, subject to limited backup, security, fraud-prevention, and legal-retention requirements.

07

Your privacy rights

Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of your personal information; to restrict or object to certain processing; to withdraw consent where we rely on consent; and to appeal a denied request. You may also have the right to complain to your local data protection authority. We will not discriminate against you for exercising a privacy right.

To exercise a right, use the contact method in the Contact us section. We may need to verify your identity and account ownership before fulfilling a request. Authorized agents may make requests where applicable law permits it, subject to verification of their authority.

08

Security

We use administrative and technical safeguards intended to protect personal information. Current safeguards include one-way password hashing, authenticated access controls, encrypted connections to the production database, and HTTPS transport when the service is accessed through its production host. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

09

Children's privacy

Track My Studying is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and delete it where required. Users who are minors where they live should use the service only with permission from a parent or guardian.

10

International transfers

We and our providers may process information in the United States and other countries where they operate. Those countries may have different data protection laws from your country. Where required, we rely on contractual or other legally recognized safeguards for international transfers.

11

Changes to this policy

We may update this policy as the service, providers, or law changes. We will post the updated version here and change the “Last updated” date. If a change materially affects how we use information already collected, we will provide additional notice when reasonably required before the new use begins.

12

Contact us

Aryamaan Dash is responsible for Track My Studying's privacy practices. For a privacy question or request, contact Aryamaan using the contact information published on the developer website: