Privacy Policy

Last Updated: March 2026

1. Introduction

Welcome to StudyNest. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

  • Identity Data: First name, last name, or Google display name (if you sign in via Google).
  • Contact Data: Your email address.
  • Technical Data: Internet protocol (IP) address, your login data, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
  • Usage Data: Information about how you use our website, such as your syllabus tracking progress and past papers accessed.

3. How We Collect Your Data

We use different methods to collect data from and about you, including:

  • Direct interactions: You may give us your Identity and Contact Data by filling in forms or creating an account.
  • Third parties: If you choose to authenticate via Google Sign-In, we receive Identity and Contact Data from Google.
  • Automated technologies: As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions, and patterns using Google Tag Manager and cookies.

4. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data under the following lawful bases:

  • Performance of a Contract: To register you as a new user, manage your account, and save your revision progress.
  • Legitimate Interests: To study how users interact with our platform so we can improve our features, and for system administration and IT security.

5. Disclosures of Your Personal Data & Third Parties

We do not sell your personal data. We may share your data with the following trusted third-party service providers acting as processors:

  • Google LLC (Firebase): Used for secure user authentication, database hosting, and cloud storage.
  • Google Tag Manager / Analytics: Used to monitor network traffic and analyze user behavior to improve our educational tools.

6. Data Security and Retention

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for (e.g., maintaining your account).

7. Your Legal Rights

Under UK data protection laws, you have rights in relation to your personal data, including the right to request access, correction, and erasure of your personal data. To exercise any of these rights, please contact us.