Privacy Policy — StudyLeap
Last updated: September 23, 2026
This Privacy Policy describes how StudyLeap ("we", "us", or "our") collects, uses, and shares information when you use the StudyLeap mobile application (the "App"). By using the App you agree to the practices described here.
1. Who We Are
StudyLeap is a student discovery app that helps you find articles, events, and places near your city, and organise or join student activities. The App is available on Android and iOS. If you have any questions about this policy, please contact us at support@studyleap-app.com.
2. Information We Collect
2.1 Information You Provide
- Account details: When you create an account we collect your email address, first name, last name, and date of birth. You may optionally upload a profile picture. Your first name and profile picture are visible to other signed-in users on activities. Your email, last name, and date of birth are not. If you sign in with Google or Apple, we receive the identifier and any name or photo those services share with us (Apple may hide your email behind a private relay address). Date of birth is provided by you; Google and Apple do not supply it.
- Saved preferences: Your selected city, saved article and event favourites, and the places you recommend are stored on our servers and linked to your account so they sync across devices.
- Feedback: If you submit feedback through the App, we collect the text you enter together with basic device information (device model, operating system version, and platform type). This is used solely to improve the App.
- Event suggestions: If you suggest an event, we collect the event name, location, and an optional link you provide.
- Place suggestions: If you suggest a place, we collect the place name, address, geographic coordinates, city, category, and any optional comment you add.
- Activities: If you create or join an activity we store the listing (title, category, description, city, area, meeting details, times, minimum people, optional capacity), who joined, attendance answers after it ends, and — once the organiser pastes it — a WhatsApp group invite URL. Other signed-in users can see the first name and profile picture of people going, including before they join. Precise meeting details (the location, meeting point, and organiser instructions) are shown once someone has joined, including while the activity is still open. The WhatsApp link is shown only to people who have joined a confirmed activity. After someone has three counted activities, their attendance percentage is visible to other people who joined the same activity.
- Reports and blocks: If you report an activity or user, or block someone, we store that so we can review it and hide listings from people you blocked.
- Terms acceptance: When you first create an activity we record the time you accepted the Activities terms.
2.2 Information Collected Automatically
- Usage data: We use Firebase Analytics to collect information about how you interact with the App — such as screens viewed, tabs opened, and features used. We do not send the text you type into search. This helps us understand which parts of the App are most useful.
- Crash reports: We use Firebase Crashlytics to collect technical crash and error data (stack traces, device type, OS version) so we can diagnose and fix issues.
- Advertising identifiers: The App displays banner advertisements provided by Google AdMob. AdMob may collect your advertising identifier and related data to serve relevant ads. On iOS, you will be asked for permission to track you before any advertising identifier is accessed (App Tracking Transparency prompt).
- Location data: If you grant location permission, the App uses your approximate device location to sort nearby places on the Places tab. Location data is used on-device only for this purpose and is not sent to our servers.
- Push notifications: If you allow notifications, we store a device token so we can send activity updates (for example a confirmed meetup, a cancellation, or an attendance reminder). We use Firebase Cloud Messaging to deliver those notifications.
2.3 Information Stored Locally on Your Device
The App also stores some of this data on your device using encrypted local storage so the App works quickly:
- A copy of your selected city, favourite IDs, and recommended place IDs
- Whether you have completed onboarding
- Your preferred colour theme (light / dark / system)
Theme preference and the onboarding flag stay on the device only. City, favourites, and recommendations are also stored on our Supabase backend while you have an account.
3. How We Use Your Information
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and managing your account | Performance of a contract |
| Verifying that you are aged 18–35 (self-attested date of birth) | Performance of a contract / Legitimate interest |
| Displaying personalised content (articles, events, places) for your city | Legitimate interest |
| Syncing favourites, recommendations, and city across devices | Performance of a contract |
| Providing and improving App features | Legitimate interest |
| Diagnosing crashes and bugs via Crashlytics | Legitimate interest |
| Understanding aggregate usage patterns via Analytics | Legitimate interest |
| Displaying advertisements via AdMob | Consent (iOS ATT) / Legitimate interest (Android) |
| Processing feedback, suggestions, and activity reports you submit | Performance of a contract / Legitimate interest |
| Operating Activities (listings, joins, attendance, safety) | Performance of a contract |
| Applying attendance rules so that, after three counted activities at 50% attendance or below, a person cannot create a new activity and a host can remove them | Performance of a contract |
| Sending activity push notifications you opted into | Performance of a contract / Legitimate interest |
We use attendance answers only for that rule. We do not make other automated decisions about you.
4. Third-Party Services
The App integrates the following third-party services, each governed by their own privacy policy:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Account authentication, database, and profile photo storage | supabase.com/privacy |
| Google Sign-In | Optional sign-in with your Google account | policies.google.com/privacy |
| Apple | Optional Sign in with Apple on iOS | apple.com/privacy |
| Google Firebase Analytics | Anonymised usage analytics | policies.google.com/privacy |
| Google Firebase Crashlytics | Crash reporting | policies.google.com/privacy |
| Google AdMob | Banner advertisements | policies.google.com/privacy |
| Google Firebase Cloud Messaging | Activity push notifications | policies.google.com/privacy |
| Google Maps SDK | Interactive map on the Places tab | policies.google.com/privacy |
| Google Places API | Place search and autocomplete when suggesting a new place | policies.google.com/privacy |
We do not sell your personal data to any third party.
5. Data Retention
- Account data (email, name, date of birth, optional photo, city, favourites, recommendations) is kept until you delete your account from the Account screen, or until you ask us to erase it.
- Activity data (listings, joins, attendance, reports, blocks, and WhatsApp invite URLs) is kept with your account. After you delete your account, listings may remain in anonymised form (“Former member”) so other people’s history stays intact. Attendance already resolved is not recomputed.
- Feedback and suggestions you submit are stored on our Supabase backend for as long as necessary to act on them, after which they are deleted. They may remain if they have already been published as content.
- Analytics and crash data are retained according to the default retention periods of Firebase (Analytics: 14 months by default; Crashlytics: 90 days).
- On-device data remains until you clear the App's data or uninstall it.
6. Your Rights (GDPR)
If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:
- Access: You may request a copy of the personal data we hold about you.
- Rectification: You may ask us to correct inaccurate data.
- Erasure: You may ask us to delete your personal data where there is no legal reason for us to continue processing it. You can also delete your account in the App under Account → Delete account.
- Restriction: You may ask us to suspend processing of your data in certain circumstances.
- Objection: You may object to processing based on legitimate interests.
- Portability: You may request your data in a structured, machine-readable format.
To exercise any of these rights, please contact us at support@studyleap-app.com. We will respond within 30 days.
You also have the right to lodge a complaint with your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
7. Children's Privacy
The App is only for people aged 18 to 35. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
8. Data Security
We take reasonable technical and organisational measures to protect the information we process. Locally stored data is encrypted using your device's secure storage. Communication with our backend uses HTTPS. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
9. International Data Transfers
Supabase and Firebase may process data outside the EEA. Where this occurs, appropriate safeguards (such as Standard Contractual Clauses) are in place as described in their respective privacy policies.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are significant, we will notify you within the App. Continued use of the App after changes are published constitutes your acceptance of the updated policy.
11. Contact
If you have any questions, concerns, or requests relating to this Privacy Policy, please contact:
Studyleap VOF
Reykjavikstraat 62
3543KB Utrecht
The Netherlands
Email: support@studyleap-app.com