Privacy policy

StudyPattern is operated by Quillplan LLC, doing business as StudyPattern, in Indianapolis, Indiana, United States. This policy covers studypattern.com and the StudyPattern student app. Contact us at support@studypattern.com with privacy questions or requests.

Information we collect

• Account information. Your name, email address, verification status, and account identifiers. For email sign-in, we store a password hash, not your readable password. If you choose Google sign-in, Google provides basic identity information, which can include your name, email, profile image, and authentication tokens. We do not receive your Google password or request access to Gmail, contacts, or Drive.
• Study information. Your exam enrollment, optional test date, target score, weekly Study Commitment, answers, answer timing, Diagnostic results, lesson progress, practice history, and derived progress indicators such as Strength and Score Estimate.
• Technical information. Session identifiers, IP addresses, browser information, request times, and operational or security logs needed to serve the site, keep you signed in, and investigate errors or abuse.
• Support messages. Your email address and information you choose to include when you contact us. Please do not send passwords, verification links, or other secrets.

Billing information

If you purchase a plan, Stripe processes your payment details. We share your account email and an internal account identifier with Stripe and store customer, subscription, and payment references to manage your access and provide billing support. Full card numbers and security codes are handled by Stripe and are not stored in StudyPattern’s database.

How we use information

We use this information to create and protect your account, deliver verification and password-reset emails, save your work, provide study recommendations and progress indicators, respond to support requests, and maintain the service. We also use study results to understand question performance and improve the learning experience.

We do not sell your personal information or share it for cross-site targeted advertising. We use PostHog product analytics and session replay to understand navigation, onboarding, study activity, and billing flows and improve the app. On the marketing website, we collect page visits, referring domains, campaign labels, and key link clicks; session replay is disabled there. We connect marketing visits to app activity using a shared browser identifier. Analytics uses an internal account identifier rather than your name or email. Replays reconstruct page interactions such as clicks and scrolling; form inputs and account details are masked. Password-reset and verification screens are excluded. We do not record console logs, network request bodies, or card details. Analytics includes plan and payment amounts, practice concepts and whether submitted answers were correct, but not the answer text. Student answers are not sent to an AI model provider as part of the current study experience.

Cookies and browser storage

The student app uses necessary cookies for sign-in and security. PostHog uses cookies and browser storage to connect visits and interactions. The app also stores onboarding progress in your browser so you can return to setup. You can clear cookies and site data in your browser; doing so may sign you out or reset local setup progress. Clearing browser data does not delete the account or study history stored on our servers.

We do not track you across other companies’ websites for advertising, and we do not change these practices in response to a browser’s Do Not Track signal.

Service providers and other disclosures

We use service providers for website delivery, application and database hosting, transactional email, support email, and error and performance monitoring. They process the information needed to provide those services. Cloudflare delivers our websites, Fly hosts the API, Neon hosts the database, and Resend delivers account emails. PostHog processes product usage events and masked session recordings in its US Cloud region. Sentry processes technical errors, stack traces, service logs, and sampled performance traces. We configure monitoring to exclude student answers, account credentials, authentication tokens, and request bodies. Google processes sign-in requests when you choose that option, under its own privacy policy as well as our use described here.

We may disclose information when required by law or reasonably necessary to protect users, investigate abuse, or protect legal rights. If the business is transferred, personal information may be transferred with it, subject to applicable law and notice of material changes.

Retention and security

We retain account and study information to provide the service while your account remains open. You can request account deletion at any time. We may retain limited records where needed for security, resolving disputes, or legal obligations. Deleted information may remain in backups until those backups rotate out; we do not use backup copies for ongoing study features. Aggregate question statistics that no longer identify you may be retained.

We use safeguards such as encrypted connections, password hashing, and restricted access to production systems. No service can guarantee absolute security. StudyPattern operates from the United States, and our providers may process information in the United States or other countries where they operate.

Your choices and requests

You can change or clear your optional study goals in Settings. To request access to, correction of, a copy of, or deletion of your personal information, email support@studypattern.com. We verify account ownership before releasing information or deleting an account. Account deletion removes access to your saved study history.

Your rights depend on where you live. We respond to requests as required by applicable law. If you disagree with our response, reply to request a review; you may also contact your local privacy regulator where that right applies.

Children

StudyPattern is designed for people preparing for graduate and professional school exams, not children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and remove it as appropriate.

Changes to this policy

We will update the date on this page when this policy changes. For material changes, we will provide additional notice through the app or email when required. Our support page explains how to contact us.