1. Controller and scope
StudyPath is a study support application operated by Joaquín García in Spain. Contact the controller at hola@juakigarcia.com.
This policy applies to StudyPath for iOS and its related services. StudyPath does not sell personal data or display third-party advertising.
2. Data we process and why
Data stored on your device
The app may store your name, age, education level, goals, availability, preferences, subjects, syllabi, notes, calendar, answers, progress and settings to personalise your plan and preserve your work.
Photos, documents and camera
Selected images or scans are converted to text using Apple technologies on the device. StudyPath does not access your whole photo library. Extracted text is sent to an AI service only when you request content generation or evaluation.
Spoken practice
When you start a practice, the app uses the microphone and speech recognition to create a transcript. Depending on device, language and availability, Apple may process it locally or through its services. When you finish, the transcript may be sent by HTTPS to StudyPath’s private gateway for comparison with the syllabus and feedback.
Artificial intelligence
When you request a plan, syllabus, summary, questions or evaluation, StudyPath sends the chosen text and necessary context over HTTPS. Depending on availability and operational settings, OpenAI, Google Gemini or DeepSeek may process the request. StudyPath does not intentionally retain its content once fulfilled. Do not include confidential or third-party information.
Technical telemetry
StudyPath sends anonymous operational diagnostics required for security and reliability: operation, duration, byte counts, HTTP status, failure stage, App Attest environment and normalised technical codes. Usage analytics is optional and off by default. Telemetry never includes request or response bodies, notes, questions, answers, audio, transcripts, credentials, App Attest assertions or purchase proofs.
Security, subscription and support
To prevent fraud, the app may send identifiers and assertions certified by Apple App Attest and signed StoreKit representations. They are used only for security, access control and service limits. If you contact support, we process your address, message and attachments to respond.
3. Optional permissions
- Camera and photos: import or scan material you choose.
- Microphone and speech recognition: transcribe spoken practice.
- Notifications: remind you about sessions and reviews.
You can revoke permissions in iOS Settings. Refusal only limits the feature that needs them.
4. Providers and international transfers
- Apple: distribution, payments and subscriptions, notifications, photo selection, scanning, speech recognition, App Attest and StoreKit.
- StudyPath private infrastructure: secure receipt of AI requests and telemetry at studypathia.com and, while current app versions migrate, juakigarcia.com.
- OpenAI, Google Gemini and DeepSeek: generation or evaluation of requested content.
These providers may process data in other countries under their policies and lawful transfer mechanisms. We limit processing to delivering the service.
5. Retention, security and your rights
- Local data remains until you delete it or uninstall StudyPath.
- Event telemetry is normally retained for no more than 30 days.
- Certified keys and counters are retained while required to protect the service; subscription checks use a short-lived technical cache.
- Support communications are kept as needed to resolve the request and meet legitimate obligations.
- External providers apply their own retention periods.
We use reasonable security safeguards, although no connected system can guarantee absolute security. You can delete local data in Settings, revoke permissions or email us to exercise rights of access, correction, deletion, restriction, objection or portability where applicable.
Telemetry is not tied to an account. You may also complain to the Spanish Data Protection Agency.
6. Children and changes
Children
StudyPath is an educational tool and does not ask for sensitive data. Where law requires parental consent, it must be used with authorisation and supervision from a parent or guardian. Contact us if you believe a child submitted data improperly.
Changes
We may update this policy when features, providers or legal requirements change. We will publish the new date and, when required, notify users in the app.