Privacy Policy

This Privacy Policy describes how Studentix ("we", "our", "us") collects, uses, and protects your personal information. We are committed to protecting your privacy and comply with the Israeli Privacy Protection Law 5741-1981 and the European Union General Data Protection Regulation (GDPR).

**1.1 Information You Provide:** • Account Information: email address, name, login credentials • Payment Details: processed through secure payment provider (Stripe) • User-Generated Content: notes, tags, personal preferences **1.2 Automatically Collected Information:** • Audio Recordings: stored locally on your device by default • Transcripts: derived from recordings via AI processing • Usage Data: session times, features used, device information • Technical Information: IP address, browser type, operating system, device identifiers • Cookies and Similar Technologies: to improve user experience **1.3 Third-Party Information:** • Data from social media if you choose to connect through them • Analytics information from external service providers

**2.1 Processing Purposes:** • Service Provision: transcription, summarization, flashcard generation, AI tutoring • Quality Improvement: training models to improve Hebrew transcription accuracy • Personalization: tailored recommendations and content suggestions • Communication: service updates, product announcements, technical support • Security: fraud detection and protection against misuse • Analytics: understanding usage patterns to improve the product • Legal Compliance: fulfilling legal obligations **2.2 Legal Basis (GDPR):** • Contract Performance (providing the service) • Consent (where required) • Legitimate Interests (service improvement, security) • Legal Obligation (compliance with law)

**3.1 AI Providers:** We use external AI providers for transcript processing: • Soniox: speech-to-text transcription • ivrit.ai: Hebrew transcription with speaker identification • Google Vertex AI (Gemini): voice AI tutor and content generation • Cartesia: text-to-speech synthesis **3.2 Additional Service Providers:** • Supabase: database storage and authentication • GetStream: WebRTC infrastructure for voice calls • Vercel: hosting and infrastructure • Stripe: payment processing **3.3 No-Sale Policy:** We will never sell your personal information to third parties for advertising or marketing purposes. **3.4 International Transfers:** Information may be transferred to and stored on servers outside Israel. We ensure appropriate protection in accordance with GDPR and Israeli Privacy Law.

**4.1 Data Storage:** • Audio Recordings: stored locally on your iOS device by default • Transcripts and Summaries: stored in encrypted cloud storage (Supabase) • Backups: if you opt for cloud sync, data is securely backed up **4.2 Security Measures:** • Encryption in transit (TLS 1.3) • Encryption at rest (AES-256) • Role-based access control • Regular security audits • Protection against unauthorized access **4.3 Retention Period:** • Account Information: until account closure • Content (recordings, transcripts): until deleted by you or account closure • Usage Data: up to 24 months • Logs: up to 12 months After deletion, backup copies may be retained for an additional 90 days.

**5.1 GDPR Rights:** • **Right of Access:** receive a copy of your personal information • **Right to Rectification:** correct inaccurate or incomplete information • **Right to Erasure:** delete your information ("right to be forgotten") • **Right to Restrict Processing:** limit how we use your information • **Right to Data Portability:** receive data in a structured, common format • **Right to Object:** object to certain processing • **Right to Withdraw Consent:** withdraw consent at any time **5.2 Israeli Law Rights:** • Right to review information collected about you • Right to correct or delete incorrect information • Right to object to use of information for certain purposes **5.3 Exercising Your Rights:** To exercise your rights, contact us at: privacy@studentix.app We will respond to your request within 30 days.

We use cookies and similar technologies: • **Essential Cookies:** required for site operation (authentication, security) • **Analytics Cookies:** help us understand how users interact with the site • **Functional Cookies:** remember preferences and settings You can control cookies through your browser settings. Note that blocking certain cookies may affect site functionality.

Studentix is intended for users aged 13 and above. We do not knowingly collect information from children under 13. If you are a parent and discover your child has provided us with personal information, please contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice in the app. Continued use after changes constitutes acceptance of the updated policy.

**For Privacy Questions:** Email: privacy@studentix.app **Data Protection Officer (DPO):** Email: dpo@studentix.app **Office Address:** Studentix Ltd. Tel Aviv, Israel **Israeli Privacy Protection Authority:** If you are not satisfied with our handling of your inquiry, you may file a complaint with the Privacy Protection Authority at: www.gov.il/en/departments/the_privacy_protection_authority