Studyio Privacy Policy

Last updated: August 12, 2026

This Privacy Policy explains how Studyio ("Studyio", "we", "us" or "our"), a sole proprietorship operating from Alberta, Canada, collects, uses, discloses and protects personal information when you use studyio.ca and our related services (the "Service").

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta's Personal Information Protection Act (PIPA).

Studyio is used by students, many of whom are minors. We take that seriously: we collect the minimum information needed to run a learning platform, we never sell personal information, and we never use student learning data to build advertising profiles.

1. Scope of this policy

This policy applies to personal information we collect through the Service — our website, lessons, quizzes, practice tests, calculators, AI tutor, teacher dashboard and related email.

It does not apply to third-party websites or services we link to, which have their own privacy policies.

The Service is intended for users in Canada. If you access it from elsewhere, you do so on your own initiative and are responsible for compliance with local law.

2. Information we collect

a. Information you give us

Account information — your name, email address and the grade or course you select when you sign up.
Sign-in information — if you sign in with Google, we receive your name, email address and a unique identifier from that provider. We never receive your Google password.
Teacher and school information — if you register as a teacher, the school or organization name you provide, and the classes you create.
Payment information — the billing details you enter at checkout. These go directly to our payment processor; we never receive or store your full payment card number. We keep a record of your plan, subscription status, renewal dates and payment history.
Communications — the content of emails and support requests you send us.
Survey responses — answers you choose to give in optional in-product surveys.

b. Information created as you learn

Learning activity — lessons opened and completed, unit and lesson progress, time spent in a lesson, and streaks.
Assessment activity — quiz, unit test and practice exam attempts, the answers you select, your scores, your question history and time taken.
Rewards activity — coins, mystery-box results and similar in-product rewards.
AI tutor conversations — the messages you send to the AI tutor. We do not store the content of these conversations on our servers. Your messages stay in your browser for the current session and are sent to our AI provider to generate a reply; we keep only a count of how many questions you have asked, to apply fair-use limits.

c. Information collected automatically

Device and log information — IP address, browser type and version, device type, operating system, referring page, pages viewed, and the dates and times of your visits.
Approximate location — a general region inferred from your IP address. We do not collect precise GPS location.
Cookies and local storage — see section 9.

Please do not send us sensitive personal information. We do not ask for, and you should not submit, health information, financial account details, government identification numbers, or information about your racial or ethnic origin, religion, political opinions, sexual orientation or biometrics — including through the AI tutor.

3. Why we collect it

We identify the purposes for which we collect personal information before or at the time we collect it. We use your information to:

create and administer your Account, and authenticate you when you sign in;
deliver the Service — show lessons, run quizzes and tests, and mark your work;
save and display your progress, streaks, history and rewards across your devices;
generate AI tutor responses to the questions you ask;
process payments, manage subscriptions and renewals, and prevent payment fraud;
send you service messages such as verification codes, receipts, renewal notices and security alerts;
provide customer support and respond to your questions;
understand how the Service is used, in aggregate, so we can fix problems and improve lessons and features;
keep the Service secure — detect, investigate and prevent abuse, account sharing, fraud and security incidents;
send marketing email where you have consented, and measure our advertising (see sections 8 and 9); and
comply with our legal obligations and enforce our Terms of Service.

We do not use student learning data — your progress, answers, scores or AI tutor conversations — for advertising or ad targeting, and we do not sell it. If we ever want to use your information for a materially new purpose, we will identify that purpose and obtain your consent first.

4. Your consent

We collect, use and disclose personal information with your consent, except where the law allows or requires otherwise.

Express consent — you give this when you create an Account and agree to this policy, when you opt in to marketing email, and when you submit optional information such as a survey response.
Implied consent — where the purpose is obvious and you voluntarily provide the information, such as emailing us a support question.
Without consent — in the limited circumstances PIPEDA and PIPA permit, such as investigating a breach of an agreement or a contravention of law, responding to an emergency that threatens someone's life, health or security, or complying with a court order or a lawful request from an authority.

You may withdraw your consent at any time, subject to legal and contractual restrictions and on reasonable notice, by contacting us at hello@studyio.ca. We will tell you what withdrawing consent means in your situation — for most uses, it means we can no longer provide the Service, and your Account will be closed.

5. Children and guardians

Studyio is designed for secondary school students. You must be at least 13 years old to create an Account, and we do not knowingly collect personal information from children under 13.

If you are under 18, you may only use the Service with the permission of a parent or legal guardian, and that guardian consents to this policy on your behalf.

If you are a parent or guardian and believe a child under 13 has created an Account, email us at hello@studyio.ca and we will delete the Account and its personal information promptly.

A parent or guardian may ask to review, correct or delete the personal information of a minor in their care. We will verify the relationship before acting on the request, and we may involve the student where they are old enough to exercise their own privacy rights.

6. Students in school-provided classes

Where a school, school authority or teacher provides Studyio to a class, the school decides what student information to give us, and is responsible for any consent or notification required under the Freedom of Information and Protection of Privacy Act (Alberta).

In that situation we act as the school's service provider: we handle student personal information only to deliver the Service to that school, on the school's instructions, and we do not use it for our own marketing. A teacher or school administrator may see progress and performance information for students in their class.

Students and parents with questions about a school-provided account should contact the school first, and may also contact us at hello@studyio.ca.

7. Who we share information with

We do not sell, rent or trade your personal information. We share it only in the ways described below.

a. Service providers

We use third-party providers to run the Service. They may access personal information only as needed to perform their function for us, under contracts requiring them to protect it and not to use it for their own purposes. Below is every category of provider we rely on, what it does, and where it processes information.

If you need to know exactly which companies we use — for example, because you are a school or school authority carrying out a privacy or FOIP review — contact us at hello@studyio.ca and we will provide the list.

Cloud infrastructure and authentication: Your account and sign-in, our database, file and audio storage, and background processing. This provider also sends account emails such as sign-up verification codes. Your account and learning data are hosted in Canada.
Sign-in with Google (optional): If you choose to sign in with Google, Google confirms your identity to us and provides your name, email address and a unique identifier. We never receive your Google password. United States.
Website hosting and content delivery: Serving the website. Content is delivered from a global edge network, and server logs may be processed outside Canada. United States.
Payment processing: Subscription billing, payment processing and payment fraud prevention. Our payment processor handles your card details directly, under its own privacy policy; we never receive or store your full card number. United States and other countries.
AI provider: Generating AI tutor responses. Your messages to the AI tutor are transmitted to a third-party AI provider to produce a reply. United States.
Voice generation: Producing the recorded narration used in our lessons. This uses lesson scripts, not your personal information. United States.
Email delivery: Delivering the support and feedback messages you send us to our inbox, and sending marketing email to subscribers who have consented. United States, United Kingdom and European Union.
Advertising measurement: Measuring the effectiveness of our advertising through the Meta Pixel and Google Ads conversion tracking — see section 9. United States.

b. Other disclosures

Schools and teachers — where you are a student in a school-provided class, as described in section 6.
Legal and safety — where we are required or permitted by law, such as in response to a court order, subpoena or lawful request from a government authority; to investigate suspected fraud, security incidents or breaches of our Terms; or to protect the rights, safety or property of any person.
Business transfer — if the business is reorganized, sold or transferred, personal information may be transferred as part of that transaction. We will require the recipient to protect it under terms consistent with this policy, and we will notify you of any change in who controls your information.
With your direction — where you ask us to share it.

8. Storage and processing outside Alberta and Canada

Your account, your learning activity and our database are hosted in Canada, in a Canadian region of our cloud infrastructure provider.

Notice under section 13.1 of Alberta's Personal Information Protection Act. Some of the service providers listed in section 7 store or process personal information outside Alberta and outside Canada — in the United States (website hosting and edge delivery, payments, AI tutor responses, sign-in with Google, voice generation, support email and advertising measurement) and in the United Kingdom and European Union (marketing email).

We use these providers for the purposes described beside each one in section 7. The categories of personal information that leave Canada are limited to what each provider needs — for example, your billing details go to our payment processor, and your AI tutor messages go to our AI provider.

While personal information is outside Canada, it is subject to the laws of the country where it is held, and may be accessible to the courts, law enforcement and national security authorities of that country. We require every provider by contract to protect personal information with safeguards comparable to those we apply ourselves.

If you have questions about our use of service providers outside Canada, or about how they handle personal information, contact us at hello@studyio.ca. We will answer, and we will put you in touch with the person who can answer questions about a specific provider's practices.

9. Cookies, analytics and advertising

We use cookies, local storage and similar technologies for a small number of purposes:

Strictly necessary — keeping you signed in, maintaining your session, remembering your course selection and saving quiz progress so a refresh does not lose your work. The Service does not function without these.
Preferences — remembering settings such as your selected grade.
Advertising measurement — the Meta Pixel and Google Ads conversion tracking, described below.

The Meta Pixel

We use the Meta Pixel to measure how well our advertising works — for example, to know that a visitor who saw an ad later signed up. When you are signed in, your email address is provided to the pixel, which converts it into a hashed (scrambled) value before sending it to Meta, so Meta can match the activity to a Meta account without receiving your address in readable form. We also send a unique account identifier for the same purpose.

Google Ads conversion tracking

We use the Google Ads tag for the same purpose — to know that a visitor who clicked one of our Google ads later signed up or subscribed. When you are signed in, your email address is provided to the tag, which converts it into a hashed (scrambled) value before sending it to Google, so Google can match the activity to a Google account without receiving your address in readable form.

We do not send Meta or Google your learning data — no lesson progress, no answers, no scores, no AI tutor conversations.

Your choices

You can block or delete cookies in your browser settings. If you block strictly necessary cookies, you will not be able to sign in or use the Service.
You can control ad personalization in your Meta account settings and at adssettings.google.com, and opt out of interest-based advertising through the Digital Advertising Alliance of Canada at youradchoices.ca.
Most browsers offer a “Do Not Track” signal. There is no common standard for how sites must respond to it, and we do not currently respond to it.

10. How we protect your information

We maintain physical, organizational and technological safeguards appropriate to the sensitivity of the information, including:

encryption of data in transit using HTTPS/TLS, and encryption at rest with our infrastructure providers;
passwords managed by a dedicated third-party identity service — we never see or store your password;
access to production systems and personal information limited to those who need it to do their job;
rate limiting, authentication checks and monitoring to detect abuse; and
established, reputable providers for payments, hosting and authentication.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Please help by using a strong, unique password and keeping it confidential.

If a breach of security safeguards involving your personal information creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by law, and we will keep records of breaches as PIPEDA requires.

11. How long we keep it

We keep personal information only as long as we need it for the purposes described in this policy, or as long as the law requires.

Account and learning data: Kept while your Account is open, so your progress and history stay available to you.
After you close your Account: Deleted or anonymized within 90 days, except where we must keep something longer for a legal reason.
Billing records: Kept for 7 years after the transaction, as required by Canadian tax and accounting rules.
Server and security logs: Kept for up to 12 months, then deleted.
AI tutor conversations: Not retained by us. Conversations exist in your browser for the current session and are cleared when you close or refresh the page. We keep only the question counts used for fair-use limits.
Marketing lists: Kept until you unsubscribe, after which we retain a minimal suppression record so we do not email you again.

We may keep aggregated or de-identified information — which cannot reasonably identify you — indefinitely, to understand and improve how the Service teaches.

Where we have used personal information to make a decision about you, we will keep it long enough to give you a reasonable opportunity to request access to it, as PIPEDA requires.

12. Your privacy rights

Under PIPEDA and Alberta's PIPA, you have the right to:

Access — ask what personal information we hold about you, how we have used it, and to whom we have disclosed it, and receive a copy;
Correct — ask us to correct information that is inaccurate or incomplete;
Withdraw consent — withdraw your consent to our use of your information, subject to legal and contractual restrictions;
Delete — ask us to close your Account and delete your personal information, subject to the retention periods in section 11;
Ask questions — ask about our privacy practices, including our use of service providers outside Canada; and
Complain — challenge our compliance with this policy.

To exercise any of these rights, email hello@studyio.ca from the address on your Account. We may ask for information to verify your identity — we do this to make sure we do not disclose your information to someone else. We will respond within 30 days, and will tell you in advance if we need more time or if there is a cost. Where we refuse a request in whole or in part, we will explain why and tell you how to challenge that decision.

13. Questions and complaints

We take privacy concerns seriously. Please contact our Privacy Officer first — most concerns are resolved quickly and directly.

Privacy Officer: Privacy Officer, Studyio
Email: hello@studyio.ca
Legal name and mailing address: Provided on request — email hello@studyio.ca and we will respond within 30 days. Schools and school authorities carrying out a FOIP or privacy review should ask, and we will supply it in writing.

If you are not satisfied with our response, you may contact either regulator:

Office of the Privacy Commissioner of Canada: priv.gc.ca · 1-800-282-1376 · 30 Victoria Street, Gatineau, Quebec K1A 1H3
Office of the Information and Privacy Commissioner of Alberta: oipc.ab.ca · 1-888-878-4044 · #410, 9925 109 Street NW, Edmonton, Alberta T5K 2J8

14. Changes to this policy

We may update this Privacy Policy as the Service and the law evolve. When we do, we will change the “Last updated” date at the top of this page.

If we make a material change — such as collecting a new category of information, or using your information for a materially new purpose — we will give you notice by email or through the Service before it takes effect, and obtain your consent where the law requires it.