Privacy Policy

We collect only the data necessary to provide the StudyDesk service. This includes:

• Account information: your name, email address, and phone number provided during registration. • Membership data: your assigned seat, shift, plan, and membership dates managed by your library admin. • Attendance records: check-in and check-out timestamps generated when you scan QR codes at your library. • Payment records: transaction history and payment status for membership fees — we do not store card or bank details directly. • Device information: basic app and device data for performance monitoring and crash reporting.

Your information is used solely to operate and improve the StudyDesk platform:

• To create and manage your library account and membership. • To enable QR-based attendance tracking at your library. • To process and record membership payments. • To allow your library admin to manage seat assignments, shifts, and renewals. • To send important account notifications such as membership expiry reminders. • To improve platform performance, fix bugs, and develop new features.

We do not sell your personal data to third parties — ever. Your information is shared only in these limited circumstances:

• With your library admin: your name, contact details, seat, shift, attendance records, and payment status are visible to the admin of the library you have joined. This is essential for running the library. • With payment processors: transaction data is shared with Razorpay to process payments securely under their own privacy policy. • For legal compliance: we may disclose information if required by applicable law, court order, or government authority.

We take the security of your data seriously:

• Passwords are hashed using bcrypt and are never stored in plain text. • All data is transmitted over HTTPS with TLS encryption. • Access to production systems is restricted to authorized personnel only. • We regularly review our security practices and infrastructure.

While we implement industry-standard safeguards, no system is completely immune to risk. We encourage you to use a strong, unique password and keep it confidential.

StudyDesk uses minimal tracking technology:

• Session cookies are used to keep you logged in securely on the web platform. • We do not use third-party advertising trackers or sell your browsing behavior. • The mobile app does not use persistent tracking identifiers beyond what is required for authentication.

You can clear cookies from your browser at any time without affecting your account data.

We retain your data for as long as your account is active or as needed to provide services. Specifically:

• Attendance and payment records are retained for record-keeping and dispute resolution. • If you request account deletion, we will remove your personal profile within 30 days, subject to any legal retention obligations. • Library admins may retain historical data (such as anonymized attendance reports) even after a member account is deleted.

To request deletion of your data, contact your library admin or email us at support.studydesk@gmail.com.

You have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you. • Correction: You can update inaccurate information from your profile settings or by contacting support. • Deletion: You can request that we delete your personal data, subject to legal retention requirements. • Portability: You can request your data in a portable format. • Objection: You can object to certain types of data processing.

To exercise any of these rights, email us at support.studydesk@gmail.com.

StudyDesk is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will take steps to delete such information.

StudyDesk integrates with the following third-party services that have their own privacy policies:

• Razorpay: for payment processing (razorpay.com/privacy) • Vercel: for web hosting and edge delivery • Resend / SMTP: for transactional email delivery

We recommend reviewing these policies independently. We are not responsible for the privacy practices of external services.

We may update this Privacy Policy from time to time as our services evolve or legal requirements change. When we make significant changes, we will update the 'Last updated' date at the top of this page and, where appropriate, notify you via email or an in-app notice.

Your continued use of StudyDesk after changes are published constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Email: support.studydesk@gmail.com

We aim to respond to all privacy-related enquiries within 5 business days.