SquareStudy

Privacy policy

Version 2026-10-20

This policy explains which personal data we process when you use SquareStudy, what we use it for, how long we keep it and what your rights are. SquareStudy is a free app for studying live with another person, in 1:1 sessions with video, audio and chat.

1. Controller and contact

The controller of your data is Nexalix Technologies S.L.U. (NIF B26841171), with its registered address at Avenida Maisonnave 41, 3ºB, 03003 Alicante, España. For any question about your data, or to exercise your rights, write to us at soporte@squarestudy.com.

2. The data we process

• Account: your email address, your name and your account ID. If you sign in with Google, also your Google account ID and the address (URL) of your Google profile photo. If you sign in with a code, the code we email you.
• Profile: your native language, your academic level, the app language, your phone's time zone (to count your study days) and, if you set one, your weekly study goal.
• Study list: the subjects (with their university and degree), the languages and their levels, the civil-service exams and the EBAU subjects you add, including the subject names you type yourself.
• Sessions: who you study with, the mode, the topic you give, the item of your study list you study with, when each session starts and ends, when you join and leave it, and how it ends.
• Chat: the messages you send and receive in each session's chat.
• Study partners: the requests you send and receive (with the session you studied in), whether you accept or decline them and since when you are partners; the last time you used the app and whether you are in a session (your partners only see whether you are online or in a session, and only if you share your presence); and the study invitations you send and receive (mode, item of your study list, topic and how they end).
• Direct messages: the messages you send to and receive from your study partners outside sessions, and whether you have read them.
• Scheduled sessions: the sessions you schedule or open (mode, item of your study list, topic, day, time, length, size and who can see them), the sessions you sign up for, with the item of your list you choose, and when you join or leave a group session.
• Ratings: the positive or negative rating you give and receive at the end of a session, and the trust score we calculate from them. That score is never shown to anyone.
• Reports and blocks: whom you block or report, the reason and any comment you add; with each report, a copy of the last messages of that session's chat (up to 50), and of your direct messages (up to 50), if you have any, as evidence; the reports you receive and how they are resolved; and, if your account is suspended, the date and the reason.
• Technical logs: the IP address, your account ID and a hash of your email, which the server records for security and to keep the service running.

Camera and microphone: when you turn them on, your picture and sound are streamed live to the other person in the session and are never recorded or stored.

3. What we use your data for, and on what legal basis

• Providing the service (performance of the contract you accept with the Terms of use, art. 6(1)(b) GDPR): creating and keeping your account, emailing you sign-in codes, pairing you with another person, connecting the call and the chat, recording sessions and their ratings, showing you your history, your statistics and your streak of study days, connecting you with your study partners, showing them your presence if you share it, and handling your invitations and direct messages.
• Safety and moderation (our legitimate interest, and that of the other users, in a safe service, art. 6(1)(f) GDPR): handling reports and blocks, suspending accounts that break the rules, preventing abuse and keeping security logs.
• Legal obligations (art. 6(1)(c) GDPR): for example, telling the person who reported and the person affected about our moderation decisions, or answering requests from the authorities.

We do not use your data for advertising or to build commercial profiles.

4. Automated decisions

• Matching: the system decides whom you study with based on the mode, your study list, the app language, your native language and the waiting time. Your trust score affects the order in which pairs are formed. It never pairs you with someone you have blocked or who has blocked you.
• Automatic suspension: if several different people report you within a short time, your account is suspended temporarily until a person reviews it. We tell you by email, with the reasons, and you can contest the suspension by replying to that email or writing to soporte@squarestudy.com.

5. Who sees or processes your data

The other person in each session sees your name, your photo, your academic level, the part of your study list you matched on and the topic you give; your picture and your voice, if you turn on the camera and the microphone; and your chat messages. They do not see your email, your trust score or the rest of your study list.

Your study partners (only people you studied with who accepted, or whose request you accepted) see your name and photo, whether you are online or in a session (only if you share your presence, and only if they share theirs), your invitations and your direct messages. Nobody else sees them, and there is no way to search for people. Moderators only read direct messages through a report between the two of you.

The sessions you schedule are visible, with your name, photo, topic, day and time, to people who study the same as you (the same subject, language, civil-service exam or EBAU subject) and to your study partners, or only to your partners if you choose so. People who sign up for a session see the names and photos of the others who signed up, and in a group session every participant sees the others and the session's chat.

Your history, your statistics, your streak and your weekly goal are yours alone: nobody else sees them.

Providers that process data on our behalf (processors, under a contract in line with art. 28 GDPR):

• Hetzner Online GmbH (Germany): hosts our servers and the database, in data centres in Germany (Nuremberg and Falkenstein).
• Cloudflare, Inc. (United States): the network that carries the traffic between the app and our server (network proxy), and the forwarding of the email you send to soporte@squarestudy.com.
• Amazon Web Services EMEA SARL (Luxembourg): sends our emails, such as sign-in codes and notices, with Amazon SES from Frankfurt (Germany).
• LiveKit, Inc. (United States): relays the sessions' audio and video live. It records nothing.
• Anthropic, PBC (United States): classifies the subject names that users type, together with the university, degree and level they belong to, to sort them in the catalogue. We do not send it your name, your email or any identifier of yours.

Google, if you choose "Sign in with Google", processes your data as an independent controller, under its own privacy policy.

Authorities: only when the law requires us to.

International transfers: Cloudflare, LiveKit and Anthropic are in the United States. These transfers rely on the EU-US Data Privacy Framework or, where it does not apply, on the standard contractual clauses approved by the European Commission.

6. How long we keep your data

• Account, profile and study list: until you delete your account.
• Sessions, chat messages and ratings: until either person in the session deletes their account. The effect of a rating on the other person's trust score remains, with no link to you.
• Direct messages: 365 days from when they are sent. If either of you stops being the other's partner or blocks them, the conversation disappears for both of you, and we keep it for up to 30 more days only in case either of you reports the other; then it is deleted. If either of you deletes the account, your conversation is deleted. If either of you reports the other, the copy of up to 50 messages the report keeps is kept like the rest of the report.
• Partners and requests: until either of you stops being the other's partner, blocks them or deletes the account; a declined request is kept, until either of you deletes the account, so that it cannot be repeated.
• Study invitations: 90 days from when they are sent; earlier if either of you deletes the account.
• Scheduled sessions: 90 days from the time they end; earlier, a session is deleted with its host's account and your sign-up with yours. Scheduled sessions you took part in, including one-to-one sessions, stay in the other participants' history, without your messages if you delete your account.
• Subjects you type: they stay in the shared catalogue, with no link to you.
• Reports: while they are open and for 12 months after they are resolved. If either account is deleted, the report is kept all the same, with no link to that account.
• Blocks: until you unblock the person or either account is deleted.
• Email sign-in codes: they expire after 10 minutes and are deleted within two days.
• Technical logs: 15 days.
• Encrypted backups: 14 days; data you delete may remain in them for that long.

7. Your rights

You can exercise, free of charge, your rights of:

• access: to know which of your data we process and to get a copy;
• rectification: to correct inaccurate data (you can change your profile and your study list yourself in the app);
• erasure: to delete your data;
• restriction: to ask us to stop using your data while we resolve a complaint;
• objection: to object to processing based on our legitimate interest;
• portability: to receive the data you gave us in a structured, commonly used format.

To exercise them, write to soporte@squarestudy.com from your account's email. We will answer within one month at the latest. To delete your account and its data you do not need to write to us: open your profile in the app and tap "Delete account", or do it at https://api.squarestudy.com/account/delete.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), at www.aepd.es.

8. Minimum age

SquareStudy is only for people aged 18 or over. If we learn that an account belongs to a minor, we will close it. If you think you are in a session with a minor, report it from the session.

9. No advertising, no tracking

SquareStudy shows no advertising, does not sell your data and includes no third-party tracking or analytics tools (SDKs). These pages use no cookies.

10. Security

The connection between the app and our server is encrypted (HTTPS), the sessions' audio and video travel encrypted, and backups are encrypted.

11. Changes to this policy

If we change this policy, the version date shown above will change. If the change is significant, we will let you know in the app.

See also: Terms of use

Español · English