What happens to your email, and what will happen to your lectures.
1 · Who is responsible for your data
TheStudyFix is built by one medical student, Betra Youhanna, based in Egypt, under the name TheStudyFix (thestudyfix.com). TheStudyFix is not yet a registered company. That person decides what happens to your data. In data-protection law, that makes them the controller.
Contact for anything on this page: betra@thestudyfix.com. A person reads it, not a bot.
2 · The waitlist — the only thing collected today
If you put your email in the box on the home page, this is everything that happens to it. It was written down before the form was switched on, which is the rule section 5 sets.
- What it is used for
- Two things only. First, to send you the video demo you signed up for. Second, to tell you when the app opens. It is not used for anything else, and it is never sold, rented, or shared to build an audience anywhere.
- What is stored
- Your email address. The time you signed up. Which page the signup came from (today that is always the home page). The first 200 characters of the description your browser sends with every request (its "user agent"), kept only to spot floods of automated signups.
- Your IP address
- Not stored as an address. Your IP address is mixed with a secret key and scrambled into a code (a "salted hash"). The code is used for one thing: counting how many signup attempts came from the same place in the last hour, so a script cannot stuff the list. It allows five attempts an hour. The code is kept with your signup, and a separate log keeps the code and the time of every attempt, including failed ones. Without the secret key it cannot practically be turned back into your address. It is still treated here as personal data, because in law it is.
- What is never stored
- Your name, your country, your university, any tracking or advertising identifier, and any record of what you looked at on this site.
- Where it lives
- A database run by Cloudflare, in the same account that serves this page. There is no third-party form service, and nothing on this site can read the list back out.
- The Google Sheet copy
- A copy of your email address, your signup time and the time it was copied is written into a private Google Sheet, so the list can be read without a database console. Nobody else is given access to that sheet.
- The bot check
- The home page runs Cloudflare Turnstile, a check that a real browser is present. It runs when the home page loads, whether or not you sign up. To do that, Cloudflare sees your IP address and some technical properties of your browser. When you sign up, this site's server also passes your IP address to Cloudflare to confirm the check. Your email address is never sent to the check. Cloudflare states that Turnstile is not used for advertising or to follow you across other sites. It is here because without it a script can fill the list with fake addresses.
- The emails you will get
- The video demo, news when the app opens, and marketing emails from TheStudyFix: product updates and offers for TheStudyFix itself. Nothing from anyone else, ever. Every email will say how to unsubscribe, and replying "unsubscribe" always works. No emails have been sent yet. The service that sends them will be named on this page before the first one goes out, and it will receive your address only to deliver them.
3 · The legal basis, in plain words
Your consent. You typed your email into a box that says what it is for. That is the legal basis under the UK and EU General Data Protection Regulation (GDPR) and under Egypt's Personal Data Protection Law (Law No. 151 of 2020). You can withdraw consent at any time, and it is as easy as signing up: unsubscribe, or email betra@thestudyfix.com.
The IP code and the user-agent text are kept for a different reason: keeping the form safe from abuse. That is a legitimate interest, meaning a genuine need that is small and does not override your privacy. You can object to it by emailing the address above.
For readers in the US: the emails will not use misleading subject lines or sender names, and an unsubscribe request will be honoured promptly, as the CAN-SPAM Act requires.
4 · Who handles it for TheStudyFix, and where
Three outside companies touch waitlist data. Each one only handles it to provide its service:
- Cloudflare hosts this site, stores the waitlist database, and runs the bot check. Like any web host, it also handles the IP address and browser details that every website visit sends, to deliver pages and block attacks.
- Google holds the spreadsheet copy (see section 2).
- An email delivery service will deliver the emails. It will be named here before the first email is sent.
These companies may store or process data outside your country, including in the United States. Where UK or EU data leaves those regions, the transfer relies on the legal safeguards these companies offer in their data terms, such as the European Commission's standard contractual clauses.
5 · Cookies, storage, and what is measured
This site sets no cookies of its own, and its code contains no analytics, no session recording, and no advertising tags. It stores two small things in your own browser, and neither is sent anywhere:
- Your theme choice. If you press Auto, Light or Dark, that one word is saved in your browser's "local storage" so the next page opens the same way. Clearing this site's data in your browser removes it.
- Which fold-out panels you opened. Saved in "session storage", which your browser deletes when you close the tab.
The fonts are served from this site, not from Google. The only outside script is the Cloudflare bot check on the home page (section 2). Links to research papers take you to other sites, which have their own policies.
If anything else is ever measured, it will be declared on this page before the first measurement is taken, not after.
6 · How long it is kept, and your rights
- How long
- Your email is kept until you unsubscribe or ask for it to be deleted. There is no fixed end date, because it is what lets TheStudyFix keep emailing you, which is what you signed up for. The log of signup attempts (a scrambled IP code and a time, used only to stop floods of fake signups) is deleted automatically after 30 days.
- Your rights
- You can ask to see the data held about you, get it corrected, get it deleted, withdraw your consent, or object to how it is used. You do not need to give a reason.
- How to use them
- Email betra@thestudyfix.com from the address you signed up with, and say what you want. You will get an answer within one month. Deletion covers the database and the spreadsheet copy. Cloudflare keeps short-lived database backups, so a deleted address can survive in them for up to 30 days before it is gone for good.
- If you are unhappy
- Tell betra@thestudyfix.com first. You also have the right to complain to a data protection regulator: in the UK the Information Commissioner's Office (ICO), in the EU the regulator in your country, and in Egypt the Personal Data Protection Centre.
- Age
- The waitlist is for medical students aged 16 or over. If you are younger, please do not sign up.
- Changes to this page
- The date at the top changes whenever this page does. If a change affects how your email is used, you will be emailed about it before it applies.
7 · Later: when the app exists — not in force yet
Nothing in this section applies today. No lectures are uploaded or processed yet. It states how the app is meant to treat your material, so the intent can be checked now. The app will have its own full privacy terms at launch.
7.1 · Your lecture material stays yours
Uploading a lecture does not transfer anything. What is held is a processing licence — permission to run the pipeline over that file in order to produce your material, and nothing wider. It does not extend to training models on your content, to sharing it, or to using it to build anything another user receives.
Lecture slides are usually somebody else's copyright — your school's or your lecturer's. That is exactly why the licence is narrow: the material is processed on your behalf, as your agent, for your use.
7.2 · What you get out is yours too, and you can take it
The cards and questions generated from your lectures are yours. If you stop paying you can export all of it, in full, free. There is no exit fee and no reduced-quality export. The terms state this as an obligation rather than here as a promise.
7.3 · How long it is held, and how to remove it
Two separate clocks, and they should not be confused:
- Source files. The uploaded lecture is needed only while the pipeline runs and while you can still audit the output against it.
- Generated material. Yours, kept while your account exists, exportable at any point.
How long uploaded lectures and generated material are kept will be set here before the app launches.
7.4 · Error reports
Error reports, when they exist, will carry a stack trace and a route. Not your lecture text, not your filenames, not your card content.
7.5 · The honesty clause
Output is machine-generated and coverage-audited. It is not guaranteed complete or correct, and where coverage could not be verified the product says so rather than rounding up to a tick. Every generated item carries the slide it came from precisely so that you can check it. Checking it is the intended use, not a fallback.
Contact
betra@thestudyfix.com — for questions, access, correction, deletion, or to unsubscribe.