1. Who is responsible
The controller for all personal data processed through StuDivo is Alessandro Romanelli, sole proprietorship trading as AR Media Solutions, Via al Boschetto 4, 6900 Lugano, Switzerland. For any privacy request, email info@armediasolutions.net. This policy is written to satisfy the Swiss Federal Act on Data Protection (FADP) and, for users in the EU and EEA, the General Data Protection Regulation (GDPR).
2. Who uses StuDivo
Teachers create an account and run lessons. Students join a teacher's live room with a code and a display name; no student account is needed.
If you are a student, your teacher or their school chose to use StuDivo for the lesson and is responsible for that choice, including informing you and, where required, your parents. Use a first name or nickname. A full name is never required.
3. Data we process
Teacher account
When you sign in with Google we receive your name, email address, profile picture and Google account ID. We never see your Google password. We also store your interface language and, if you subscribe, your Stripe customer reference.
Lessons
The language, topic, level, exercise types and any instructions you enter, and the lesson generated from them. To generate a lesson, these inputs are sent to Anthropic PBC (USA), which returns the text and processes it on our behalf under commercial terms that exclude the use of your data for training. Do not put personal data about students into lesson instructions.
Live rooms
For each room we store the display name of every participant, each answer given to each exercise and whether it was correct, points, join and leave times, and a summary when the room ends. The teacher sees this during and after the lesson. Audio, video and screen sharing are transmitted in real time through LiveKit and are not recorded by StuDivo.
Flashcards
Cards a teacher saves, linked to their account.
Subscription and credits
Your plan, renewal date, credit balance and a ledger of credit movements. Card details go directly to Stripe; we never receive your full card number.
Contact form and technical data
The contact form and server logs work as described in the AR Media Solutions Privacy Policy. In addition, studivo.eu uses Vercel Web Analytics and Vercel Speed Insights, which count page views and measure loading performance without cookies and without any identifier that follows you across sites.
4. Cookies and storage on studivo.eu
- A sign-in session cookie set by our authentication provider Supabase, kept while you stay signed in.
- NEXT_LOCALE, which remembers your interface language for 12 months.
- auth_redirect, a short-lived cookie that returns you to the page you came from after Google sign-in.
- A theme entry in your browser's local storage that remembers light or dark mode.
All of these are strictly necessary for the feature you invoked. StuDivo sets no analytics or advertising cookies, so no cookie banner is shown.
5. Purposes and legal bases
- Providing accounts, lesson generation, live rooms, flashcards and subscriptions: performance of the contract with the teacher (Art. 6(1)(b) GDPR).
- Processing student names and answers: the contract with the teacher and our legitimate interest in delivering the lesson the teacher set up (Art. 6(1)(b) and (f) GDPR). The teacher is responsible for having the right to involve their students.
- Security, abuse prevention, rate limiting, cookieless usage statistics and answering messages: legitimate interest (Art. 6(1)(f) GDPR).
- Invoices and payment records: statutory bookkeeping obligations (Art. 958f of the Swiss Code of Obligations; Art. 6(1)(c) GDPR).
We do not currently rely on consent for any StuDivo processing. Should we introduce a newsletter or optional analytics, we will ask first. Under the Swiss FADP the same processing rests on the corresponding justification grounds.
6. Recipients and processors
- Supabase, Inc. (USA): database and sign-in.
- Vercel Inc. (USA): hosting, content delivery and cookieless analytics.
- Google LLC / Google Ireland Ltd.: Sign in with Google.
- Stripe, Inc. / Stripe Payments Europe Ltd.: subscription payments, acting as an independent controller for payment data.
- LiveKit, Inc. (USA): real-time audio, video and screen sharing in live rooms.
- Anthropic PBC (USA): generation of lesson text from the teacher's inputs.
- Resend (USA): delivery of contact-form messages.
Each provider is bound by a data processing agreement. We do not sell personal data and do not share it for advertising.
7. International transfers
The providers above process data in part in the United States. Google, Vercel and Stripe are certified under the Swiss–U.S. and EU–U.S. Data Privacy Framework. For the other providers we rely on their Framework certification where they hold one, and otherwise on the European Commission's Standard Contractual Clauses with the Swiss addendum.
8. Retention
- Teacher account, lessons and flashcards: until you delete your account or ask us to delete it.
- Live-room data (participant names, answers, summaries): kept with the teacher's account so the teacher can review past sessions, and deleted together with the account or earlier on request.
- Subscription and payment records: 10 years, as Swiss bookkeeping law requires.
- Contact messages and server logs: as set out in the AR Media Solutions Privacy Policy.
9. Children
StuDivo accounts are for adults. Students taking part in a room may be younger. Of them we process only the display name they choose and their answers during the lesson, on the teacher's initiative. We ask students to use a nickname and never request contact details or a date of birth from them.
10. Your rights
You have the right to access the personal data we hold about you, to have inaccurate data corrected, to request deletion, to receive the data you provided in a portable format, to object to processing based on legitimate interest, and to withdraw any consent with effect for the future. We may ask you to verify your identity before acting on a request.
To delete a teacher account, email us from the address linked to the account. We delete the account together with its lessons, flashcards and room data within 30 days, keeping only what bookkeeping law requires. If you took part in a room as a student, ask your teacher or email us with the room code and the name you used.
You may also lodge a complaint with a supervisory authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), or, if the GDPR applies to you, the data protection authority of your EU member state.
11. Changes
We revise this policy when StuDivo's data processing changes, for example when a provider is added or replaced. Registered teachers are informed of material changes by email. The date at the top reflects the latest revision, and the version published here applies.