Privacy Policy

StudyRush Malta ("StudyRush", "we") operates the StudyRush study and competition platform at www.studyrushmalta.com. We act as the data controller for the personal data described below. You can reach us any time at studyrushmalta@gmail.com.

StudyRush is only for students aged 16 or over. We do not knowingly create accounts for children under 16. If you believe a younger student has registered, email us and we will delete the account and its data.

• Account data — your email address, a password (stored only as a secure hash by our authentication provider), your chosen username, your first name if you give it, and your confirmation that you are 16+.
• Academic profile — the school or college you type in, your study level, course, year, and the subjects and topics you add.
• Study material you upload — notes you paste and the text extracted from PDF, DOCX and TXT files you upload, so the AI can generate questions from your own material.
• Activity data — quizzes generated, answers chosen, time taken per question, XP and Rush Points earned, streaks, mastery per topic, and daily Ranked usage.
• Integrity data — signals used to keep the competition fair, such as impossibly fast answers, repeated tab switching during a Ranked Rush, or unusual scoring patterns.
• Support data — messages you send us, bug reports, question reports and chats with the StudyRush assistant.
• Technical data — basic request information such as browser type and approximate timing, needed to run and secure the service.

We do not ask for, and you should not upload, sensitive personal data (for example health or biometric information) or copyrighted textbooks you are not allowed to share.

• To provide the service — creating your account, generating quizzes from your notes, tracking XP, mastery and streaks. Legal basis: performance of a contract.
• To run the monthly competition — ranking scores Malta-wide, verifying the winner and awarding a sponsored prize. Legal basis: performance of a contract.
• To keep the competition fair and the platform secure — anti-cheating checks, abuse prevention and integrity reviews. Legal basis: legitimate interests.
• To improve quiz quality — reviewing reported questions and error reports. Legal basis: legitimate interests.
• To send service emails — email verification, password resets and important account notices. Legal basis: performance of a contract.
• To send optional updates — study reminders, exam reminders, competition and reward news, or marketing. Legal basis: your consent, which you can withdraw at any time in your notification settings.

When you generate a quiz, the relevant subject, topic and study material text is sent to a third-party AI model provider so it can produce questions and explanations. That processing happens only to serve your request. We instruct our AI provider not to use your content to train their models, and we do not send your email address, username or other identifying details with the material.

AI-generated questions can be wrong or unclear. You can report any question directly from the results screen and we review reports manually.

The Malta-wide leaderboard is public inside the app and shows only your username and score. Your real name, email, school, subjects, notes, uploads, mistakes and mastery are never shown to other students. Choose a username that you are comfortable being seen publicly — you can change it in your profile.

If you become a monthly winner, we will publish your username and the prize. We will only use your real name or a photo if you separately agree to it.

We use a small number of processors to run StudyRush:

• Cloud hosting, database and authentication — to store your account and study data securely.
• AI model provider — to generate quiz questions and power the support assistant.
• Email delivery — to send verification, password reset and notification emails.
• Payment provider — if you buy Premium, card details are handled entirely by the payment provider. StudyRush never sees or stores your card number.

Sponsors never receive your personal data. They receive brand visibility and, where relevant, aggregate figures only. If you win a prize we will ask your permission before sharing any detail needed to deliver it.

We may disclose data where legally required, or to protect the rights and safety of our users.

Data is stored on servers operated by our hosting provider. Some processors may be located outside the EU/EEA; where that happens, transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.

• Account, subjects, notes and progress: while your account is active.
• Competition results and winner records: kept as a historical record of past months.
• Integrity and abuse records: up to 24 months, so repeated cheating can be identified.
• Deleted accounts: your account and the study data linked to it are deleted immediately; backups roll off within 30 days.

Under the GDPR and Maltese data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to processing, or transfer it elsewhere. You can also withdraw consent for optional emails at any time.

Email studyrushmalta@gmail.com and we will respond within one month. You may also delete your account yourself from your profile. If you are unhappy with how we handle your request, you can complain to the Office of the Information and Data Protection Commissioner (IDPC) in Malta.

StudyRush uses only the storage strictly necessary to keep you signed in and remember your preferences. We do not run advertising or cross-site tracking. If we ever add analytics or marketing tracking, we will ask for your consent first through the cookie banner, and you can decline without losing access to the app.

Access to your data is enforced at the database level, so one student can never read another student's notes or progress. Passwords are hashed, connections are encrypted, and administrative actions are recorded in an internal audit log. No system is perfectly secure; if a breach ever affects your data we will notify you and the IDPC as required.

If we make a material change we will notify you in the app or by email before it takes effect. Questions? Email studyrushmalta@gmail.com.