Introduction

This Privacy Policy explains how DevInsights collects, uses, and shares information when you use our mobile application StudyPal. It also describes your privacy rights and how the law protects you. By using the Service, you agree to the practices described here.

1. Who we are (Data Controller)

StudyPal
Country: Greece
Contact email: info@devinsights.gr

2. What we collect

Personal Data

  • Email address
  • First name and last name

App Activity & Usage Data

  • Activity time spent in the app (e.g., session length, features used)
  • Usage/diagnostic data (device identifiers, app version, events, crash logs, IP address)

Payments & subscriptions are processed by Google Play. We do not collect or store card numbers. We may receive purchase tokens/status to manage your subscription.

3. How we collect data

  • Directly from you—when you create an account or interact with the Service.
  • Automatically—via app analytics, diagnostics, and performance data.
  • From Google Play Billing—for subscription status and purchase verification.

4. Why we use your data (Purposes & Legal Bases)

  • Provide and maintain the Service (core functionality, troubleshooting, performance). Legal basis: Contract / Legitimate interests.
  • Account management (registration, authentication, user settings). Legal basis: Contract.
  • Subscription management (verify purchases, manage entitlements, prevent fraud). Legal basis: Contract / Legitimate interests.
  • Communications (service announcements, important updates). Legal basis: Legitimate interests; for marketing emails, Consent where required.
  • Analytics and improvement (measure usage, improve features, fix bugs). Legal basis: Legitimate interests.
  • Compliance and enforcement (legal obligations, requests from authorities, enforcing terms). Legal basis: Legal obligation / Legitimate interests.

5. How we share information

  • Service Providers/Processors (analytics, crash reporting, cloud hosting, support) under contractual obligations.
  • Google Play as platform operator and payments processor for subscriptions.
  • Authorities or legal recipients when required by law or to protect rights/users/public.
  • Business transfers (merger, acquisition). We will notify you where required.

We do not sell your personal data.

6. International transfers

Your data may be processed outside the EEA. Where this occurs, we rely on appropriate safeguards (such as Standard Contractual Clauses or equivalent) and take steps to ensure your information receives a level of protection essentially equivalent to that in the EU.

7. Data retention

  • Account & profile data: kept while your account is active and for a reasonable period thereafter to comply with legal, tax, and accounting obligations, resolve disputes, and enforce agreements.
  • Subscription/transaction records: retained as required by applicable laws.
  • Usage/analytics data: retained for the shortest period necessary and then deleted or anonymized.

8. Your rights (EEA/UK users)

Subject to conditions and exceptions under applicable law, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent where processing is based on consent

To exercise your rights, contact us at info@devinsights.gr. You may also lodge a complaint with your local supervisory authority (in Greece, the Hellenic Data Protection Authority).

9. Security

We use administrative, technical, and organizational measures designed to protect your information. However, no method of transmission over the Internet or electronic storage is completely secure.

10. Children’s privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, contact us and we will take steps to delete it.

11. Third-party links & SDKs

The Service may contain links or integrate third-party SDKs. Their privacy practices are governed by their own policies, which we encourage you to review. We are not responsible for third-party practices.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version in-app and update the “Last updated” date above. Significant changes may also be communicated via email or in-app notice.

13. Contact

Questions or requests about this Policy or your data? Email us at info@devinsights.gr.