How your data works.

Your account and content

StudySoda stores your name, email address, password hash, sessions, study materials, subjects, topics, saved items, and learning progress in the site operator’s PostgreSQL database. Passwords are hashed by the authentication library. API keys are stored as hashes, with a visible prefix and usage metadata.

Exam and Practice Lab rounds, answers, and results live only in the open page. They are not saved to the database or browser storage. Download a report to keep a result.

Public learning, with a private option

New materials are public by default. On the Free plan, reviewers, flashcards, and exams use public sharing. Member submissions and public edits require review before other learners can access them. Approved content shows your display name and may appear in search engines. Subject and topic details become public when they contain public materials. Paid plans let you create and edit private materials. Your email address and personal study progress are not published. Making a public material private prevents new access through this site, but cannot remove independent copies, downloaded study materials, or search-engine caches.

Administrative access

Authorized site administrators can view and edit public and private materials to operate and support this service. Private visibility prevents access by other learners and search engines; it is not end-to-end encryption. Administrative material access, edits, plan changes, and policy changes are recorded in an audit log. Administrators do not receive your password or API-key secret.

Reports and blocked authors

Reports contain your account ID, the reported content or author, your chosen reason, optional details and a bounded text snapshot. Reports expire after 90 days; routine cleanup removes expired records and text snapshots. Authorized administrators can inspect the content and notebook pages to review publication or respond to a report. Report text is not public; administrative access and decisions are recorded separately in the administrative audit log.

Blocking stores the author’s account ID in your account until you unblock them or delete your account. Their content is hidden from your signed-in collections and study access. Manage blocks in Account → Blocked authors. Independent copies and another device’s existing offline downloads cannot be recalled remotely.

If your plan changes

Existing private materials stay private when your plan ends. You can still read, export, and delete them. To create or edit private materials, renew a paid plan. Publishing an existing private material is always an explicit choice; a plan change never publishes it automatically.

Cookies and storage

The website uses session cookies to keep you signed in. Saved flashcard progress and reviewer completion use the account database. Exam and Practice Lab answers stay in the current round. Fonts and interface assets are hosted with the application.

Optional mobile ads

StudySoda is intended for ages 13 and older. On Android and iOS, signed-in Free users who confirm they are 18 or older can choose to enable Google ads on the Dashboard. Ads stay off until you choose them and Google’s consent process allows a request. Plus, Pro, users aged 13–17, notebooks, study tools, the website, and desktop have no AdMob placement. You can use every study tool with ads off.

Optional ads request non-personalized content. Google’s advertising and consent services may process your IP address, device identifiers, ad interactions, and diagnostics under its Privacy Policy. StudySoda does not add your name, email, notebook contents, or study materials to ad requests. In the mobile app, Account → Ads privacy lets you turn ads off and review available Google privacy choices. Reviewing those choices contacts Google’s consent service even while ads are off. Turning ads off stops new banner requests; it does not erase data already processed by Google.

Offline notebooks and downloads

The mobile app stores notebooks in device SQLite storage; web and desktop use IndexedDB. Downloaded study materials include answers for offline practice. These copies stay on your device, separated by account. Signing out locks account views but does not erase local notebooks. Opening a material online retains a device copy for offline study. Cloud sync is an explicit action.

Mobile sign-in credentials use the operating system’s secure store. Desktop encrypts saved cookies with the operating system when available; otherwise it keeps them only for the session. Device backups may retain application data. Export notebooks before uninstalling or clearing app data; account deletion does not erase independent device copies or exports.

Reviewer focus timers, Memory drafts, and Cornell notes stay in this browser, separated by account. They do not sync across devices. Reset the timer, erase draft text, or use your browser’s site-data settings to clear them. Optional microphone input uses your browser’s speech recognition service, which may process audio remotely.

Connected tools

An API key gives its holder the permissions you selected for your account’s materials. You can revoke a key at any time. When you choose to send content to an external AI assistant, that service handles it under its own policies. Ordinary studying and editing do not send your materials to a generation service.

AI sources and drafts

Before an AI request, the permission dialog identifies the recipient and links to its privacy policy. Allowing AI sharing sends selected source text, instructions and chosen study-agent samples through the site operator’s Codex gateway to that recipient. Public links are fetched to extract text. Original files remain attached or in your uploaded files; extracted text and generated drafts are stored privately in this site’s database for up to seven days. You can delete unused sources and completed drafts in AI assistant. Drafts are not public materials and are never published automatically. Once you save a draft as a material, that material follows the visibility and retention rules above.

Saved study agents retain their sample text and style settings until you replace the samples, delete the agent or delete your account. Temporary source expiry does not erase a saved agent’s samples.

The gateway and AI provider have their own processing and retention settings, which the site operator must review. Account → AI sharing lets you revoke permission after canceling active AI requests. Further requests require your permission again. Changes to the disclosed recipient or gateway require renewed permission. Deleting a source or revoking permission here cannot retroactively erase provider records. Avoid sending credentials or content you do not have permission to share. Declining AI sharing leaves reading, manual creation and on-device notes available.

Feynman practice

When you request an explanation or feedback, the current reviewer, your chosen concept, your explanation, and bounded previous practice context go through the configured AI gateway. Ask AI also sends your question and any attached passage. Practice replies stay private to your account in this site’s database for up to seven days. The same AI access rules and daily allowance apply. Reading, the focus timer, Memory drafts, and Cornell notes do not request AI.

Who operates this installation?

StudySoda’s operator controls database access, backups, email delivery, security logs, and retention. For privacy or account questions, contact [email protected].