Last updated: 25 October 2026 · Version 1.9
StudentHub (“we”, “us”, “the app”) is a study companion for university students: it brings together your class timetable, exams and deadlines, your school’s learning systems (Neptun, Canvas, Moodle) and the course documents you add yourself. This policy explains, in plain language, what personal data we process, why, who we share it with, how long we keep it, and the rights and controls you have. Please read it together with our Terms of Service and the consent you give when you create an account.
StudentHub is operated by Mammetgeldiyev Ysmayyl e.v., a Hungarian sole proprietorship (registered office: Reitter Ferenc utca 39–49. 1/2/207, 1135 Budapest; registration number 61211883; tax number 91470247-1-41). For the purposes of the EU General Data Protection Regulation (GDPR) and Hungarian data‑protection law, the operator is the data controller for the data described here. You can reach us at privacy@joinstudenthub.com for any privacy question or to exercise your rights. The full legal details are in our legal notice (Impresszum).
| Category | Examples | Where it comes from |
|---|---|---|
| Account & identity | Name, the name you want friends to see (if you set one), email, hashed password, sign‑in method (email, Google or Apple), optional date of birth, optional profile photo | You, at sign‑up / in Settings |
| Student verification | University, Neptun code, the university e‑mail address you verify with (if your school has no Neptun), and, only if you choose to submit one, a student‑ID photo | You / your Neptun login |
| Academic data | Timetable, courses, grades, GPA, upcoming deadlines; from Neptun also programme, enrolment year and gender | Neptun / Canvas / Moodle, read with your own login |
| Google Classroom | Your classes, your own coursework and its status, course materials, announcements and topics — read only, kept on your device (section 4) | Google Classroom, with your own Google sign‑in, only if you connect it |
| Messages | Chat messages you send to other users | You |
| Safety | Reports you file, users you block, and the outcome of automated content checks | You / automated screening |
| Diagnostics | Crash reports, and, only if you choose to attach them to a feedback report, recent app logs | Your device |
| Device & technical | Push‑notification token, app version, the IP address of your latest request and the country it points to (looked up on our own server, not sent anywhere), and basic server logs (e.g. IP address, timestamps), needed to run and secure the service and to see which countries it is used from | Your device / automatically |
| Premium & payments | Your plan and its dates, the store’s purchase and transaction IDs, product, price and currency, renewal, refund and payment‑problem status; free days (the free week, invites, support); whom you invited and who invited you. We never see your card details | The App Store or Google Play, and you |
We do not use advertising trackers, and we do not build advertising profiles about you.
Connecting a school system is entirely optional. When you do, you log in to your school’s own site inside the app. We never see or store your Neptun / Canvas / Moodle password. During that single logged‑in session we read only the data your own account already shows you, so we can display your grades, GPA, timetable and deadlines.
Your detailed academic records are kept on your device. Only a small summary, your Neptun code, programme, faculty, enrolment year, GPA, per‑semester averages and gender, is saved to your StudentHub profile so it survives a phone change and powers verification. Neptun’s access is deliberately short‑lived (it requires two‑factor login each time), so there is no background access to your school account. You can disconnect at any time, which removes the on‑device data.
Exam dates from your course files. If you allow it, the app reads your Canvas and Moodle files and your Neptun messages on your phone for exam and deadline dates; nothing is uploaded for this. Reading with AI is a separate, optional step that is off until you turn it on and agree in the app. When it is on, only the pages and messages that look like they hold an exam or deadline date are sent to our server and from there to Anthropic (the maker of the Claude AI model), acting as our processor, which reads them for the dates. We do not store that text. So that the same material is never read and paid for twice, our server keeps the answer (the dates or the course summary found, with the short quotes they rest on) for up to 30 days, locked with a key made from the text itself: it can only be opened by a request that sends that very same text again, and a copy of our database alone reads as noise. Such an answer is not linked to your account, so a classmate whose app sends exactly the same pages of the same course gets it too, without learning anything about you. Besides that, our server keeps counts (how many passages, tokens and dates) to apply daily limits and track cost, and for each request which AI feature it was, how it ended, what it cost and how long it took, for up to 180 days, to keep the service working well. None of these records contains the text or pictures themselves. Anthropic does not use any of it to train its models. If a read is still running when you close the app, our server finishes it and, if you allowed notifications, tells you it is ready. If the AI refuses several of an account's requests within a week, or the screening below rejects several of its pictures, reading with AI pauses on that account for a few days; our team can also pause it on an account that misuses it. Every date found still waits for you to add it. You can turn reading with AI off at any time in Settings, which also removes what it found from your phone.
Your own timetable and documents. You can bring in a timetable as a photo, pictures or a PDF. The app first tries to read it on your phone; when it can, nothing is sent. When it cannot, those files (with the text the phone could read in them) are sent through our server to Anthropic to find your weekly classes. Pictures are first checked by Sightengine (see Automated screening below). We do not keep the files; we keep the classes found for up to 2 days, locked the same way and tied to your account, so that asking again does not cost a second read. You check every class before it is added to your calendar, where the classes you save are stored with your account. Course documents you add (a syllabus, test dates) are stored only on your phone and read there like your Canvas and Moodle files; a photo you add is first checked by Sightengine, and if your phone cannot read its text and reading with AI is on, that photo is sent to Anthropic to read its text and tell whether it is course material (the answer is kept for up to 2 days, as for timetables). With reading with AI on, only the documents' passages about exams, grades and rules are sent, as above. They are removed when you delete them or sign out.
Google user data (Google Classroom). If you connect Google Classroom, StudentHub requests read‑only access to your classes, your own coursework and its status, course materials, announcements and topics. This data is read on your device to show your classes, due dates and materials, add due dates to your calendar and send reminders. It stays on your device, is not stored on our servers, not sold, not used for advertising and not shared. You can disconnect at any time in the app or at myaccount.google.com/permissions. StudentHub’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What each permission is for:
Disconnecting removes the Classroom data held on your device. Reading your course files with AI (section 3) is a separate, optional step and is never applied to Google Classroom data unless you turn it on yourself.
StudentHub used to offer a student marketplace, room listings, a roommate finder, local deals and events. We have closed them to focus on studying. What you posted there (listings, room listings, a roommate card and its photos) is no longer shown to anyone and is no longer used for anything. We keep it only so the features can come back without losing your posts; it is included in Settings → Download my data, and it is deleted with your account or, sooner, when you ask us at privacy@joinstudenthub.com. If a feature returns, we will tell you in the app before anything you posted is shown again.
Messages you send are stored so they can be delivered and shown in your conversations. To keep the community safe, we act on reports and may review reported content, remove photos that break our community rules, and suspend accounts that abuse the service. Blocking is symmetric: once either person blocks the other, neither appears to, nor can message, the other.
Automated screening. Photos you upload (such as a profile photo) are checked automatically before they are shown, to catch sexual content, violence and other material that breaks our rules. Pictures of documents (a timetable or a course page you add or have read by AI) are checked for sexual content, gore and hate symbols before they are read or kept. The checks are performed by Sightengine acting as our processor: the image is sent for analysis and we receive back a score. Results are used only for moderation, never to profile you, and a decision that affects your content can always be reviewed by a person if you ask.
Deleting a conversation removes it for you only. The other participant keeps their own copy, which we continue to store on their behalf until they delete it too. We are not able to remove a message from someone else's account, and messages may be retained where they are needed to investigate a report.
We do not sell your data. We rely on a small set of service providers (processors) to run StudentHub:
| Provider | Purpose | Data involved |
|---|---|---|
| Google Firebase Cloud Messaging | Deliver push notifications | Device push token, notification content |
| Google Sign‑In and Sign in with Apple | Optional “Continue with Google / Apple” login | Your email & name from that account (only if you use it) |
| Google Firebase Crashlytics | Crash and error reporting, so we can fix faults | Crash diagnostics, device model/OS, and your user ID |
| Sightengine | Automated moderation of uploaded photos and of document pictures before they are read by AI or kept with your course documents | The image being checked |
| Anthropic (Claude API) | Reading exam and deadline dates in your course files, only if you turn on reading with AI; reading a timetable picture or PDF your phone could not read, only when you ask; reading the text of a document photo your phone could not read, only with reading with AI on | The pages and messages that look like they hold dates, with their course and file names; the timetable files you chose and the text your phone read in them; document photos your phone could not read |
| Resend | Transactional email (verification codes, notifications) | Your email address, message content |
| Apple (App Store) and Google (Google Play) | Sell and bill Premium AI: they take the payment, renew and cancel the plan, and handle refunds, as the seller | Your purchase, linked to a random account token instead of your name or email. Their own privacy policies cover the payment |
| Amazon Web Services EMEA SARL (Frankfurt, Germany) | Run the database and API | All server‑side data above |
We may also disclose data where required by law, or to protect the rights and safety of our users.
Our servers and database are located in the European Union. Some providers (e.g. Google Firebase / Sign‑In, and Anthropic when you use reading with AI) may process limited data outside the EU; where they do, they rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
All traffic is encrypted in transit (HTTPS/TLS). Passwords are stored only as salted hashes, never in plain text. Student‑ID photos are held in private storage and are accessible only to you and, for verification, authorised staff. Access to production systems is restricted. No system is perfectly secure, but we work to protect your data and to limit what we collect in the first place.
We aim to respond to any rights request within 30 days.
StudentHub is intended for university students. We do not knowingly collect data from anyone below the age required by applicable law; if you believe a child has provided us data, contact us and we will remove it.
We may update this policy from time to time; the “last updated” date and version above will change. For material changes we will notify you in the app. Continuing to use StudentHub after an update means you accept the revised policy.
Questions, requests, or complaints: privacy@joinstudenthub.com. We’ll do our best to help.