Security & trust

Built to earn the trust of both sides of campus

Pre-launch, in pilot with partner universities — architecture and data-handling documentation available for review on request.

Pre-launch · in pilot with partner universities

Architecture · design principles

How we are building data protection

Separation by institution

Designed so that each institution’s data is logically separated and protected by access controls.

Your material is not our training data

Study Master does not use users’ academic data to train its own models.

Purpose-limited processing

Data is processed only by the services required to deliver the features you use, under applicable privacy and security controls.

Access logging by design

The platform is being built to record account and administrative activity; the events recorded and their retention will be documented at launch.

The Study Master application is pre-launch. These are the principles it is being built on — not a description of a deployed system.

Two audiences, two very different fears

We designed for the worst-case scenario an administrator imagines, and the quiet anxiety a student never says out loud.

For administrators & directors

When the worst case is a headline

Data leaks, compliance failures, IP loss, and academic integrity breaches — handled before they can become one.

  • Institution-scoped data separation

    Designed so that each institution’s material is logically separated from every other institution’s and reachable only through that institution’s own permissions.

  • Built on recognised privacy principles

    Data practices are designed taking into account the principles of Angola’s Personal Data Protection Act (Law No. 22/11), FERPA and the GDPR. No certification or formal compliance validation is claimed.

  • Controlled AI processing

    Curriculum, exams and slides are processed only by the services needed to deliver the feature in use — never for data resale or advertising.

  • Access logging, documented for review

    The platform is being built to log account and administrative activity. Which events are recorded, how long they are kept and who can consult them will be documented for institutional review at launch.

For students

Nothing here gets you in trouble

Your drafts stay yours, your account stays safe, and no one is quietly grading how you use this.

  • Your drafts stay private

    Designed so that your uploads, chats and study history are not exposed to professors, administrators or other students.

  • No penalty for studying with AI

    Study Master is built to be deployed with your institution’s agreement, as an approved study tool — not something you have to hide.

  • Private, purpose-limited processing

    Your files are processed only by the services required for the feature you are using, and are never sold or shared for advertising.

  • Aggregate-only faculty views

    Faculty dashboards are designed to show only anonymised, aggregate trends — not an individual student’s activity.

Study Master vs. commercial LLMs

Retail chatbots were built to improve their own models with your input. Study Master is built the other way round: your academic data is not training data for our models.

Study Master

Dimension

  • Data training

    Not used to train Study Master’s models

  • Data storage

    Stored securely, only as long as the service and applicable obligations require

  • Monetization

    Software licensing only

  • Third-party sharing

    Not sold, rented or shared for advertising; processing limited to the providers a feature requires

  • FERPA / GDPR academic compliance

    Designed with these principles in mind

  • Separation between institutions and accounts

    Logical separation by institution and account (by design)

  • No commercial data monetisation

    Licensing revenue only

Commercial LLMs (ChatGPT, Claude retail)

Dimension

  • Data training

    Inputs can be used to retrain models

  • Data storage

    Conversations persisted and synced across devices

  • Monetization

    Data & engagement can factor into monetization

  • Third-party sharing

    May be shared with partners/subprocessors

  • FERPA / GDPR academic compliance

    Not built for academic records

  • Separation between institutions and accounts

    Shared, general-purpose environment

  • No commercial data monetisation

    Data can inform ads & products

FAQ

Common questions about data & privacy

Clear answers on how we protect your data — no fine print.

Where are my documents stored?

Your files are processed only by the services required to deliver the feature you are using, protected in transit, and kept only as long as the service and applicable obligations require. They are never sold, and they are not used to train Study Master’s own models. Our Privacy Policy sets out the categories of provider involved and how long data is kept.

Do you sell academic data to third parties?

Never. Study Master earns revenue exclusively from direct software licensing — not from selling, renting, or sharing data with commercial partners or advertisers.

Can a university audit our platform's security compliance?

Yes. A security review walks your IT or compliance team through the architecture and our data-handling documentation, stating plainly what is deployed today and what is still in design. Formal audit artefacts and access-log export will be available as those capabilities ship — book a call below.

How does Study Master protect against standard LLM data leakage?

Study Master does not use users’ academic data to train its own models. Where an external AI provider is required for a feature, it is engaged under configurations and contracts intended for service delivery only. The application is designed so that each institution’s data is logically separated and protected by access controls.

Can my professor see my private study drafts or chat history?

No. Student activity is designed to stay private by default — faculty dashboards are built to show only anonymised, aggregate trends, never an individual student’s uploads or conversations.

What happens to my files if I close my account?

Your account and the materials linked to it are deleted from active systems on request, according to the retention schedule in our Privacy Policy. Backups, and records we must keep for legal or security reasons, expire on their own documented schedule.

For universities

Book a free security & compliance review

Bring your IT or compliance lead. We'll walk through architecture, access logs, and enterprise deployment options.

Available times —