1.About this notice#Link to section: About this notice
This notice supplements our Privacy Policy and applies to residents of California. It explains how FluxStudy, operated by Sansa Group AB (“we”, “us”), handles “personal information” as defined by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, the “CCPA”).
It covers the 12 months before the “last updated” date above, and our current practices.
2.Personal information we collect#Link to section: Personal information we collect
The table below lists the CCPA categories we have collected. It shows where each comes from, why we use it, and which service providers receive it to run FluxStudy for us.
| CCPA category | Examples | Source | Business purpose | Disclosed to service providers |
|---|---|---|---|---|
| Identifiers | Email address, optional name, account ID, IP address, Stripe customer ID. | You; your device; Stripe (if you subscribe). | Creating your account, signing you in, securing the service, billing. | Cloudflare (hosting, database, file storage, AI processing, email, bot protection); Stripe (payments and subscriptions). |
| Customer records (Cal. Civ. Code § 1798.80(e)) | Name and email address. Card details go directly to Stripe and never reach our servers. | You; Stripe. | Account administration and billing. | Cloudflare (hosting, database, file storage, AI processing, email, bot protection); Stripe (payments and subscriptions). |
| Commercial information | Your plan (Free, Pro Student or Coach+), subscription status, renewal date and billing events. | You; Stripe. | Providing paid plans and allowances, bookkeeping. | Cloudflare (hosting, database, file storage, AI processing, email, bot protection); Stripe (payments and subscriptions). |
| Internet or other electronic network activity | Session records with browser user agent, in-app events (for example “session started” or “material uploaded”), feature usage counts. Only if you allow Analytics: product analytics events with a pseudonymous identifier. | Your device and your use of FluxStudy. | Security, keeping allowances accurate, improving reliability; with your permission, understanding how features are used. | Cloudflare (hosting, database, file storage, AI processing, email, bot protection); AppHelm, a product analytics service operated by our own group (Sansavision, Sansa Group AB), only with your permission — not yet enabled. |
| Audio, electronic, visual or similar information | Photos or scans of notes you upload; study images you ask Nova to generate. | You; generated at your request. | Turning your materials into study content; showing your images back to you. | Cloudflare (hosting, database, file storage, AI processing, email, bot protection); image prompts (not your photos) go to OpenRouter, and through it DeepInfra and xAI (AI features you request). |
| Education-related information you provide | Courses, exams and deadlines, uploaded study materials, flashcards, practice answers, mock exams, study sessions. These are not records from a school. | You. | Building and adapting your study plan, practice and review. | Cloudflare (hosting, database, file storage, AI processing, email, bot protection); relevant excerpts go to OpenRouter, and through it DeepInfra and xAI (AI features you request) when you use those features. |
| Inferences | Progress states and review schedules calculated only from your own practice results (for example, which topics need review next). No grade or pass predictions. | Derived from your own activity in FluxStudy. | Scheduling your reviews and showing your progress to you. | Cloudflare (hosting, database, file storage, AI processing, email, bot protection). |
We don’t collect precise geolocation. We store the time zone you use for scheduling. Your IP address can suggest a rough location, but we don’t use it for that.
3.Sensitive personal information#Link to section: Sensitive personal information
We don’t ask for sensitive personal information as defined by the CCPA. If something you upload or type happens to contain it, we use it only to provide the service you requested. We never use it to infer characteristics about you. Because our use stays within what the CCPA permits, the right to limit use of sensitive personal information does not come into play. You can still ask us about it at any time.
4.We do not sell or share your personal information#Link to section: We do not sell or share your personal information
Optional product analytics only runs if you allow Analytics in Cookie settings, and is turned off automatically when your browser sends Global Privacy Control. It will be provided by AppHelm, a product analytics service operated by our own group (Sansavision, Sansa Group AB), so the data stays within the same company. It is used only to help us understand and improve FluxStudy, never for advertising, and we don’t sell it.
We have not sold or shared personal information in the past 12 months. We have no actual knowledge of selling or sharing the personal information of consumers under 16. FluxStudy is for adults aged 18 and over.
5.How long we keep it#Link to section: How long we keep it
We keep personal information while your account is active and delete it when you delete your account. There are a few exceptions. Billing records are kept as long as accounting and tax law requires. Content reports you filed are kept but no longer linked to you. Short-lived backups roll over. Our Privacy Policy gives the details.
6.Your California privacy rights#Link to section: Your California privacy rights
- Right to know and access the categories and specific pieces of personal information we hold about you, where it came from, why we use it and who we disclose it to.
- Right to delete personal information we collected from you, subject to legal exceptions (such as billing records).
- Right to correct inaccurate personal information.
- Right to data portability: receive a copy in a usable format.
- Right to opt out of sale or sharing. We don’t sell or share, but you can still make this request.
- Right to limit use of sensitive personal information. We only use it as described above.
- Right to non-discrimination. We won’t deny you service, charge a different price or give you a worse experience for using these rights.
7.How to make a request#Link to section: How to make a request
- In the app: export your cards, notes and plans, or delete your account, from Settings → Account.
- By email: write to support@fluxstudy.com with “California privacy request” in the subject.
Verification
To protect your account, we verify requests by matching them to the email address on your account. We may ask you to confirm by replying from that address or signing in. We only use what you give us for verification to handle your request. We aim to respond within 45 days. If we need more time (up to another 45 days), we’ll tell you why.
Authorized agents
You may use an authorized agent. We’ll ask the agent for your signed permission. Unless the agent holds a valid power of attorney, we may also ask you to verify your identity with us directly.
8.Global Privacy Control#Link to section: Global Privacy Control
We honour Global Privacy Control (GPC) signals as a valid request to opt out of sale and sharing. We don’t sell or share personal information and use no advertising cookies. When your browser sends GPC, we also keep optional analytics off unless you switch it on yourself in Cookie settings. See our Cookie & Storage Policy.
9.Contact#Link to section: Contact
Sansa Group AB