1.Who is responsible for your data#Link to section: Who is responsible for your data
The data controller for FluxStudy is Sansa Group AB, acting through its division Sansavision.
Data controller
Gothenburg, Sweden
Org. nr 559111-9507 · VAT no. SE559111950701
Privacy contact: support@fluxstudy.com
Because we are established in Sweden, our lead supervisory authority in the EU/EEA is the Swedish Authority for Privacy Protection, Integritetsskyddsmyndigheten (IMY).
Data protection contact
For all data protection questions and requests — including from the EU/EEA and the UK — contact our data protection contact at support@fluxstudy.com.
2.What data we use and why#Link to section: What data we use and why
In short, we process personal data to run the study service you signed up for:
- Account and sign-in: your email address, optional name, language and time zone, and session records for security.
- Your study content: materials you upload, courses, deadlines, plans, flashcards, answers, mock exams and progress.
- AI features: the text needed for a request you make (for example a question to Nova and relevant passages from your own materials) is sent to an AI model to produce the answer.
- Billing: your plan and subscription status; payments are handled by Stripe.
- Reliability and security: connection data and first-party product events that never contain your content.
- Optional analytics: only if you allow Analytics in Cookie settings (not yet enabled).
The Privacy Policy lists every category of data, its purpose, legal basis, retention and the providers involved.
3.Our legal bases#Link to section: Our legal bases
Under Article 6 GDPR, every use of personal data needs a legal basis. These are the ones we rely on:
| Legal basis | What we use it for | What it means for you |
|---|---|---|
| Contract — Art. 6(1)(b) | Your account, sign-in, study materials, plans, practice, AI features you request, paid plans. | Needed to provide FluxStudy. Without it we can’t offer the service; you can stop at any time by deleting your account. |
| Consent — Art. 6(1)(a) | Optional preference and analytics cookies (also required by the ePrivacy rules and, in Sweden, the Electronic Communications Act, LEK). | Off until you allow it. Withdraw at any time in Cookie settings, as easily as you gave it. |
| Legitimate interests — Art. 6(1)(f) | Security and abuse prevention, first-party product events to keep features working, content-quality reports, study reminders you switch on. | We have balanced these against your rights. You can object at any time (see below). |
| Legal obligation — Art. 6(1)(c) | Accounting and tax records for payments; handling your rights requests. | Required by law, so we keep these records even if you delete your account. |
4.Your rights#Link to section: Your rights
If you are in the EU/EEA or the UK, you have these rights. Using them is free of charge.
| Right | What it means | How to use it in FluxStudy |
|---|---|---|
| Access — Art. 15 | Get confirmation that we process your data and a copy of it, with information about how it is used. | Settings → Privacy & data → Export everything (ZIP), or email us for anything not in the export. |
| Rectification — Art. 16 | Have inaccurate or incomplete data corrected. | Edit your profile, courses, plans and cards directly in the app, or email us. |
| Erasure — Art. 17 | Have your data deleted (the “right to be forgotten”), subject to legal exceptions such as accounting records. | Settings → Privacy & data → Delete account. Deletion is immediate; see the Privacy Policy for what is kept. |
| Restriction — Art. 18 | Ask us to pause using your data, for example while you contest its accuracy. | Email us. |
| Data portability — Art. 20 | Receive the data you gave us in a structured, machine-readable format and take it elsewhere. | Export everything (ZIP, with a README), or cards (CSV), notes (Markdown) and plans (CSV) from Settings. |
| Objection — Art. 21 | Object to processing based on legitimate interests. We stop unless we have compelling legitimate grounds. | Switch reminders off in Settings, or email us to object to other processing. |
| Withdraw consent — Art. 7(3) | Withdraw consent at any time, without affecting what happened before. | Cookie settings in the site footer, on the Cookie & Storage Policy, or Settings → Privacy & data → Cookie preferences. |
| Automated decisions — Art. 22 | Not be subject to decisions based solely on automated processing that have legal or similarly significant effects on you. | FluxStudy makes no such decisions (see below). |
5.AI features and automated decisions#Link to section: AI features and automated decisions
FluxStudy uses AI to help you study: Nova answers your questions, practice questions and mock exams are generated from your materials, and review schedules are calculated from your own practice results. These outputs are study aids that you choose to use and can ignore, edit or report.
No legally significant automated decisions are made about you. FluxStudy doesn’t grade you for any school, decide admissions, set prices based on your profile or restrict your account based on AI output. AI output can be wrong, and you stay in control of your plan. We don’t use your private content to train AI models.
6.How to exercise your rights#Link to section: How to exercise your rights
- In the app: go to Settings → Privacy & data to export everything as a ZIP, export cards, notes or plans, change cookie preferences, or delete your account.
- By email: write to support@fluxstudy.com from the address on your account, and tell us which right you want to use.
Response time
7.International transfers#Link to section: International transfers
Your data may be stored and processed on servers worldwide by the vendors we use for hosting, payments, AI and email — such as Cloudflare, Stripe and our AI providers — including outside the EU/EEA and the UK.
Where the law requires it, these vendors rely on recognised safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. The Privacy Policy lists our providers and where they operate.
You accept our Terms of Service and Privacy Policy when you sign in or use FluxStudy. If you don’t agree to your data being processed this way, please don’t use FluxStudy.
8.How long we keep data#Link to section: How long we keep data
We keep your data while your account is active and delete it when you delete your account. Exceptions: accounting records kept as long as the law requires, content reports kept without a link to you, first-party product events deleted after 13 months, and short-lived backups that expire on a rolling basis. Your cookie choice lasts 6 months. Full details are in the Privacy Policy.
9.Age requirement#Link to section: Age requirement
FluxStudy is only for adults aged 18 and over. We don’t knowingly process personal data of anyone under 18. If you believe a child has an account, contact us and we’ll delete it.
10.Your right to complain#Link to section: Your right to complain
If you’re unhappy with how we handle your data, please contact us first — we’d like the chance to put it right. You always have the right to lodge a complaint with a supervisory authority:
- Sweden (our lead authority): Integritetsskyddsmyndigheten (IMY), imy.se (opens in a new tab).
- Elsewhere in the EU/EEA: the data-protection authority in the country where you live, work or where the issue occurred.
- United Kingdom: the Information Commissioner’s Office (ICO), ico.org.uk (opens in a new tab).
11.Changes and contact#Link to section: Changes and contact
We update this page when our practices change and revise the “last updated” date above. Related pages: Privacy Policy, Cookie & Storage Policy and Terms of Service.
Questions about your rights?