Privacy Policy

Effective: May 14, 2026 | StudyLawPh — Law School OS

1. Data We Collect

We collect your name, email, school information, academic records (classes, syllabi, schedules, topics), study activity (quiz scores, flashcard reviews, recitation attempts), performance analytics, uploaded lecture notes, payment proof submissions, and community posts. We collect only what is necessary for declared product purposes.

2. Legal Basis and Purposes

Under RA 10173 (Data Privacy Act of 2012), we process your data based on: (a) contract performance — to provide you with the StudyLawPh service; (b) legitimate interest — to improve and adapt the learning system; (c) consent — for optional features like lecture processing, community posting, and marketing communications. You may withdraw consent at any time.

3. Data Separation

Private study data (personal notes, flashcards, quiz scores, uploaded materials) is separated from community data. Private data is visible only to you unless you explicitly share it. Community posts follow the visibility settings you choose (public, class, or private).

4. AI and Automated Processing

Our AI Senior Counsel processes your academic context (syllabus, quiz errors, weakness tags) to generate personalized study recommendations. AI outputs are for study support only and do not constitute official legal advice. All AI operations run server-side; no privileged keys are exposed to your browser.

5. Your Rights

Under RA 10173, you have the right to: access your personal data, correct inaccurate data, object to processing, request deletion (subject to lawful retention needs), and data portability. To exercise these rights, use the Settings > Data Export/Delete feature or contact us at privacy@studylawph.com.

6. Retention

Academic and study records are retained for the duration of your active account plus 90 days after deletion request. Payment proof files are retained for 7 years for legal and audit compliance. Lecture recordings (if any) stored privately are deleted upon your request or 30 days after account deletion.

7. Breach Response

In the event of a personal data breach, we will: (1) contain and assess within 72 hours; (2) notify affected users within 5 business days if the breach poses a real risk of harm; (3) report to the National Privacy Commission as required; (4) document and remediate. Contact: privacy@studylawph.com.

8. Contact

Data Protection Officer: privacy@studylawph.com | StudyLawPh, Philippines. For complaints, you may also contact the National Privacy Commission at www.privacy.gov.ph.