Privacy Notice

1. Who we are

Strudl is a product of PlanAheADD Technologies Inc., a Canadian corporation located in Fredericton, New Brunswick, Canada. When you use strudl.app, PlanAheADD Technologies Inc. acts as the controller of your personal information — we decide what data is collected and why. You can reach us at support@strudl.app.

2. The information we collect

Account information — name, email address, hashed password, role (parent, tutor, student), and the household you belong to.
Household and student data you enter — student names, courses, assignments, tests, schedules, family events, focus-session results, and the notes or feedback you record.
Usage and telemetry — log data such as pages visited, actions taken inside the app, error reports, IP address, browser/device type, and approximate location derived from IP. We use this to keep the Service running and to improve it.
Support correspondence — messages you send us by email or through in-app support, and our replies.
Billing data — handled by Paddle (see Section 4). We receive a limited record (subscription status, plan, last four digits of the card or PayPal email, billing country for tax) but not your full payment details.

3. Why we use your information, and the legal basis

To provide the Service (accounts, scheduling, focus tracking, reminders) — legal basis: performance of our contract with you.
To keep the Service secure and prevent fraud or abuse — legal basis: legitimate interests.
To send transactional emails (account, billing, due-soon nudges, weekly digests) — performance of contract.
To improve Strudl using aggregated, de-identified usage data — legitimate interests.
To send optional product news or marketing — only if you have given consent, which you can withdraw at any time.
To comply with legal obligations (tax records, lawful requests) — legal obligation.

4. Who we share information with

We share personal information only with the categories of recipients below, and only as needed to run the Service:

Hosting and infrastructure — our database, authentication, storage, and edge-runtime providers, who process data on our behalf under written contracts.
Email delivery — the service we use to send transactional emails from strudl.app and notify.strudl.app.
Payments (Paddle as Merchant of Record) — Paddle.com Market Limited acts as the Merchant of Record for all sales of paid plans. Paddle handles checkout, billing, taxes, invoicing, refunds, and chargebacks, and is a separate data controller for that processing. See Paddle’s Privacy Notice.
Analytics and error monitoring — services we use to understand product usage and diagnose bugs, configured to minimize personal data.
Professional advisers — accountants and lawyers, where needed.
Authorities — where we are legally required to disclose information, or to protect our rights, your safety, or the safety of others.

We do not sell your personal information, and we do not share it for cross-context advertising.

5. International transfers

Some of our service providers are located outside Canada, including in the United States and the European Union. When we transfer personal information outside Canada, we rely on written agreements with safeguards such as standard contractual clauses and provider security controls.

6. How long we keep your information

We keep account and household data for as long as your account is active. When you delete your account, we mark the household for deletion and permanently remove the data on our daily hard-delete schedule (within roughly 30 days). Some records may be retained longer where the law requires it (for example, billing and tax records). De-identified, aggregated data may be retained indefinitely for analytics.

7. Your rights

Depending on where you live (Canada under PIPEDA, the EU/UK under the GDPR, or other jurisdictions), you have rights including:

access to the personal information we hold about you;
correction of inaccurate or incomplete information;
deletion of your account and associated data;
portability of certain data in a machine-readable format;
objection to or restriction of certain processing;
withdrawal of consent where processing is based on consent;
the right to complain to a supervisory authority — in Canada, the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, email support@strudl.app. We will respond within one month.

8. How we protect your information

We use industry-standard technical and organizational measures: encryption in transit (HTTPS), row-level security in our database, hashed passwords, access controls limited to staff who need them, and regular review of our security posture. No system is perfectly secure, but we work to keep risks low and to notify you promptly if a breach affects your data.

9. Children

Strudl is designed to be used by families, including students who are minors. A student account is created under the supervision of a parent or guardian who holds the household account, and the parent controls what the student can do inside the Service. We do not knowingly create accounts for children outside this household model. If you believe a child has created an account without parental supervision, contact us at support@strudl.app and we will remove it.

10. Cookies

Strudl uses cookies and similar technologies only as needed to keep you logged in and to remember your session and preferences. We do not currently use advertising or cross-site tracking cookies. If that changes, we will update this notice and ask for your consent where required.

11. Changes to this notice

We may update this Privacy Notice from time to time. If we make material changes, we will notify you by email or in the Service before the changes take effect.

12. Contact us

Questions or requests about your privacy? Email support@strudl.app or write to PlanAheADD Technologies Inc., Fredericton, New Brunswick, Canada.