Legal

Privacy policy

Last updated: 30 September 2026

1. Who we are

Sthito ("we", "us") makes the Sthito study app for Android and runs this website, sthito.com. For anything about your data, write to hello@sthito.com.

2. What stays on your phone

To block apps and enforce daily limits, Sthito uses Android's Usage Access permission to see which app is open, and Display over other apps to show the block screen. This information is used on your device only. We never upload which apps you open, when, or for how long. Sthito does not read your messages, photos, notifications, screen contents or browsing.

3. What we store on our servers

When you sign in, we store the following so your study history is backed up and can be restored on another phone:

Data	Why
Account: your name, email address and profile picture from Google, or an anonymous ID if you continue as a guest	To sign you in and show your name in the app
Profile: the exam you're preparing for, your daily study goal, when your day starts, app language, and your pledge ("your why")	To personalise the app and show your pledge on the block screen
Study data: subjects, focus sessions (start and end time, length, mode, subject, optional notes, device name) and study schedules	Stats, streaks, history and backup
Your lists: the apps you chose to block, limit or always allow (app name and package name), and their daily limits	So your setup is restored on a new phone
Live presence: a flag that you are in a focus session right now. It expires about 15 minutes after the last update.	The anonymous "studying now" count

Your lists contain only the apps you picked yourself. They are not a record of what you use.

4. Leaderboards

Weekly leaderboards show other students preparing for the same exam. On a leaderboard, you appear as your first name and last initial (for example "Ananya R.") with your weekly study time. Only timed sessions count; your notes, subjects, lists and email are never shown to other users. Guest accounts don't appear on leaderboards or in the "studying now" count.

5. Who processes your data

• Supabase hosts our database and handles sign-in. Your data may be stored on servers outside India.
• Google provides Google Sign-In. Google's own privacy policy applies to your Google account.

We do not use advertising or analytics SDKs in the app, and we don't sell, rent or share your personal data for marketing. We'll update this policy before that ever changes.

This website doesn't use cookies, analytics or third-party fonts.

6. How long we keep it

We keep your data for as long as you have an account. When you delete your account, your profile and all study data are permanently deleted from our database. Guest accounts that sign out are deleted too.

7. Your rights

Under India's Digital Personal Data Protection Act, 2023 and other laws that apply to you, you can:

• Access and export: see your data in the app, and download your sessions as CSV from the You tab.
• Correct: edit your profile, subjects, sessions and lists at any time.
• Delete: open the You tab and tap Delete account, or follow the steps on our account deletion page.
• Withdraw consent: revoke Usage Access or overlay permission in Android settings at any time. App blocking will stop working.
• Raise a grievance: write to hello@sthito.com. We aim to reply within 7 days.

8. Students under 18

Many Sthito users are school students. If you are under 18, please use Sthito with the consent of a parent or guardian. We don't knowingly use children's data for tracking, profiling or advertising.

9. Security

Data is encrypted in transit. Each user's rows in our database are protected by access rules, so only you can read your own data. Leaderboards read only the shortened name and weekly total described above.

10. Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app first.