ESEN
Try for free

Privacy policy

At Study Salad we value your privacy and your family's. Here we explain what data we collect, what we use it for and how we protect it.

Last updated: 8 July 2026.

At Study Salad we value your privacy and we are committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use and protect your data, as well as the rights you have. Study Salad is an educational platform aimed at primary and secondary (ESO) students, so we pay special attention to the processing of minors' data (see section 4).

1. Data controller identification

In accordance with Regulation (EU) 2016/679 (GDPR), Spanish Organic Law 3/2018 (LOPDGDD) and Law 34/2002 (LSSI-CE), the controller of the personal data collected through this platform is:

  • Controller: Digitup Studio S.L.
  • Tax ID (CIF): B88138533
  • Registered office: Calle Alcalá 211, 28028 Madrid (Spain)
  • Contact email: privacidad@studysalad.es
  • Website: https://studysalad.es

Digitup Studio S.L. acts as the controller of all personal data processed through the website and the services offered by Study Salad, including its mobile versions and the associated subscription services.

2. Data we collect

2.1. Data provided directly by the user or their family

  • Name or alias of the student and, where applicable, of the adult who creates the account.
  • Year, educational level and stage (primary or ESO) to adapt the platform.
  • Email address (usually that of the parent or legal guardian).
  • Payment information: Stripe and PayPal manage this data directly (Study Salad never accesses card numbers).

2.2. Data generated by use of the service

  • Notes, syllabus and files the student uploads to study (PDF, images, text).
  • Content generated by the study tools on demand (quizzes, flashcards, summaries, outlines, etc.).
  • Study progress: answers, right and wrong responses, time spent, streaks and points.
  • Usage history and settings (subjects, preferences, language, etc.).

2.3. Technical and analytics data

  • IP address.
  • Browser type and version, operating system and device used.
  • Time and duration of sessions.
  • Browsing data (interaction with buttons, clicks, load times).
  • Cookies (see section 9).

We do not intentionally request or process specially protected data (health, religion, ideology, etc.). If the user voluntarily enters that type of data, it will be at their own responsibility.

3. Purposes of processing

  • Managing registration and authentication on the platform.
  • Providing the contracted study tools (planner, quizzes, flashcards, feedback, summaries, etc.).
  • Adapting studying to each student's year, level and pace.
  • Enabling families to track progress through the family dashboard.
  • Managing payments and billing through secure gateways (Stripe / PayPal).
  • Carrying out usage analysis for the continuous improvement of the platform.
  • Preventing fraud, unauthorized access or improper use.
  • Handling support or contact requests.
  • Sending technical, legal or service information (for example, changes to the Terms).
  • Sending newsletters, offers or promotions, only if express consent has been given.

4. Minors and parental consent

Study Salad is designed for primary and secondary students, many of whom are minors. Therefore:

  • The account must be created or authorized by a parent or legal guardian, who acts as the responsible account holder and gives consent for the processing of the minor's data.
  • The responsible adult has a family dashboard from which they can consult the student's progress and exercise the rights described in section 8.
  • Study Salad is a closed study environment, with no social networks or contact with strangers.
  • We process minors' data with the utmost care and only for the educational purposes described in this policy.

If we detect that a minor's account has been created without the appropriate consent of their legal guardian, we will proceed to delete it.

5. Legal basis for processing

  • Performance of a contract: to provide the requested services (art. 6.1.b GDPR).
  • Consent: for commercial communications or non-essential cookies (art. 6.1.a). In the case of minors, this consent is given by the legal guardian.
  • Legitimate interest: to maintain security, analyze operation and prevent fraud (art. 6.1.f).
  • Compliance with legal obligations: in the event of a request from authorities (art. 6.1.c).

6. Data retention

  • While there is a contractual relationship with the user.
  • While the account remains active.
  • Until deletion is requested, or once the purposes for which it was collected have been fulfilled.
  • Anonymous and aggregated browsing data may be retained for statistical purposes.

Deletion of data may be requested at any time (see section 8).

7. Disclosure of data to third parties

Digitup Studio S.L. does not transfer, sell or rent personal data to third parties for commercial purposes. We only share data with technology providers necessary to provide the service, which act as processors under contract in accordance with art. 28 of the GDPR:

  • Google Firebase / Google Cloud: infrastructure, databases and authentication.
  • Stripe and PayPal: payment processing.
  • OpenAI, Google Gemini, Anthropic, Mistral, DeepSeek or others: educational content generation through artificial intelligence.
  • Mailgun: sending automatic emails.
  • Analytics tools (such as Google Analytics): browsing analysis.

When a provider operates from outside the European Economic Area, an equivalent level of protection will be guaranteed through standard contractual clauses or other safeguards recognized by the GDPR.

8. User rights

The user or, in the case of minors, their legal guardian, may exercise the following rights at any time:

  • Access: to know what data we process.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure: to request the deletion of data when it is no longer necessary.
  • Restriction: to request that we restrict processing.
  • Objection: to object to processing based on legitimate interest.
  • Portability: to receive the data in a structured and transferable format.

You can exercise these rights by writing to privacidad@studysalad.es and indicating the right you wish to exercise. We may require a copy of an identity document to verify your identity. You can also file a complaint with the Spanish Data Protection Agency: www.aepd.es

9. Cookie policy

Study Salad uses cookies and similar technologies for the operation of the site, usage analysis and personalization. You can find the details, types and how to manage them in our cookie policy.

10. Security measures

Digitup Studio S.L. has adopted the technical and organizational measures necessary to guarantee the confidentiality, integrity, availability and resilience of personal data, including:

  • Encryption of data in transit (SSL/TLS).
  • Secure authentication through Firebase Auth.
  • Protection of access to databases and servers.
  • Continuous monitoring and anti-fraud policies.
  • Automatic backups.

11. Changes to this policy

Digitup Studio S.L. reserves the right to modify this Privacy Policy at any time. Any substantial change will be notified to registered users by email or within the platform. The updated version will always be available on the website, and continued use of the service after the changes will imply acceptance.

12. Contact

For any question, query or exercise of rights, you can write to privacidad@studysalad.es or to Digitup Studio S.L., Calle Alcalá 211, 28028 Madrid (Spain).