Privacy Policy — StudyLap
Effective date: 2026-05-16 Last updated: 2026-05-16
1. Who We Are
StudyLap is operated by Cocon Robotics Co., Ltd. (“we”, “us”, “our”).
- Contact: system@cocon-inc.co.jp
- Website: https://studylap.cocon-lab.com
StudyLap is a mobile learning-timer application designed for students ages 14–18 enrolled in cram schools and academic prep programs.
2. Information We Collect
| Category | Data | How collected |
|---|---|---|
| Account | Email address, display name, age/grade | Firebase Authentication (Magic Link) |
| Activity logs | Study sessions, timestamps, scheduled events, completion status | Firestore (written by the app) |
| Photos | Worksheet photos (optional upload) | Firebase Storage — only if user explicitly uploads |
| Device / Push | FCM registration token, device OS, app version | Firebase Cloud Messaging — optional, for push reminders |
| Analytics | Screen views, button taps, session durations, feature usage | Firebase Analytics (anonymised event stream) |
What we do NOT collect
- Precise or approximate location data
- Contacts, calendar, or microphone data
- Payment information
- Biometric identifiers
- Any data from users under 13 without verified parental consent
3. How We Use Your Data
| Purpose | Data used |
|---|---|
| Account creation & authentication | Email, display name |
| Study tracking & scheduling | Activity logs, grade |
| Progress visualisation (Analytics tab) | Activity logs, analytics events |
| Push reminders for scheduled tasks | FCM token |
| In-app performance & crash monitoring | Analytics events, device info |
| Future feature: parent progress reports | Activity logs (aggregate only) |
We do not use your data for advertising, profiling for third-party purposes, or sale.
4. Third-Party Services
| Service | Purpose | Data shared | Location |
|---|---|---|---|
| Firebase / Google Cloud (Auth, Firestore, Storage, Analytics, FCM) | Core backend | Account, activity, analytics | United States |
Firebase / Google Cloud acts as a data processor only. Google does not sell or independently use your data for advertising.
We do not share personal data with any advertising networks, data brokers, or other third parties.
5. Data Retention
| Data type | Retention period |
|---|---|
| Account & activity data | Until the user deletes their account |
| Analytics events | 14 months (Firebase Analytics default) |
| FCM tokens | Until app uninstall is detected or token is refreshed |
| Inactive accounts | Deleted after 24 months of no sign-in activity |
6. Your Rights
You may, at any time:
- Access your data: view your profile, study records, and grade in-app.
- Correct your data: edit display name, grade, email via Settings.
- Delete your account: go to Settings → Delete Account — this permanently removes all your Firestore data and Firebase Auth credentials.
- Withdraw consent for push notifications: revoke notification permission in your device settings.
- Request data export or erasure by emailing system@cocon-inc.co.jp — we respond within 30 days.
GDPR/UK GDPR users (if applicable) have the additional rights to restriction of processing, data portability, and to object. Contact us to exercise these rights.
7. Children’s Privacy (COPPA / Under-16)
StudyLap is intended for users aged 14 and above.
- We do not knowingly collect personal data from users under 13. If we discover an account belongs to a child under 13 without verified parental consent, we will delete it promptly.
- For users aged 13–15, we recommend parental review of this policy and parental consent before use.
- Parents or guardians may contact us at system@cocon-inc.co.jp to request deletion of a minor’s data.
8. Security
- All data in transit is encrypted with TLS 1.3.
- Data at rest is encrypted by Firebase / Google Cloud infrastructure (AES-256).
- Access to production data is restricted to authorised Cocon Robotics personnel.
- We conduct periodic security reviews of our Firebase security rules.
9. Local Storage
The app uses AsyncStorage (device-local) to cache the authentication session token and user preferences. This data:
- Remains on your device only.
- Is not transmitted to any server beyond what is already stored in Firebase.
- Is cleared when you sign out or delete the app.
We do not use browser cookies (this is a native mobile app).
10. Changes to This Policy
If we make material changes to this policy, we will:
- Post the updated policy at
https://studylap.cocon-lab.com/privacy. - Display an in-app banner notifying you of the change.
- Send a notification email to your registered address.
Changes take effect 30 days after the notice date, or immediately if required by law.
11. Contact
For privacy-related questions, requests, or complaints:
Cocon Robotics Co., Ltd. Email: system@cocon-inc.co.jp Privacy policy URL: https://studylap.cocon-lab.com/privacy