Privacy Policy

StuLife is a personal organiser for students — Planner, Finance, Food, and Jobs & Network — a free, non-commercial student project run by its two creators, who are the people responsible for your data. It is not run by a company. This policy covers what we collect, why, and how you stay in control of it.

When you create an account, we store your username, email address, mobile number, country, university and programme.

Everything you add inside StuLife — tasks, expenses, accounts, budgets, food preferences, job applications, and network contacts — is stored so it’s there the next time you sign in. It belongs to you; we don’t read it, sell it, or use it for anything besides showing it back to you (and anyone you explicitly choose to collaborate with via Settings → Collaborate).

If you share your Planner with someone, they also see the events on your connected calendars and calendar links (title, time and place) in their Planner. They can’t change them, and you can stop sharing at any time in Settings → Collaborate.

If you use Find jobs, we store the answers you give — education, course, experience, the roles you want, your skills, the kinds of job and the place you search around — and the list of companies you choose to watch. We use them only to look for openings for you: StuLife reads each watched company’s public careers feed and public job boards, and sends those sites only a role, company name or town — never your name, email or other details. You can edit all of it in Settings → Job setup.

StuLife can optionally connect to your Google Calendar and Gmail, entirely at your choice, from Settings → Connected calendars and Settings → Mail → tasks. Nothing is ever connected without you explicitly starting that flow yourself and approving it on Google’s own consent screen.

Calendar: read access to see your events, so they show up alongside your Planner tasks. If you also allow it, StuLife can add a task or event to the Google calendar you pick, and change or delete an event when you edit or delete it in StuLife. It only does so when you ask, never in the background, and it never touches your calendar settings or other people’s calendars.

Gmail: read-only access, used only to check mail from the specific senders or domains you add to your own watch list (Settings → Mail → tasks). StuLife never reads your inbox beyond those senders, never sends mail on your behalf, and never touches anything outside that watch list. Only the subject, sender, and a short snippet of a matching email are stored, as the note on the task it creates.

StuLife’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the Planner and Mail → tasks features you asked for. It is never used for advertising, never sold, never used to train AI or machine-learning models, and never read by people at StuLife except where you ask us for support or the law requires it.

You can disconnect either at any time from the same settings page, and from your Google Account’s own permissions page — this immediately revokes StuLife’s access.

At sign-up (and later in Qommune) we ask where you’re from, your university, programme and level of study, and where you’re staying. We use these only to put you in group chats: one for your course, one for your university, one for your country, and one for your postcode area.

For where you’re staying we keep the spot you picked on the map, but it is never shown to anyone. Other people only see the postcode area (like “LS6”) as the name of a group. People in a group can see your username and the messages you post there. One-to-one messages are visible only to you and the other person.

You can delete your own messages, and block anyone, from the chat. Blocking stops them messaging you and hides you from each other in group chats. We don’t read your messages, sell them or use them for advertising; we may look at a message only to investigate a report of abuse, or where the law requires it.

In Qommune you can start or join multiplayer games with the people in your groups. While a game runs we keep the room, who is in it, the moves and answers made, and the scores. Other players see your username, your score and your answers only as the game shows them. Rooms are closed when they go quiet and deleted a week later. You can turn game invites off in Settings, Notifications, and you can’t be put in a room with someone you have blocked.

The StuLife Chrome extension saves jobs, people and companies from the page you’re viewing to your own StuLife account. You sign in to it with your StuLife username and password: it sends them only to stulife.qommune.in, then keeps a sign-in token in the extension (it doesn’t store your password) until you sign out. That token can only be used for your jobs and contacts and your application details.

On LinkedIn job, profile and company pages, and only when you press Save, it reads that page’s title, company, role, location, deadline and link (or a person’s name and headline) and sends them to your StuLife account. It doesn’t read your LinkedIn messages, feed or connections, and it doesn’t read any other site.

Quick fill uses the application details you add in StuLife (Settings, Application details: name, phone, address, links). The extension reads them from your account when you open it and puts them into the form you choose when you press “Fill this page”. It keeps no copy of its own and sends them nowhere else. The extension asks for access to a page only when you press “Fill this page”, and you can remove that access again from the extension. We don’t collect browsing history, and we don’t use extension data for advertising or sell it.

Everything you send to StuLife — including anything from your Google account — travels over HTTPS (TLS). The app itself is only reachable through our HTTPS web server, and the database sits on a private network with no public access.

Your password is never stored. We keep only a salted one-way hash of it (scrypt) and compare it in constant time at sign-in. Your sign-in cookie is Secure and HttpOnly, so scripts on a page cannot read it, and our servers send standard browser security headers.

Every request is checked against the signed-in account, so you can only ever read or change your own data. The one exception is a section you deliberately share with another person through Settings → Collaborate, which you can stop at any time.

Google access tokens are used only on our server to call Google for the features you turned on. They are never sent to your browser or to the StuLife extension, and disconnecting in Settings, or revoking access in your Google Account, stops them working straight away. Mail content from Google is limited to the subject, sender and short snippet described above.

In-class mode writes down what is said using your browser's speech recognition. StuLife never records or saves the sound, and the words stay on your device, in memory, until you close the page. Depending on your device, the browser either turns speech into words on the device itself or sends the sound to its provider (for example Google, for Chrome) for that moment; StuLife does not receive it. The summary, key points, action items and notes are worked out on your device without any AI service. Please check that your lecturer and your university allow you to write down a lecture.

Translation, in chats and in In-class mode, uses the translator built into your browser on your device. Your reading language is saved only in your browser, and what other people send is never changed for anyone else.

We don’t sell your data. We don’t show ads. We don’t share your data with third parties except the infrastructure that runs StuLife itself (our hosting and database provider), who cannot read it for any purpose of their own.

You can edit or delete anything you’ve added inside the app. You can disconnect Google access at any time. To delete your account entirely, contact us using the details below.

Questions about this policy or your data: join@stulife.in.