StudyWright privacy policy

StudyWright · Support

Effective 12 November 2026 · version 1.4

StudyWright is a study app. You add material to it, either PDFs of your own or titles from its built-in library, and the app searches that material, answers questions about it, and writes quiz questions from it.

This policy describes what happens to that material. It is written against the app's actual code rather than around it, and every claim below is one a reader could check by running the app or reading the source.

The short version

  • StudyWright has no server, no account and no login. The developer operates no infrastructure that your material could be sent to. The one thing the developer collects is anonymous usage statistics, which you can turn off (below).
  • Your library is stored only in the app. The documents you add, their text, the search index built over that text, and the quiz questions written from them live in the app's private storage. The app sends only the retrieved excerpts needed for an Apple Intelligence request, as described below; it never uploads the stored library to the developer.
  • Answering a question uses Apple Intelligence on Apple's servers. When you ask a question, the question and the passages retrieval selected from the document you are reading are sent to Apple's Private Cloud Compute, which writes every answer and every quiz question. If it cannot answer, the app shows you the passages it found instead, and quiz questions wait until it can; it never answers with a model on your device. That answering request goes to Apple, not to the developer.
  • The app sends anonymous usage statistics unless you turn them off. These are counts of which screens and features you use, sent to Aptabase, an analytics service. They never include your documents, questions, answers or notes, and they carry no identifier. Turn them off in Settings ▸ Usage Statistics.

What stays on your device

All of this lives in StudyWright's private application-support storage and is visible to no other app:

  • each document's original file (the PDF you imported, or a built-in title's book file), kept so a citation can open the place it came from
  • the text extracted from it
  • the embeddings and search index built from that text
  • images cropped out of the document for figure captions
  • the quiz questions the app has written from that document, and the identifiers of any you set aside after disagreeing with a grade, so the app does not ask them again
  • the active quiz's question identifiers, selected answers, the identifiers of questions you set aside and section-title scope (or whole document), saved with that document so the same run can continue after you close or relaunch the app; the question text remains in the quiz pool above rather than being copied into this progress record
  • your Ask conversation, saved with that document so the thread can continue after you close or relaunch the app
  • your study record: for each quiz answer as it is graded, the question's identifier, the section-title scope (or whole document), its origin label, the grade, which option you chose and when; like active quiz progress, it copies no question text, options, answer key, explanation or passage
  • your highlights and notes: the passages you highlight and any note you write, which nothing in the app sends to a model

A document's original file is stored under a neutral name (source.pdf or source.epub), so its subject is not readable from a directory listing.

Deleting a document from the Library deletes all of it — the stored text, the index, the quiz questions, active quiz progress, the study record, highlights and notes, the Ask conversation and the copy of the original. Replacing a document also deletes the prior material's active quiz progress, study record, highlights and notes, and Ask conversation. Deleting the app deletes everything.

What leaves your device

Three network paths exist. The first two go to Apple. The third carries anonymous usage statistics to Aptabase, an analytics service the developer uses. It carries none of your material.

1. Downloads from Apple

On first launch, StudyWright downloads the English search model — about 128 MB. The download is an Apple-hosted asset pack; the app tells Apple which pack it wants and nothing else. Each title you download from the built-in library arrives the same way, as its own Apple-hosted asset pack. No part of your material is sent with them. A PDF you import is copied from the file you choose into the app's storage, and reading its text, including recognizing the text of scanned pages, happens on your device. After the download, searching your material runs entirely on your device.

2. Answering your questions (Apple Intelligence and Private Cloud Compute)

StudyWright does not include a language model of its own. It uses Apple Intelligence, and of its two tiers it uses one:

  • Apple's Private Cloud Compute — Apple's server-based tier. It writes every answer and every quiz question.
  • The model on your device — not used. When Private Cloud Compute is unavailable, busy, or your device's daily Apple Intelligence allowance is spent, the app shows you the passages it retrieved without a generated answer, and says why above the ask thread.

When a question is answered through Private Cloud Compute, what is sent to Apple is:

  • the question you typed
  • the passages retrieval selected from the document you are reading as the basis for the answer, quoted verbatim
  • the recent turns of the same conversation, if you asked a follow-up

Writing quiz questions works the same way, with a passage from your document in place of a question. Quiz questions are written only while the app is open.

What Apple says about this tier. Apple designs Private Cloud Compute so that the data sent to it is used only to fulfill the request, is not stored afterwards, and is not used to train Apple's models; the servers are cryptographically attested so that a device will only send data to a build Apple has published for inspection. Those are Apple's guarantees about Apple's infrastructure, described here so you know what they cover — see Apple's own Private Cloud Compute documentation for the authoritative statement. StudyWright is bound by Apple's Acceptable Use Requirements for Apple Intelligence and adds no processing of its own on the way.

What is not true, and is worth saying plainly: "nothing ever leaves your device" would be a false description of this app. Excerpts of your material do leave it, to Apple, in order to be answered. What is true is that they go to no third party, no developer-run server and no advertising or analytics system, and that they are not retained.

If you would rather nothing left the device at all, turn off Apple Intelligence in Settings. StudyWright then writes no answers and no new quiz questions, and shows you the passages it retrieved, which stay on your device.

3. Anonymous usage statistics (Settings ▸ Usage Statistics)

To learn which features get used, StudyWright counts some of the things you do in the app and sends those counts to Aptabase, an analytics service, in its United States region. This is on unless you turn it off, and nothing is sent until the app has shown you a notice about it, which it does the first time it opens.

  • What is counted. Each event is one of a fixed list the app defines:
    • a screen or pane opened (the Library, Settings, a book, Contents, Ask, Quiz), and whether the book is a built-in title or one of your own;
    • a Library filter chosen;
    • a built-in title's download started;
    • a question answered, with only whether the answer was verified, unverified, absent or failed, and whether it was typed or asked again from the button shown when no answer was written;
    • a quiz started (whole book or one section, and how many questions);
    • a quiz finished (how many questions, and how many were credited);
    • a highlight or note made, a study export opened, or a calendar reminder offered;
    • a setting changed, to one of its named choices.
  • What every event also carries: the time it happened, whether the build is a development build, your language, the system and its version (iOS 27.0.1, say), the app's version and build, a fixed label naming the app's sending code, and the hardware model (such as iPhone18,2). It also carries a random session number that lives only in memory and is replaced after an hour without an event, so it survives neither an idle hour nor a relaunch.
  • What is never sent: your documents, their titles or file names, your questions, answers, highlights or notes, section names, anything you search for, which built-in title you read, and any identifier for you or your device. The app stores nothing for this on your device except your on-or-off choice and whether you have seen the notice. Counts not yet sent when the app closes are lost.
  • Your network address. Like any server, Aptabase sees the address the request comes from. Aptabase states that it uses the address only in passing: to estimate the country, and to form an anonymous hash whose salt changes every 24 hours. It states that it never stores the address. What Aptabase keeps, and for how long, is governed by Aptabase's own privacy policy.
  • Turning it off takes effect at once, and counts waiting to be sent are dropped. You can turn it off from that first notice, or at any time in Settings ▸ Usage Statistics. Turning it back on sends only what happens afterwards.

The developer sees these counts in Aptabase's dashboard, added up across everyone who uses the app. They are used only to decide what to improve. They are not sold, not used for advertising, not combined with any other data, and not used to track you across apps or websites.

Adding events to your calendar is not a network path. Add Review Session and Remind Me to Quiz hand an event — the document's title, a fixed reminder text and a link back into the app — to your own calendar app, which saves it only if you tap Add; StudyWright never reads your calendar and asks for no calendar access. Export .ics hands the same event to the share sheet, where you choose where it goes.

What the developer receives

The anonymous usage statistics described above, unless you turn them off, and nothing else directly. StudyWright contains no advertising software, no crash-reporting SDK and no tracking of any kind, and it has no developer-run server. It does not use the advertising identifier, the vendor identifier, your device name, your contacts, your location, your photos, your camera or your microphone. On your first import, it asks for notification permission so it can say that an import or five quiz questions are ready; the messages contain no document title or study content, and denying permission leaves the same notices on the Library or Quiz tab. File access comes only from the system picker and the files you explicitly choose.

The only information about StudyWright that reaches its developer comes from Apple, on Apple's terms, in the form every App Store developer receives:

  • aggregate App Store metrics — download and usage counts, never tied to a person
  • crash reports, if you have opted in to sharing them with developers in Settings
  • App Store reviews you choose to write

None of these can contain your documents, your questions or your answers.

The records the app keeps for itself

StudyWright writes small local operational logs so the app can be judged honestly. They contain only app-created identifiers, times, durations, counts, booleans and structured result codes:

  • the answer funnel records whether an answer was verified, unverified or absent, the typed reason when there was no answer, and which next step was used
  • quiz-pool and background-work records count generation attempts, outcomes and system grant states
  • the study-round scorecard records the device class, system and app build, supported import format outcomes, time to its product milestones, and whether you explicitly report a crash, hang or unrecoverable document loss

None of these operational logs records a question, answer, passage, document title, filename or hash of any of them. StudyWright never transmits these records. Development builds have explicitly enabled tools for viewing them and sharing a content-free report through the system Share action; those tools are absent from Release builds. The person sharing chooses a recipient and sees the report that leaves. Nothing is shared on its own. The records are deleted with the app.

Backups

If you back up your device to iCloud or to a computer, the backup includes the quiz questions written for your documents and your reading state for each document, including active quiz progress, because those are yours and are not all cheaply re-derivable. A PDF you imported and the text extracted from it are included too, since they cannot be downloaded again. A built-in title's own files, every document's search index and the local operational logs above are excluded from backup, since they can be downloaded again or rebuilt. Backups are Apple's system and your choice; StudyWright neither creates nor reads them.

If you contact support

StudyWright has no in-app upload. If you email a bug report, everything in the email is what you chose to put there — including any file or screenshot you attach yourself, in your own mail app, where you can see and remove it before sending. The app never attaches anything on your behalf and never sends a report on its own.

Anything you do send is handled this way:

  • it is read only to diagnose the problem you reported
  • it is never used to train anything, sold, or shared with anyone
  • attachments are deleted once the report is resolved, and in any case within 90 days
  • you can ask for your correspondence and its attachments to be deleted at any time, and it will be done within 30 days

Children

StudyWright is not directed at children. Apart from the anonymous usage statistics above, which carry no identifier and none of anyone's material, it collects nothing from anyone. It has no accounts, messaging, purchases, advertising or user-to-user features. Study material a child imports is subject to the same rule as everyone else's: it stays on the device, except for the excerpts sent to Apple Intelligence to answer a question.

Your choices

  • Remove one document — Library ▸ the document ▸ Remove. Its text, index, questions and the stored copy of the file are deleted from the device.
  • Keep everything local — turn off Apple Intelligence in Settings and turn off usage statistics. Retrieval still works; the app shows retrieved passages instead of generated answers.
  • Stop usage statistics — Settings ▸ Usage Statistics ▸ Share Anonymous Usage Statistics, or Turn Off on the notice the app shows when it first opens. Counts waiting to be sent are dropped.
  • Remove everything — delete the app.
  • Ask a question about this policy or your data — write to the address below.

Changes to this policy

If this policy changes, the version and effective date at the top change with it, and the copy inside the app is updated in the same release. Material changes to what leaves your device will be described in the release notes rather than left for a reader to spot.

Contact

Questions about privacy, requests to delete correspondence, support and bug reports: support@vocaro.com