Privacy Policy

---

OpenGenius Ltd

Study Slam Privacy Policy

Last updated: August 2026

Next review: August 2027, or sooner where significant legal, regulatory, product or processing changes occur

1. Introduction

At OpenGenius Ltd we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how OpenGenius Ltd collects, uses, stores and protects personal information when you use Study Slam, visit our websites, contact us, access support services, or otherwise interact with us.

We are committed to processing personal data responsibly, transparently and in accordance with applicable data protection laws, including:

• The UK General Data Protection Regulation (UK GDPR);
• The Data Protection Act 2018; and
• The Privacy and Electronic Communications Regulations (PECR), where applicable.

We do not sell personal data.

We only share personal information where necessary to:

• provide our services;
• operate our business;
• maintain security;
• comply with legal obligations;
• protect our services and users; or
• where you have provided appropriate consent.

Please read this Privacy Policy carefully.

If you do not agree with this policy, you should not use Study Slam.

For clarification on any details contained within this policy, please contact us via email: support@studyslam.com

Further information about data protection rights and responsibilities is available from the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection:

https://ico.org.uk/

OpenGenius Ltd is registered with the ICO as a data controller. ICO registration number: Z1521108

2. Who we are

OpenGenius Limited is a company registered in England and Wales. Company number: 05653541

Registered office: OpenGenius Ltd Tec Marina Terra Nova Way Penarth United Kingdom CF64 1SA Contact: TBC

Throughout this policy, references to:

• “OpenGenius”;
• “Study Slam”;
• “we”;
• “us”;
• “our”;

refer to OpenGenius Ltd.

OpenGenius Ltd develops and operates Study Slam, a cloud-based AI-enabled educational support and revision platform designed to help students understand, organise and revise learning materials.

3. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed through:

• Study Slam web applications;
• Study Slam software services;
• Study Slam websites;
• customer support channels;
• onboarding and account registration processes;
• educational support arrangements;
• marketing and communications activities;
• events and business interactions;
• third-party integrations connected to Study Slam.

Where Study Slam access is provided through an educational institution, organisation or support arrangement, additional agreements may apply.

For example, where an organisation determines how user information is managed within its account, that organisation may have responsibilities as a separate controller or joint controller under applicable data protection laws.

Where Study Slam access is arranged through Disabled Students’ Allowance (DSA) support processes, OpenGenius processes personal information necessary to provide the service.

OpenGenius does not generally require information about a user’s support needs to provide Study Slam.

Where information relating to support arrangements is provided to OpenGenius, processing will be limited to what is necessary to provide and administer access to the service.

4. Our Role as Data Controller

OpenGenius Ltd acts as a data controller for personal data collected and processed for purposes including:

• providing and maintaining Study Slam services;
• managing user accounts;
• customer support;
• service security;
• product improvement;
• communications;
• billing administration;
• legal and regulatory compliance.

This means we determine why and how personal data is processed for these activities.

Where OpenGenius processes personal data on behalf of a customer organisation, such as an education provider or institutional customer, we may act as a data processor under the terms of an applicable data processing agreement.

5. Information we collect

The information we collect depends on how you interact with Study Slam and our services.

Information you provide directly

When you create an account, access Study Slam, contact us or use Study Slam features, we may collect:

Account information

• Name;
• Email address;
• Telephone number;
• Educational institution details where provided;
• Course or study information where provided;
• Account preferences;
• Profile information.

Subscription and access information

Where applicable, we may process:

• Access arrangement details;
• Subscription information;
• Billing details;
• Payment status;
• Transaction information.

Payment card details are processed through secure payment providers.

OpenGenius does not store complete payment card numbers.

Learning materials and content you provide

Study Slam allows users to upload and process educational materials to support learning and revision.

This may include:

• Lecture notes;
• Revision notes;
• Documents;
• Study materials;
• User prompts and questions;
• Other information you choose to submit.

This content is processed to provide Study Slam functionality.

You remain responsible for ensuring that you have appropriate rights to upload and use any materials submitted to Study Slam.

AI-generated content

When using Study Slam AI features, we may process:

• prompts submitted by users;
• information provided to generate responses;
• AI-generated summaries;
• generated quizzes;
• generated explanations;
• generated audio learning content.

This processing is required to provide requested AI-enabled functionality. We provide further information on how your data is managed by AI here

Technical information

When you use Study Slam, we may collect technical information including:

• IP address;
• device information;
• browser type;
• operating system;
• usage information;
• security logs;
• performance information.

This information helps us:

• operate Study Slam;
• maintain security;
• identify technical issues;
• improve reliability.

6. How we use Personal Data

We use personal data for the following purposes.

Providing and operating Study Slam

We process information necessary to:

• create and manage user accounts;
• authenticate users;
• provide access to features;
• store and process learning materials;
• provide AI-enabled functionality;
• generate requested educational resources;
• maintain service availability.

The lawful basis for this processing is generally performance of a contract.

Maintaining security and protecting our services

We process information to:

• detect and prevent misuse;
• protect user accounts;
• monitor system security;
• investigate suspected security incidents;
• maintain service integrity.

The lawful basis for this processing is generally legitimate interests, as we have a legitimate interest in protecting our users, systems and business operations.

Improving Study Slam

We may analyse service usage information to:

• improve reliability;
• develop features;
• understand product performance;
• resolve technical issues;
• improve user experience.

Where possible, we use aggregated, anonymised or minimised information.

The lawful basis for this processing is generally legitimate interests.

Customer support

When you contact us, we may process information to:

• respond to enquiries;
• troubleshoot problems;
• provide assistance;
• maintain support records.

The lawful basis is generally performance of contract or legitimate interests, depending on the circumstances.

Communications

We may contact you regarding:

• important service updates;
• security notifications;
• changes affecting your account;
• product information;
• educational content.

Essential service communications do not require marketing consent.

Marketing communications are handled separately in accordance with applicable privacy and electronic marketing laws.

7. Artificial Intelligence (AI) and Automated Processing

Study Slam includes AI-enabled features designed to support learning and revision.

These features may include:

• AI tutoring;
• generating revision questions and quizzes;
• creating summaries;
• explaining concepts;
• processing uploaded learning materials;
• creating podcast-style audio learning content.

How AI processing works

Where you choose to use AI features, relevant information may be securely transmitted to approved third-party AI providers to generate responses or complete requested functionality.

AI processing is used to provide educational assistance and suggestions.

Study Slam’s AI features do not make decisions that produce legal or similarly significant effects about individuals.

AI-generated outputs:

• are provided as assistance only;
• may contain inaccuracies or omissions;
• should be reviewed before being relied upon;
• remain the responsibility of the user.

User control of AI features

AI functionality is optional where enabled within Study Slam.

You control whether you use AI features and what information you provide.

You should avoid entering confidential, sensitive or unnecessary personal information into AI features unless required for your intended use.

Third-party AI providers

Study Slam uses approved third-party technology providers to support certain AI functionality.

Current AI-enabled services may include:

OpenAI Some Study Slam generative AI functionality is powered by OpenAI technology.

Where AI functionality is used, relevant inputs may be processed by OpenAI to provide the requested service.

OpenGenius has contractual arrangements and technical controls designed to protect customer information.

OpenGenius does not permit customer data submitted through approved Study Slam AI integrations to be used to train third-party AI models.

Amazon Web Services (Polly) Study Slam may use Amazon Polly technology to support audio generation functionality.

Where audio generation is requested, relevant information may be processed by Amazon Polly to provide the requested service.

Processing arrangements are governed by applicable supplier agreements and security controls.

8. Educational Use and Student Privacy

Study Slam is designed as an assistive educational technology platform for students aged 18 and over.

General service use

Study Slam is designed to support individual learning and revision activities.

We do not use student information for advertising purposes or unrelated commercial activities.

Educational and support arrangements

Where Study Slam is provided through an educational organisation or support arrangement:

• the organisation may have responsibilities regarding lawful access and use;
• OpenGenius processes personal information only for agreed service purposes;
• access may be managed through appropriate onboarding processes.

Where Study Slam is provided through Disabled Students’ Allowance arrangements, OpenGenius processes only the information necessary to provide access and operate the service.

Student responsibilities

Students are responsible for:

• maintaining the security of their account;
• using Study Slam appropriately;
• ensuring uploaded materials are used lawfully;
• complying with academic integrity requirements.

9. Third-Party Integrations

Study Slam may allow users to connect third-party services to enhance functionality.

Examples may include:

• authentication services;
• cloud storage services;
• educational tools;
• other approved integrations.

When you connect a third-party service:

• information may be shared with that service to enable the integration;
• the third party’s own privacy policy applies to its processing activities;
• you should review the permissions requested before enabling an integration.

10. Cookies and similar technologies

Cookies are small files stored on your device that allow websites and applications to recognise users, remember preferences and understand usage.

Study Slam and our websites may use cookies for purposes including:

Essential cookies

These cookies are required for:

• authentication;
• security;
• account functionality;
• service operation.

These cannot be disabled where they are necessary to provide the service.

Analytics cookies

Where we use analytics tools, these help us understand:

• how users interact with our websites;
• service performance;
• areas for improvement.

Where required by law, analytics cookies are only placed after obtaining appropriate consent.

Managing cookies

You can control cookies through:

• our cookie preference tools;
• your browser settings.

Disabling certain cookies may affect functionality.

Study Slam Privacy Policy

11. How we share Personal Data

OpenGenius does not sell personal data.

We only share information where necessary for legitimate business purposes, including:

Service providers and processors

We use carefully selected suppliers that support our operations, including:

• cloud hosting providers;
• software infrastructure providers;
• payment providers;
• customer support providers;
• security providers;
• analytics providers;
• AI technology providers.

These providers process information only according to appropriate contractual arrangements and instructions.

Where third-party suppliers process personal data on our behalf, we assess their suitability and apply appropriate supplier management controls.

Educational and organisational arrangements

Where Study Slam is provided through an educational organisation, institution or support arrangement, information may be shared where necessary to:

• establish access to the service;
• manage accounts;
• provide support;
• administer agreed service arrangements.

The responsibilities of OpenGenius and any organisation providing access will depend on the specific arrangement in place.

Legal requirements

We may disclose information where required to:

• comply with legal obligations;
• respond to lawful requests;
• protect users, systems or property;
• investigate suspected misuse or unlawful activity.

Business changes

If OpenGenius undergoes a merger, acquisition, restructuring or transfer of assets, personal information may be transferred as part of that process.

Any transfer will continue to be protected by applicable data protection obligations.

12. International Data Transfers

Some of our technology providers may process information outside the UK.

Where personal data is transferred internationally, OpenGenius applies appropriate safeguards required under applicable data protection law.

These may include:

• adequacy decisions recognised under UK GDPR;
• International Data Transfer Agreements;
• Standard Contractual Clauses;
• additional technical and organisational safeguards.

Safeguards may include:

• encryption;
• access controls;
• data minimisation;
• supplier security assessments.

We regularly review international transfer arrangements to ensure they remain appropriate.

13. Security of your information

OpenGenius Ltd maintains an Information Security Management System aligned with ISO/IEC 27001:2022 requirements and is Cyber Essentials+ certified.

Our artificial intelligence governance activities are aligned with the ISO/IEC 42001:2023 standard.

We apply appropriate technical and organisational measures to protect personal data, including: – access controls; – authentication controls; – encryption where appropriate; – security monitoring; – supplier assessment processes; – backup and recovery procedures; – incident management processes.

No method of electronic transmission or storage can guarantee absolute security.

However, we continually review and improve our security practices to reduce risks.

14. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, security and operational requirements.

Typical retention periods include:

Account information

Retained while your account remains active.

Deleted or anonymised following account closure in accordance with our security protocols and retention requirements.

User-created content and learning materials

Content uploaded to Study Slam, including learning materials, prompts and generated resources, is retained while required to provide the service.

Following account closure or termination, content may be deleted or anonymised in accordance with:

• applicable retention requirements;
• contractual obligations;
• security processes;
• customer requests where applicable.

Support records

May be retained for an appropriate period to:

• resolve issues;
• maintain service quality;
• evidence customer interactions.

Security and compliance records

May be retained where necessary for:

• security investigations;
• legal obligations;
• audit requirements;
• governance activities.

Retention periods are reviewed regularly and documented within our internal retention framework.

15. Your Data Protection Rights

Under applicable data protection laws, you may have rights relating to your personal data.

These rights may include:

Right of access You have the right to request a copy of the personal data we hold about you and information about how we process it. This is commonly known as a Data Subject Access Request (DSAR).

Right to rectification You have the right to request correction of inaccurate or incomplete personal information.

Right to erasure You may request deletion of your personal data where:

• it is no longer necessary for the purpose it was collected;
• you withdraw consent where consent was the lawful basis;
• you object successfully to processing;
• we are required to erase it by law.

Deletion requests may be subject to legal, security, contractual or operational requirements.

Right to restrict processing

You may request that we limit how we use your personal data in certain circumstances, including where you dispute its accuracy or have objected to processing.

Right to object

You may object to certain processing activities, including where we rely on legitimate interests or where personal data is processed for direct marketing.

Right to data portability

Where applicable, you may request your personal data in a structured, commonly used and machine-readable format.

This right applies where processing is based on consent or contract and carried out by automated means.

Right to withdraw consent

Where we rely on consent as our lawful basis, you may withdraw consent at any time.

Withdrawal of consent does not affect processing carried out before withdrawal.

Please note that withdrawing consent may affect certain optional functionality.

16. Exercising Your Rights

To exercise any of your data protection rights, please contact us in writing at:

Email: support@studyslam.com

Postal address:
OpenGenius Ltd
Tec Marina
Terra Nova Way
Penarth
United Kingdom
CF64 1SA

We may need to verify your identity before responding to requests to protect personal information from unauthorised disclosure.

We aim to respond to valid requests within 30 days.

Where requests are complex or numerous, we may extend this period where permitted by law and will notify you if an extension is required.

17. Marketing Communications

We may contact individuals regarding:

• service updates;
• product announcements;
• educational content;
• events;
• relevant information about Study Slam.

Where required by law, we will obtain appropriate consent before sending marketing communications.

You can unsubscribe from marketing communications at any time using:

• the unsubscribe link included in marketing emails;
• your communication preferences;
• contacting us directly.

Essential service communications, such as security alerts, account notifications and important service updates, are not marketing communications and may continue where necessary.

18. Privacy Controls within Study Slam

Where available, Study Slam provides users with controls over optional processing activities.

These may include:

Essential functionality

Required for operation of the service:

• account authentication;
• security controls;
• core Study Slam features;
• service communications.

Optional functionality

Users may control:

• AI-enabled features;
• marketing communications;
• optional notifications;
• third-party integrations.

Where consent is required, users may withdraw it through available controls or by contacting us.

19. Artificial Intelligence transparency and user responsibilities

OpenGenius is committed to responsible development and use of artificial intelligence.

Where Study Slam uses AI functionality:

• AI outputs are provided as assistance and suggestions;
• users remain responsible for reviewing generated content;
• AI outputs should not be relied upon without appropriate human judgement;
• AI features are designed to support learning rather than replace teaching, academic judgement or professional educational advice.

OpenGenius continues to monitor evolving AI governance requirements, including relevant developments in UK and international AI regulation.

Our AI governance approach is aligned with ISO/IEC 42001:2023 principles.

20. Complaints

If you have concerns about how OpenGenius processes your personal data, please contact us first so we can investigate and attempt to resolve your concern.

Contact: support@studyslam.com

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

ICO website: https://ico.org.uk/

This does not affect any other legal rights or remedies available to you.

21. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

• changes to our services;
• new technology or processing activities;
• changes in legal or regulatory requirements;
• improvements to transparency and user controls.

Where changes are significant, we will take reasonable steps to notify affected users.

The latest version will always be published through our website.

22. Contact and Governance

Privacy responsibility at OpenGenius Ltd is managed through our wider information security and governance framework.

Our privacy practices are reviewed alongside:

• information security controls;
• supplier management processes;
• AI governance activities;
• data retention reviews;
• regulatory developments.

For privacy enquiries: Email: support@studyslam.com

Address:
OpenGenius Ltd
Tec Marina
Terra Nova Way
Penarth
United Kingdom
CF64 1SA