// Legal
Privacy Policy
Last updated: March 24, 2026 · Student Stream is built with privacy-first principles. We collect the minimum data necessary, store it in your own database, and never sell it.
Information We Collect
Student Stream collects the minimum information necessary to provide the service. This includes your email address for account creation, student expense data you manually enter (item names, amounts, categories, frequencies, roommates details), and usage metadata such as feature interactions. We do not collect bank accounts, credit card passwords, or financial logins.
How We Use Your Information
Your data is used solely to: (1) provide and improve the Student Stream service, (2) send due date alerts and notifications you have opted into, and (3) generate Gemini AI-powered budget coaching summaries using your expense data. We never sell, rent, or share your personal data with third parties.
Data Storage & Security
All expense data is stored in your secure Supabase PostgreSQL database. Student Stream uses Row Level Security (RLS) to ensure users can only access their own data. Data is encrypted in transit (TLS 1.3) and at rest (AES-256) using Supabase's secure cloud infrastructure.
AI Features (Gemini)
When you use AI auto-fill or AI Budget Coach summaries, your expense details are processed using Google Gemini. Student Stream does not store these API requests beyond the immediate session. Gemini AI features are entirely optional and secure.
Cookies & Tracking
Student Stream uses only functional cookies necessary for authentication (Supabase session tokens) and your theme preference (localStorage). We do not use advertising cookies, third-party tracking scripts, or behavioral tracking services.
Data Retention & Deletion
Your data is retained until you delete your account. You can request deletion of your account at any time, which permanently removes all your personal details and expenses. We do not retain backup copies of deleted data.
Your Rights
You have the right to access all data we hold about you, correct inaccurate information, request deletion of your data, and export your data in standard formats (JSON, CSV). Contact us at privacy@studentstream.io to exercise any of these rights.
Contact
For privacy questions or requests, contact us at privacy@studentstream.io or open an issue on our GitHub repository. We respond to all privacy requests within 30 days.