Privacy Policy
LearnTogether: Study Room
Operated by TIMEAWAKE LIMITED, New Zealand
Effective date: 18 October 2026 · Version: 1.3
The short version
- You can browse the campus without an account. While you only browse, we create no account for you and keep nothing on our servers that is linked to you.
- To join a study room, you sign in with Apple. We do not ask Apple for your name. Starting with app version 1.3, after you confirm you are 16 or older, you must add and verify an email address before you can take your first seat — one Apple offers, or one you type and verify yourself (section 4.12).
- You must be 16 or older to join. We ask your birth month and year once, keep only an age group (16–17 or 18+), and discard the date.
- People in your room see your Bookling, your study direction, your tasks and how many you finished, and one of three statuses. They never see your personal stats or your age group. Starting with app version 1.3, they also see a nickname you choose yourself, in the native list only (not in the 3D classroom or in a Live Activity); reports and blocks still use your public ID, not your nickname.
- People in a room have no chat, no free text and no private messaging between them. They can only send preset interactions, such as a nod or a wave.
- We do not sell your data. We show no ads. We do not track you across other apps. We do not use third-party AI.
- Version 1.0 has no crash-reporting or analytics tools from other companies and sends no usage events. From version 1.0.1, if you turn on Share usage data and crash reports (off by default; section 4.7), the app may send limited usage events and crash reports to help us run the service and fix problems.
- If you allow notifications, the app sets its reminders on your iPhone. We do not send push notifications, and reminders send nothing extra to our servers.
- Our servers are run by Microsoft Azure in the United States.
- You can export your data and delete your account inside the app at any time.
- From version 1.0.1, Today's Tasks has an optional private note that stays only on your iPhone; we never see it.
- From version 1.0.1, the app may report per round whether you switched away from it, in seconds; the Lock Screen and anything it can't tell both count as staying focused.
- From version 1.0.1, after some rounds we may ask whether you felt someone was studying with you; answering is optional.
- From version 1.1, Feedback and suggestions (in Study Cottage and Settings) and Having a problem? Tell us (on error screens and the checkout summary) open Apple's Mail app with your app version, iOS version, device model and the name of the screen you were on already filled in; you can see and delete any of this before sending, and we add nothing else, including no account ID (section 4.9). Version 1.0.1 filled in only the app and iOS version.
- From version 1.1, Apple's own rating prompt may appear after a session you complete, at most once per app version, and Apple limits it further. The app keeps a few counters for this only on your iPhone and sends none of them to us or to Apple (section 4.10).
- From version 1.0.1, an invite link you share carries only a round's start time; the page it opens stores and sends nothing.
- From version 1.0.1, on iOS 26 or later, the app may first ask Apple whether you are 16 or older. Apple's answer is used only on your iPhone, and your age range is never stored or sent to us.
- From version 1.1, while you have a seat, your Lock Screen and Dynamic Island can show a Live Activity: the phase, a countdown, your rounds, how many others are studying and a small picture of a Bookling in your colour, always in the default outfit; never your chosen outfit, anyone's name or nickname, or tasks. The app sets it on your iPhone; we send it nothing. Its Continue to next round button keeps your seat without opening the app; the app does not ask you to unlock your iPhone first (section 5.3).
- From version 1.1, you pick your Bookling's colour and outfit when you first open the app. Before you sign in, your pick is stored only on your device. After you sign in, it is saved to your account like before; this is not a new type of data (section 3).
- From version 1.1, the campus and the study rooms can also appear as a 3D scene — a lakeside town and a classroom — instead of the native list. The town shows only anonymous Booklings and counts (how many are resting or focusing, how many wear each outfit, shown only with 2 or more people present); it never shows a name, an ID or a seat. The native list stays available, and the scene sends nothing itself (section 3.1).
- From version 1.2.1, if your seat has a planned number of rounds, the app can show a silent local reminder when your planned rounds are done. It is created on your iPhone and sends nothing to our servers (section 5.1).
- Starting with app version 1.3, the app may also receive push notifications sent from our servers through Apple's Push Notification service (APNs): a reminder to continue to the next round, and a reminder for a saved plan such as See you tomorrow. A push notification never includes your nickname. Our server stores a hash of the app's install ID and your device's APNs push token itself — needed to address Apple's push service — kept per device, separately from your device session, until you delete your account, Apple reports the token invalid, or up to 180 days pass without that device registering again (section 4.11).
- Starting with app version 1.3, you choose your own nickname (3 to 16 characters) instead of the app choosing one for you. It is visible to people in your room on the native list, but not in the 3D classroom or on a Live Activity. You can change it at most once a month; changing it, or deleting a 16-or-older account that had chosen one, holds the old key for 30 days so nobody else can take it right away (section 4.3).
- Starting with app version 1.3, once you confirm you are 16 or older, you must add and verify an email address before you can take your first seat — one Apple offers, or one you type and verify with a 6-digit code. After that, it's used to send a reminder for a saved plan and to receive verification codes. It is stored encrypted and does not prove the request is from you; if you are 16 or 17, this reminder and its codes are the only mail we ever send you (section 4.12).
- Starting with app version 1.3, LearnTogether Plus is a subscription billed by Apple. We store the transaction ID, the product, its expiry and whether it is a sandbox (test) purchase; we never see your card details (section 4.13).
- Starting with app version 1.3, you can create or join a private room with its own owner, members, invites and join requests. If a member aged 16–17 is in the room, the owner must approve new members (section 4.14).
- Starting with app version 1.3, a sit next to a friend link lets someone take the seat next to yours; it works for 24 hours, and your room snapshot never shows who sent it (section 4.15).
- Starting with app version 1.3, Crew lets users aged 18 and older send each other preset interactions beyond nods and waves. Like the rest of the app, there is no free text and no private messaging (section 4.16).
1. Who we are
LearnTogether: Study Room ("LearnTogether", "the app") is run by TIMEAWAKE LIMITED ("we", "us").
- Address: 21 Longshore Drive, Long Bay, Auckland 0630, New Zealand
- Email: [email protected]
- Website: learntogetherapp.com
We collect and hold the information described here. Our Privacy Officer can be reached at the email above.
2. What this policy covers
This policy covers the LearnTogether iOS app and the services behind it. It applies to version 1.0 and later versions, including the TestFlight beta. It also covers this website, learntogetherapp.com (section 9).
Some features are not in version 1.0. These include push notifications sent from our servers, Live Activity updates sent from our servers, ambient or background sounds (reminders use the standard iOS notification sound), crash reporting, usage events sent by the app, and pets and rewards. If we add any of them, we will update this policy first. (Starting with app version 1.3, push notifications sent from our servers are added; see below.)
Version 1.0.1 adds a few features described in this policy: an optional private note for today's tasks (section 5), away reporting and an optional checkout question during focus rounds (section 4.4), a feedback option that opens your Mail app (section 4.9), shareable invite links (section 9), and optional usage events and crash reports, off by default (section 4.7).
Version 1.1 adds a Live Activity for your seat on the Lock Screen and in the Dynamic Island, with a Continue to next round button (section 5.3). The app sets and updates it on your iPhone; we send it nothing from our servers. Version 1.1 also asks you to pick your Bookling's colour and outfit when you first open the app; before you sign in, that pick is stored only on your device (section 3). Version 1.1 also lets you see the campus and the study rooms as a 3D scene — a lakeside town and a classroom — instead of the native list; the scene runs on your iPhone and sends nothing itself (section 3.1). Version 1.1 also renames the feedback option to Feedback and suggestions, adds Having a problem? Tell us on error screens and the checkout summary, and adds your device model and the screen you were on to what the Mail draft already fills in (section 4.9). Version 1.1 also adds Apple's own rating prompt after a positive session, backed by a few counters kept only on your iPhone (section 4.10). Version 1.2.1 adds a silent local reminder for when your planned rounds are done, if your seat has a plan (section 5.1); it is set on your iPhone like the other reminders, and sends or stores nothing.
Starting with app version 1.3, several features that earlier versions of this policy listed as not in the app are added: push notifications sent from our servers (section 4.11), a self-chosen nickname that replaces the one the app used to assign (section 4.3), an email address, required before your first seat (section 4.12), purchases and subscriptions through LearnTogether Plus (section 4.13), private rooms (section 4.14), sit next to a friend links (section 4.15), and Crew, for users 18 and older (section 4.16). This policy describes each of them where it is linked above. Because this website publishes on merge while some users are still on earlier app versions, every 1.3 data flow in this policy is introduced with the words "Starting with app version 1.3" so it is clear which version a flow applies to.
3. If you only browse (no sign-in)
You can open the app and look around the campus without signing in. You can see live numbers, such as how many people are studying right now. You can pick your Bookling and try outfits on it.
While you only browse:
- We do not create an account for you, and we keep nothing on our servers that is linked to you. We do not store your name, your Apple ID, the app's install ID or your IP address for browsing.
- The app sends no usage events and no crash reports while you browse, unless you allowed Share usage data and crash reports when the app asked you, or turned it on in the Study Cottage or Settings after answering that question (off by default; from version 1.0.1; section 4.7). If you did, while browsing it may still send a crash report, and only two kinds of usage event — that you opened the campus map, and a step of starting, cancelling or failing to sign in — neither carrying any identifier of you or your device.
- The Bookling you pick is stored only on your device. From version 1.1, when you first open the app, you pick one of 8 colours and one of 2 outfits for your Bookling. Before you sign in, the colour and outfit you pick, and any look you save in the Wardrobe, are stored only on your device, in the app's preferences, together with a note that you have picked. They are not uploaded while you browse.
- After you sign in, the app sends your pick to your account once, with the same appearance setting as before, if your account still has the default look; an account that already has its own look keeps it. From then on your colour and outfit are saved to your account like before (section 4.3). This is not a new type of data.
- Outfits you only try on stay in the app on your iPhone. A look you try on without saving is not uploaded or saved, even after you sign in.
- Your iPhone's time zone. To show today's study total for your local day, the app sends your iPhone's time zone when it asks our server for the campus numbers. We use it only to work out that total. We do not save it in our database. It may appear in our server request logs, which we keep for 30 days and which hold nothing that identifies you.
- If you tap sign-in and then cancel, our server keeps a short-lived sign-in check record for at most about 25 minutes. It holds only hashed values (a check code and the app's install ID) and is not linked to any account. Then it is deleted automatically.
Our servers see your IP address when the app connects, as with any internet service. While you browse, we use it only in memory to limit abuse (rate limiting). We do not write it to our database or our application logs.
Study Cottage → Clear browsing data on this device (shown while you are signed out) removes the app's saved preferences from your iPhone, including the Bookling you picked, and resets any outfit you tried on. It keeps two items in the iPhone Keychain: the app's install ID, if one was created (it is never sent while you browse), and the age-check lock, if there is one (section 5; clearing data cannot reset the age check). Section 13 explains this.
3.1 The 3D town and classroom (from version 1.1)
From version 1.1, the campus and the study rooms can appear as a 3D scene — a small lakeside town, and inside it, a classroom — instead of the native list. The scene runs on your iPhone, and it sends nothing itself.
- The town shows only anonymous Booklings and counts: how many people are resting and how many are focusing, and how many wear each outfit, shown only when 2 or more people are present. It never shows a name, a public ID or a seat. The live numbers mentioned earlier in this section now include these counts.
- A classroom shows the same information about the people in your room that section 6 already describes — their Bookling, study direction, tasks and status — as a 3D scene instead of a list. It adds no new information about them.
The native list stays available at any time, and the app works the same without the 3D scene.
4. What we collect when you sign in and join rooms
You need to sign in to join a study room. Rooms need a lasting identity so that reports and bans work. Here is what we collect, and how.
What you must give us, and what is optional
| Information | Required? | If you don't give it |
|---|---|---|
| Sign in with Apple | Required to join rooms | You can still browse the campus (section 3), but you cannot take a seat. |
| Birth month and year (section 4.2) | Required | You cannot join a study room. You can still browse. |
| Study direction, and before version 1.1 Bookling colour (section 4.3) | Required before your first seat | You cannot take a seat until you pick them. From version 1.1, setup asks only the study direction: your Bookling's colour and outfit are the ones you picked when you first opened the app, or the default if you did not pick. |
| Nickname, 3–16 characters (section 4.3) | Required before your first seat, starting with app version 1.3 | You cannot take a seat until you choose one. |
| Agreeing to the Community Guidelines (section 4.3) | Required before your first seat | You cannot take a seat. |
| Email address (section 4.12) | Required before your first seat, starting with app version 1.3, after your age is confirmed | You cannot take a seat until you add and verify one. |
| Time zone (section 4.3) | Sent automatically by your iPhone | You do not enter it. |
| Seat and round information (section 4.4) | Collected automatically while you sit in a room | Rooms cannot work without it. If you do not want it collected, do not take a seat. |
| "How did you hear about us?" (section 4.3) | Optional | Nothing changes. |
| Today's Tasks (section 4.5) | Optional | Others see no tasks for you. Nothing else changes. |
| Notifications (section 5.1) | Optional. iOS asks you, and you can change it at any time in iOS Settings | You get no reminders. Everything else works the same. |
| Live Activity (section 5.3) | Optional, from version 1.1. You can turn it off at any time in iOS Settings | You see no Live Activity on your Lock Screen. Everything else works the same. |
| Share app usage data (section 4.7) | Optional, off by default | Nothing changes. Version 1.0 sends no usage events either way. From version 1.0.1, this setting is renamed Share usage data and crash reports; turning it on sends optional usage events and crash reports (section 4.7). |
| Away reporting during focus rounds (section 4.4) | Automatic while you are seated, from version 1.0.1 | You can't turn this off directly, but turning on I'm studying on my phone always reports the round as focused. |
| Checkout question (section 4.4) | Optional; asked only sometimes, from version 1.0.1 | Nothing changes. |
| Push notifications (section 4.11) | Optional, starting with app version 1.3. iOS asks you, and you can change it at any time in iOS Settings | You get no push reminder to continue the next round or about a saved plan. Local reminders (section 5.1) still work. |
| Foreground time while seated (section 4.4) | Automatic while you are seated and the app is open, starting with app version 1.3, at most once every 60 seconds | Rooms cannot work without it. |
| LearnTogether Plus purchase (section 4.13) | Optional, starting with app version 1.3 | Everything in the free version keeps working. |
| Private room membership (section 4.14) | Optional, starting with app version 1.3 | You can still study in the open campus rooms. |
| Crew (section 4.16) | Optional, starting with app version 1.3, only available to users 18 and older | You can still use nods, waves and the rest of the app. |
4.1 From Sign in with Apple (collected from Apple)
Sign in with Apple is the only way to sign in. We do not ask Apple for your name, so Apple does not give it to us. Starting with app version 1.3, after you confirm you are 16 or older (section 4.2), we may separately ask Apple for your email address (section 4.12); before that point, and if you are not asked or decline, we still do not ask Apple for your email address.
From Apple we receive and keep:
- A stable user identifier that Apple creates for our app. We use it to find your account when you sign in again, for example on a new phone.
- An Apple sign-in token. We keep it encrypted. We use it to check that your Apple sign-in is still valid, and to tell Apple to end the link when you delete your account.
- Apple's signal of whether the account is likely to belong to a real person. Apple gives this only at your first sign-in. We use it to help prevent abuse.
- A yes-or-no value that Apple may include about whether your email address is a private relay address. Before app version 1.3, or if we do not ask, we never receive the email address itself; starting with app version 1.3, if you let Apple share it with us (section 4.12), we receive the address, which may be a private relay address.
- Notices from Apple if you stop using Sign in with Apple for our app, or if you delete your Apple Account.
Information we get from Apple, not from you. Some information comes from Apple, not directly from you:
- the Sign in with Apple information above;
- from version 1.0.1, on iOS 26 or later, Apple's answer about your age range, which the app uses only on your iPhone and never sends to us (section 4.2);
- if you test the beta through TestFlight, the information Apple shares with us through TestFlight, such as crash logs and feedback you choose to send, and your name and email if we invited you by email (section 9);
- if you choose to share analytics with app developers in your iPhone's settings, the crash reports and usage statistics that Apple passes on to us (section 9).
We use it only for the purposes described in this policy. We tell you about it here, as New Zealand's Information Privacy Principle 3A requires.
4.2 Age check
- When you first join, the app asks for your birth month and year. It does not suggest an answer. It does not say what the age limit is.
- The app sends them to our server once. The server turns them into an age group (16–17 or 18+) and discards them straight away. We never store your birth date. It is also kept out of our logs.
- We store the age group, the date it was set, and how it was set.
- If you are under 16, you cannot join. See section 15.
- Apple's age range (from version 1.0.1, on iOS 26 or later). Before it asks for your birth month and year, the app may ask Apple, through Apple's Declared Age Range feature, whether your age range is under 16 or 16 and over. Apple may ask you whether to share it, and you can decline. The app uses Apple's answer only on your iPhone, and only to decide whether you are 16 or older. Your age range itself is never stored, never sent to our servers and never included in usage data. If Apple's answer shows you are under 16, the app treats it the same as an under-16 birth date: you cannot join, and the age check is blocked on that iPhone for 30 days (section 15). That refusal leaves only two things, and neither contains your age range: the 30-day block, kept on your iPhone, and, only if you allowed usage data (section 4.7), a usage event saying that signing in stopped at the age check. That event carries no identifier of you or your device and does not say whether Apple's answer or a birth date stopped it. Otherwise, or if you decline, the app asks for your birth month and year as described above.
4.3 Your profile and setup
- Nickname. Before app version 1.3, the app made one for you from a word list and you could not type your own; only you saw it, in Settings. Starting with app version 1.3, you choose your own nickname, 3 to 16 characters, when you set up your account, and you can change it in Settings at most once a month. It is visible to people in your room on the native list, but never in the 3D classroom (section 3.1) or on a Live Activity (section 5.3); reports and blocks still use your public ID, not your nickname (section 4.6, section 6). Each time you successfully change it, we hold the old key — itself, your public ID and an expiry only — for 30 days, so nobody else can take it right away; this does not apply the first time you pick one, because the app-assigned nickname it replaces is released at once instead (section 11).
- IDs we create. An internal account ID (never shown to others), a random public ID (see section 6), and a random ID reserved for future App Store purchases (not used in 1.0).
- Bookling appearance. One of 8 colours and one of 2 free outfits. From version 1.1 you pick them when you first open the app (kept only on your device until you sign in, section 3), and setup asks only your study direction. You can save a new look in the Wardrobe while you do not have a seat; while you have one, you can try looks on but not save them.
- Study direction. A label you pick from a list during setup. People in your room see it next to your Bookling.
- Time zone. Your iPhone tells our server its time zone automatically. You do not pick it. We use it to show times in your local time and to start each new day at 4 a.m. your local time. Our server also works out a broad time-zone group from it (North America, Australia and New Zealand, UK, or other) and stores it with your account. Version 1.0 does not use this group to choose rooms and does not show it to anyone. We do not collect your location.
- Community Guidelines agreement. We record which version you agreed to, when, and the app version.
- Your usage-data choice. When you turn Share app usage data (renamed Share usage data and crash reports from version 1.0.1) on or off, we record your choice, when you made it, and the app version (section 4.7).
- "How did you hear about us?" The app asks this during setup. It is optional. If you answer, we store the option you pick.
- Account status and dates. For example, when the account was created, when setup was finished, whether it is active or banned, and the last day you used the app (updated at most once a day).
- Internal labels. We may label accounts as test, review, demo, internal, seed tester or community tester, and note which beta group you joined in. This keeps our numbers accurate. Test and review accounts are not counted in public numbers.
4.4 Studying in rooms
When you take a seat, our server records:
- Your seat session. The room, seat number, start and end times, how many rounds you planned (up to 6), whether you confirmed the next round, and how the session ended (for example, you checked out, or you did not come back after a break).
- Continuing to the next round. The app tells our server when you stay for the next round: automatically during a break while the app is open on your screen (only for the rounds you planned), when you tap Continue to the next round or I'm back, when you open the app again after missing a break, when you tap Continue on a reminder (section 5.1), or, from version 1.1, when you tap Continue to next round on the Live Activity on your Lock Screen or in the Dynamic Island (section 5.3). Each request says which of these it was. We do not store that detail in our database.
- Your appearance at the moment you sat down. Others see this for the whole session.
- A "first time here" flag while you are new.
- Round results. For each 25-minute focus round: how many seconds you were seated, whether the round counted (full, half or none), how many other people studied with you, and which accounts they were.
- Away reports (from version 1.0.1). While you are focusing, the app checks whether you have switched away from it, using only Apple's public, on-device APIs; it cannot see what you did in another app, only that you left this one. Once a round ends, it reports to our server, for that round only: how many seconds you were away (0 if none), and whether away time was detected, not detected, or undeterminable. The Lock Screen counts as staying focused, and so does anything our server can't tell. If you turn on I'm studying on my phone, the app always reports that round as undeterminable, with the reason "studying on my phone", so it counts as focus time. We store only these per-round numbers, never a log of what you did while away.
- Checkout question (from version 1.0.1). After some rounds, when you check out we may ask "Did you feel someone was studying with you this round?" This is optional and only asked sometimes. If you answer, we store your answer with that round's result.
- Foreground time (from version 1.3). While you are seated and the app is open on your screen, the app may tell our server that it is in the foreground, at most once every 60 seconds. We use this only to avoid sending you a push notification (section 4.11) for something you are already looking at. We keep this only as the most recent signal for your current seat; it is not kept as a history.
- Records. From the above, our server works out your study days, daily and weekly totals, and "familiarity" counts (for example, "studied together 3 times"). Only you see these.
4.5 Today's Tasks and "See you tomorrow"
- Task list. You can add 0 to 4 tasks. Each task is built only from preset choices: an action, a number, a unit and a subject. There is no free text. We store your tasks, when you mark them done, and when you undo them (you can undo within 5 minutes).
- Who sees your tasks. By default, the people in your room see your tasks and how many you have finished. This also applies to users aged 16–17. You can turn this off with Show my tasks to my room in Today's Tasks. Your tasks are still stored on our servers when only you can see them.
- Reactions. During a break, others can send a preset reaction to a task you finished. They cannot reply with text.
- "See you tomorrow." When you check out, you can tap See you tomorrow to plan to come back at the same time tomorrow. We store the time and whether you came. Others only see a count, such as "3 coming". At most 2 per day.
4.6 Interactions, reports and blocks
- Interactions. Nods, waves, emoji and preset phrases. We store only the preset ID, who sent it, who received it (for nods and waves), the room and the round.
- Reports. If you report someone, we store who reported whom, the room and round, the preset reason, and how we handled it. Reports contain no free text.
- Blocks. We store who blocked whom.
- Bans. We store ban and unban decisions, the reason code, and which staff member made them.
4.7 Usage data
Version 1.0 of the app sends no usage events and no crash reports.
Share app usage data in Study Cottage → Settings is off by default. When you change it, we record your choice with your account (section 4.3). Version 1.0 sends no usage events either way. If a later version sends usage events, it will send them only while this setting is on, and we will update this policy before that version is released.
From version 1.0.1, this setting is renamed Share usage data and crash reports. It is still off by default, and we still record your choice with your account. When it is on, the app may send two kinds of information; when it is off, it sends neither, whether you are signed in or only browsing.
- Usage events. A closed list of about ten event names — for example which screen or scene loaded, a step of signing in or of first-time setup, opening or submitting the seat panel, using Today's Tasks, confirming the next round, the checkout question, a Live Activity's state, or planning "See you tomorrow". Each event carries only a few fixed properties: short labels from a closed list (such as a step name or a result like "ready", "failed" or "disabled") and small numbers such as a duration or how many tasks you have (0–4). Usage events never carry free text, your nickname, your public ID or your email, and never your tasks' wording. While you only browse, at most two kinds of usage event are sent, and only if you allowed Share usage data and crash reports when the app asked you, or turned it on in the Study Cottage or Settings after answering that question: that you opened the campus map, and a step of starting, cancelling or failing to sign in; these carry no account or device identifier, even if you sign in before they are sent. Once you are signed in, usage events — including those same two kinds — are linked to your account, the same as the other activity described in this policy. Raw usage events are kept as individual rows for up to 13 months, then removed as old monthly batches age out (section 11); if you delete your account, any that are still stored are deleted within 24 hours of the request, the same as other account data. Any of your own usage events that are still stored are included in your data export (section 14).
- Crash reports. If the app crashes, it may send a crash report to our crash-reporting processor, Sentry (below). A crash report contains the stack trace (where in the app's code the crash happened), the time of the crash, your device model, and your iOS and app version. Before a crash report leaves your iPhone, the app removes everything else the crash-reporting software would add, such as a code it works out from your device, your language, region and time zone, and memory and battery details. A crash report does not contain your account ID, your nickname or any other identifier of you or your device, and we do not configure Sentry to store your IP address.
Our crash-reporting processor. From version 1.0.1, crash reports are processed by Sentry (Functional Software, Inc., United States). Sentry is bound by a data processing agreement (DPA) and may use your information only to provide its service to us. We have data scrubbing turned on in our Sentry project, to strip tokens and other sensitive values before a crash report is stored. Sentry keeps crash reports as set in our Sentry project.
The setting counts only after you answer the first-launch question, "Help improve LearnTogether?", on that iPhone. Until then the app sends no usage events and no crash reports, even if the setting shows as on. This applies if you turned on Share app usage data in version 1.0, and after Clear browsing data on this device in the Study Cottage, which also forgets your answer; the app then asks the question again the next time the campus is on screen. Your answer replaces the earlier setting.
Withdrawing. Turning Share usage data and crash reports off stops both usage events and crash reports immediately; nothing already sent is un-sent, but nothing more is sent until you turn the setting on again.
On the App Store's privacy label, usage events are declared under Usage Data → Product Interaction (linked to your account, used for Analytics; not used for tracking), and crash reports are declared under Diagnostics → Crash Data (not linked to your account, used for App Functionality; not used for tracking).
To run the service and to see whether studying with real people helps, we work out daily totals from the records in sections 4.4 to 4.6, such as how many people took a seat, how many rounds counted, and how many people came back after a day or a week. The totals themselves are counts only and are not linked to anyone.
4.8 Device sessions and technical data
- Install ID. When you first start to sign in, the app creates a random ID and keeps it in the iPhone Keychain. It is sent only when you sign in, refresh your sign-in or sign out. It is never sent while you browse. Our server stores only a hashed version.
- Device sessions. For each signed-in device we store a hashed sign-in token, the hashed install ID, and times. This lets you stay signed in and lets us sign a device out. Up to 5 devices can be signed in at once. Starting with app version 1.3, if you allow push notifications, we also store your device's APNs push token itself — needed to address Apple's push service — in a separate record from your device session, used as described in section 4.11; signing out does not remove it (section 4.11 explains how long we actually keep it).
- Room updates. While you are seated and the app is open, the app asks our server for the latest state of your room, about every 15 seconds during focus and every 5 seconds during a break. These requests use your internal account ID.
- App version. Each request carries the app's version and build number, so our server can tell when an update is needed.
- IP address. We use it in memory to limit abuse. We do not store it in our database. Our server monitoring is set up to replace it with 0.0.0.0 before anything is recorded. For security-related actions, such as signing in, sending a report, exporting data and deleting an account, our audit log keeps a keyed one-way hash of the IP address. The key changes every month, so hashes from different months cannot be matched.
- Server logs. Microsoft Azure Application Insights records requests and errors, linked only to the internal account ID. It never records nicknames, public IDs, tokens or what you send in a request. The web address of a request can include your iPhone's time zone (section 3).
4.9 If you contact us
If you email us, we receive your email address and what you write. We use it only to reply and to deal with your request. Our email is hosted by Google (section 9). We keep emails only as long as we need them to deal with your request and any follow-up.
From version 1.0.1, a feedback option opens your Mail app addressed to us, with your app version and iOS version already filled in. From version 1.1, it is named Feedback and suggestions (in Study Cottage and Settings), and the same draft also opens from Having a problem? Tell us on error screens and the checkout summary. The Mail app that opens is Apple's own Mail composer, not ours: we do not see the draft until you send it. It already fills in your app version and build, your iOS version, your device model (a hardware identifier such as iPhone15,2) and the screen name of the screen you were on; you can see, edit or delete any of this, and add your own message, before sending. We never add your account ID, public ID, nickname, room, seat or task information. Nothing is sent unless you send the email, and we receive whatever you send, the same as any other email to us. If you have no Mail account set up on your iPhone, the app instead shows our support address, which you can copy, and a link to learntogetherapp.com/support.
4.10 Rating prompt (from version 1.1)
From version 1.1, Apple's own rating and review prompt may appear after you complete a study session that went well, at most once per app version; Apple decides whether to actually show it, and limits this further on its own. The app does not ask you a question first, and does not choose who to show the prompt to based on how you say you feel.
To judge when a prompt is worth asking Apple to show, the app keeps a few counters, only on your iPhone, in its local app preferences: how many focus rounds have counted on this device, how many study sessions you have finished on this device, the app version you were last prompted at, and the time of your last successful report or block. None of these counters are sent to us, to Apple, or anywhere else. If you go on to rate or review the app, that goes directly to Apple, under Apple's own privacy policy, not this one.
4.11 Push notifications (from version 1.3)
Starting with app version 1.3, in addition to the local reminders described in section 5.1, the app may receive push notifications that we send from our servers through Apple's Push Notification service (APNs). Push notifications are optional, and the app works the same without them (section 5.1 explains how to turn them off).
- What we send. Two kinds of push notification: a reminder to continue to the next round when a break you are in is ending or has ended, and a reminder for a saved plan, such as a See you tomorrow plan (section 4.5), around the time you planned to come back. A push notification never includes your nickname, and never includes anyone else's information.
- When we don't send one. While you are seated and the app is in the foreground, the app tells our server that at most once every 60 seconds (section 4.4); we use this to avoid sending you a push notification for something you are already looking at.
- What we store to send them. Our server stores a hash of the app's install ID and your device's APNs push token itself, together with your account and the environment (production or sandbox). We store the token itself, not a hash of it, because APNs can only be addressed with the actual token; it is overwritten each time your device registers again, and moved to your new account if you sign in to that device with a different one. It is kept separately from your device session (section 4.8) — signing out does not delete it. We delete it when you delete your account or as soon as Apple tells us the token is no longer valid; otherwise we keep it for up to 180 days after your device last registered it.
- Apple Push Notification service. Apple delivers the notification; it handles the push token and the notification content under its own terms, as described in section 9.
- Turn them off at any time in iOS Settings → Notifications → LearnTogether, the same setting that controls the local reminders in section 5.1.
4.12 Email (from version 1.3)
Starting with app version 1.3, once you confirm you are 16 or older (section 4.2), you must add and verify an email address before you can take your first seat. You can do this in one of two ways, whether you are 16–17 or 18 and older:
- From Apple. The app may ask Apple to share the email address linked to your Apple Account (section 4.1). This is the main path, offered at any age past the check.
- Typed and verified. You type an email address yourself, and we send a 6-digit code to it, which you enter in the app to verify you can receive mail there. This path is also open at any age past the check; it is the only one if Apple does not return an address.
What we use it for. We use your email address only to send you one reminder per saved plan (such as a See you tomorrow plan, section 4.5) and to send verification codes. If you are 16 or 17, that reminder and its codes are the only mail we ever send you — never any other kind. We do not use it for marketing, and we do not use it to prove the request is from you: Sign in with Apple remains the only way we confirm a request is yours (section 14). We store your email address encrypted.
Changing it. You can turn off email reminders at any time in Settings; this takes effect instantly, and no further reminder or code is sent to it afterwards. You can also replace your stored address with a different one, the same way you added it. There is no separate option to remove the stored address by itself: it is kept, encrypted, until your account is deleted (section 13).
4.13 Purchases — LearnTogether Plus (from version 1.3)
Starting with app version 1.3, you can buy LearnTogether Plus, a subscription billed and processed entirely by Apple through the App Store. We never see or store your card or payment details.
We store, linked to your account: the App Store transaction ID, the product you bought, its expiry date, and whether it is a sandbox (test) purchase. We use this only to turn on and manage the features that come with LearnTogether Plus, and to verify the purchase with Apple's App Store server (section 9).
If you delete your account (section 13), these transaction records are kept, as App Store transactions normally are, but are unlinked from your account; they can no longer be used to identify you.
4.14 Private rooms (from version 1.3)
Starting with app version 1.3, you can create or join a private room instead of studying in the open campus rooms. We store, for each private room: its owner, its members, invites the owner sends, and join requests from people who ask to join.
- Owner approval. Anyone can ask to join with an invite or a join request. If a member aged 16–17 is currently in the room, the owner must approve each new member before they join.
- Leaving and removal. A member can leave at any time. An owner can remove a member.
- Retention. We keep a record of a membership for 30 days after you leave or are removed, so the room's guest limit counts correctly; after that it is deleted.
- What people in the room see. The same information described in section 6 for any room — Bookling, study direction, nickname, tasks and status.
4.15 Sit next to a friend (from version 1.3)
Starting with app version 1.3, you can share a sit next to a friend link that lets whoever opens it take the seat next to yours. The link works for 24 hours after you create it. Your room snapshot (section 6) never shows who sent or used the link; it looks the same as anyone else sitting down next to you.
4.16 Crew (from version 1.3)
Starting with app version 1.3, Crew is available only to users aged 18 and older. It lets you send other Crew members in your room preset interactions beyond nods and waves. As with the rest of the app, Crew has no free text and no private or direct messaging: every interaction is one of a closed set of preset options, the same way nods, waves, emoji and phrases work elsewhere (section 4.6).
5. What stays on your iPhone
These stay only on your iPhone and never reach our servers:
- Outfits you try on as a guest. They are not saved.
- The Bookling you pick before you sign in (from version 1.1). Its colour and outfit, and a note that you have picked, stay in the app's preferences on your iPhone until you sign in (section 3).
- The age-check lock. If the age check finds you are under 16, the app stores only a date in the iPhone Keychain, so the check cannot be tried again on that iPhone for 30 days.
- Your private note (from version 1.0.1). In Today's Tasks, you can write one optional line of private note to yourself for today. It stays only on your iPhone: it is never sent in a request, never included in an export, and never logged. It is removed automatically after 4 a.m. local time (the start of a new task day), when you sign out, and when you delete your account.
- The rating-prompt counters (from version 1.1). The counters described in section 4.10: how many focus rounds have counted on this device, how many study sessions you have finished on this device, the app version you were last prompted at, and the time of your last successful report or block.
The app also keeps these on your iPhone:
- your sign-in tokens and the app's install ID, in the iPhone Keychain;
- your app preferences, such as your Share app usage data and Keep screen on choices;
- reminders the app has set (section 5.1), which iOS holds until they are shown or removed;
- a short list of actions that have not reached our server yet, for example a Continue to the next round tap made while you were offline. The app sends them when you are back online;
- the file you create with Export my data, until you sign out or delete your account;
- from version 1.1, while you have a seat, its Live Activity (section 5.3), which iOS keeps on your iPhone until it ends.
Signing out clears the sign-in tokens, the list of unsent actions, the export file and any reminders the app has set. From version 1.1, it also removes the Live Activity at once. Deleting your account also clears the install ID (section 13).
5.1 Notifications (reminders)
The app can remind you when a break in your planned rounds starts, and shortly before a "See you tomorrow" plan. Before iOS asks for permission, the app explains what these reminders are for. Notifications are optional, and the app works the same without them.
From version 1.0.1, if you switch away from the app during a focus round, it may also remind you to come back. Like the reminders above, this is a local notification set on your iPhone: only you see it, and nobody else is told.
From version 1.2.1, if your seat has a planned number of rounds, the app can also show a silent reminder, titled "Your planned rounds are done", for the moment they finish. Like the other reminders in this section, it is created on your iPhone, and sends or stores nothing on our servers.
- Set on your iPhone. The app sets each reminder on your iPhone from information it already has, such as your round times and your plan. Before app version 1.3, we did not send push notifications, and the app did not give our servers a device token for notifications. Starting with app version 1.3, the app may also give our server your device's APNs push token itself, so our server can send the two kinds of push notification described in section 4.11; those are separate from, and in addition to, the local reminders in this section. Whether you allow notifications is not sent to us.
- Removed when no longer needed. When you check out, your seat ends or you cancel a plan, the app removes the reminders that no longer apply.
- The Continue button. A break reminder has a Continue button. Tapping it sends the same request as Continue to the next round in the app (section 4.4). If you are offline, the app sends it when you are back online.
- What a reminder shows. Things like the time of your next round. Reminders never show other people's details. Like any notification, they can appear on your Lock Screen, depending on your iOS settings.
- Turn them off at any time in iOS Settings → Notifications → LearnTogether.
5.2 Keychain and backups
Items in the iPhone Keychain stay on that iPhone only. They are not synced to iCloud Keychain and are not restored to a different iPhone from a backup. They may remain after you delete the app. Other app files may be included in your own iPhone backup (iCloud Backup or a computer). That backup is handled by Apple or your computer. We cannot access it.
5.3 Live Activity on the Lock Screen (from version 1.1)
From version 1.1, when you take a seat, the app can start a Live Activity for it. iOS shows it on your Lock Screen and, on iPhones that have one, in the Dynamic Island. Live Activities are optional, and the app works the same without them.
- What it shows. The phase you are in, such as Focusing, Break together, Last round or "4 rounds done"; a countdown, and the clock time of the next change, such as when the break starts or until when your seat is held; how many other people in your room are studying, as a number only; and, from this version, a small picture of a Bookling in your Bookling's colour, always in the default outfit, in place of the earlier book symbol. It never shows your chosen outfit, and never a name, nickname, public ID or task text, yours or anyone else's.
- Set on your iPhone, never pushed. The app starts and updates the Live Activity itself, on your iPhone, from information it already has, and only while it is running: for example when you sit down, when a phase changes while the app is open, and when you leave the app. We do not send Live Activity updates from our servers, and the app does not give our servers a push token for it. Whether you allow Live Activities is not sent to us. Because nothing is pushed to it, the number of other people is the one from the app's last update, and if your seat ends while the app is closed, the Live Activity can show out-of-date information until you open the app again.
- Who can see it. Like a notification, anyone who can see your Lock Screen can see it. Like any Live Activity, iOS may also show it on devices connected to your iPhone, such as a paired Apple Watch. Other people's Live Activities may count you in their number of people studying, but never show anything else about you.
- The Continue button. During a break that is waiting for you, the Live Activity shows Continue to next round. Tapping it keeps your seat for the next round without opening the app: iOS runs the app in the background, and the app sends the same request as Continue to the next round in the app (section 4.4), saying it came from the Lock Screen. The app does not require your iPhone to be unlocked for this, so anyone holding your iPhone can tap it; it can only keep your seat for the next round. If the request can't reach our server, the app keeps it in its list of unsent actions and sends it later (section 5), and the Live Activity says "Couldn't connect. Open the app and tap again." After a successful tap, the app also updates its reminders on your iPhone and sends any other unsent actions it is holding, such as away reports (section 4.4).
- When it ends. When the app learns that your seat has ended, for example because you checked out, finished your planned rounds or did not come back after a break, the Live Activity shows "This seat has ended" and is removed after 15 minutes. It is removed at once when you sign out, when you delete your account, when your account is banned, or when you take a new seat in place of this one. Each time the app opens, it also removes any Live Activity for a seat that is not your current one, unless it cannot find out your current seat, for example when it is offline. We can switch Live Activities off for everyone from our servers; the app then ends any it shows the next time it runs, and the Continue button ends the Live Activity instead of keeping your seat. iOS may also end a Live Activity on its own after some hours.
- Turn it off at any time in iOS Settings, on LearnTogether's page (Settings → Apps → LearnTogether on iOS 18 and later, Settings → LearnTogether on iOS 17), by turning off Live Activities.
6. What people in your room can see, and what they can't
People in the same room can see:
- your Bookling's colour and outfit (as it was when you sat down);
- starting with app version 1.3, your self-chosen nickname, but only in the native list — never in the 3D classroom (section 3.1) or on a Live Activity (section 5.3);
- your study direction label;
- your tasks and how many you have finished (unless you turn off Show my tasks to my room);
- a small tick next to you when you finish a task (at most 2 per round), and the finished task at the break;
- your status: Focusing, On a break or Be right back. When you leave, you disappear from the room's list;
- a "first time here" label while you are new;
- emoji and preset phrases you send to the room.
A nod or wave goes only to the person you send it to. Others in the room do not see it.
Their app also receives the random public ID linked to your account. It is not your Apple ID or your internal account ID. It lets nods, waves, reports and blocks reach the right person.
People in your room can't see:
- your personal stats: study time, rounds and study days;
- your age group or birth date;
- who you have studied with before (familiarity labels are visible only to you);
- your time zone, city or location;
- whether you stepped away from the app during a round, or your away report (from version 1.0.1; visible only to you, section 4.4);
- your Apple ID or real name (we don't have your name); starting with app version 1.3, your email address if you gave us one (section 4.12) — nobody in your room ever sees it.
People outside your room see only totals, such as how many people are studying now, total study today, how busy each hour usually is, and how many people plan to come back at a given time.
7. What we don't collect
- your name (unless you email us); before app version 1.3, your email address either (unless you email us) — starting with app version 1.3, we may hold an email address if you choose to give us one (section 4.12);
- your birth date (we keep only an age group);
- your location (only your time zone);
- your contacts, photos, camera or microphone;
- advertising IDs. We do not track you across apps or websites, and the app does not show Apple's tracking prompt;
- anything you type as free text, except your nickname (starting with app version 1.3, limited to 3–16 characters and shown to people in your room; section 4.3) and your private note below, which stays only on your iPhone (from version 1.0.1; section 5);
- crash reports or usage events from the app, unless you turn on Share usage data and crash reports (off by default; from version 1.0.1; section 4.7). Version 1.0 itself sends none either way;
- before app version 1.3, whether you allow notifications, or a push token (reminders were set only on your iPhone, section 5.1) — starting with app version 1.3, our server stores your device's APNs push token itself, to send the push notifications described in section 4.11;
- a Live Activity push token, or whether you allow Live Activities (from version 1.1, the app sets the Live Activity on your iPhone, section 5.3);
- a log of what you do in other apps while you study (only whether you were away, in seconds, section 4.4);
- your private note (it stays only on your iPhone, section 5);
- an account or any ID for guests who only browse;
- the rating-prompt counters (from version 1.1, they stay only on your iPhone, section 4.10), or your actual rating or review, which goes directly to Apple;
- your device model or the screen you were on, unless you choose to send a feedback email that includes them (from version 1.1, section 4.9).
8. How we use your information
We use your information to:
- Run the app. Sign you in, put you in a room, show your Bookling and status to others, run the rounds, count your study, and show your records.
- Keep people safe. Check your age, handle reports and blocks, ban accounts that break the rules, and stop abuse and cheating.
- Keep the service secure and working. Find and fix errors and slow spots, using our server logs.
- Learn what helps. Our main question is whether studying with real people helps people come back the next day and the next week. We look at counts and rates, not at individuals.
- Meet legal duties.
We do not use your information for advertising. We do not sell it or rent it. We do not use it to train AI models. Version 1.0 has no AI features.
Room assignment is automatic. Bans are decided by a person.
9. Who we share it with
We do not sell or rent your personal information. We share it only as this section describes.
Service providers that process data for us. These providers handle personal information on our behalf, only to provide their service to us. They may not use it for their own purposes.
| Provider | What they do for us | What they handle |
|---|---|---|
| Microsoft Azure (Microsoft Corporation) | Hosts our servers, database, file storage, key storage and server monitoring (Application Insights) | All server-side data described in this policy |
| Sentry (Functional Software, Inc.), from version 1.0.1 | Crash reporting, only while you have turned on Share usage data and crash reports (section 4.7) | Crash reports: stack traces, the time of the crash, device model, iOS and app version. No account ID, no identifier of you or your device, no language or time zone, and no IP address |
| Azure Communication Services Email (Microsoft Corporation), from version 1.3 | Sends the session-reminder email and verification-code emails described in section 4.12 | The email address you gave us, and the content of that one reminder or code; no other account data |
| Apple Push Notification service (APNs), from version 1.3 | Delivers the push notifications described in section 4.11 | Your device's APNs push token itself (so our server can address a notification to your device) and the notification content, which never includes your nickname |
App Store transaction verification. From version 1.3, we verify LearnTogether Plus purchases (section 4.13) with Apple's App Store server, sending it the transaction identifier so it can confirm the purchase is genuine.
Microsoft processes data under the Microsoft Products and Services Data Protection Addendum (DPA). Sentry processes data under a data processing agreement (DPA) with us. We require our service providers to protect your information at least as well as this policy and Apple's App Store rules require.
Email and this website. Emails you send to [email protected] are stored by our email provider, Google (Google Workspace). This website, learntogetherapp.com, is hosted by Cloudflare. It has no accounts, cookies, analytics or trackers. Like any web host, Cloudflare processes your IP address and basic browser details to deliver the pages and protect the site from attacks. The app's connections to our servers do not go through Google or Cloudflare.
Invite links (from version 1.0.1). If you share an invite link from the app, it points to learntogetherapp.com/join and carries only that round's starting time, in UTC. The join page reads only that value, to show it in your own time zone; it stores nothing, sends nothing to us or anyone else, and sets no cookies.
Apple. Apple provides Sign in with Apple, the App Store and TestFlight. Apple is an independent company. It handles your information under its own terms and privacy policy, not under an agreement with us. What we receive from Apple is described in section 4.1. Apple's privacy policy covers your Apple Account, the App Store and TestFlight.
- TestFlight. If you test the beta through TestFlight, Apple may share information with us as TestFlight's terms describe. This can include crash logs and feedback you choose to send, and your name and email if we invited you by email.
- Analytics you share with developers. If you turn on sharing with app developers in your iPhone's analytics settings, Apple may give us crash reports and app usage statistics. Apple does not tell us who you are.
- Declared Age Range (from version 1.0.1, on iOS 26 or later). The app may ask Apple whether your age range is under 16 or 16 and over (section 4.2). Apple's answer goes only to the app on your iPhone. It is used there for the 16-or-older decision, and your age range is never stored or sent to us. An under-16 answer leaves only the 30-day block on your iPhone and, if you allowed usage data, a usage event without your age range (section 4.2).
We may also disclose information if the law requires it, or if it is needed to protect someone's safety. If TIMEAWAKE LIMITED is ever merged or sold, your information may pass to the new owner, who must keep following this policy.
10. Where your information is stored
- Our servers and database are in Microsoft Azure's West US 3 region (Arizona, United States).
- Database backups and our deletion records are also copied to Azure's paired East US region (Virginia, United States), for disaster recovery.
- Our email (Google) and this website (Cloudflare) are handled on those companies' own systems, which may be in several countries.
- Apple handles sign-in data on its own systems.
- Starting with app version 1.3, your encrypted email address (section 4.12) is stored in the same Azure United States regions as the rest of our server-side data, and our email-sending processor, Azure Communication Services Email, also operates in Azure's United States regions.
This means your information is stored outside New Zealand, mainly in the United States. US privacy law is different from New Zealand law: the United States has no single national privacy law like New Zealand's Privacy Act. While your information is in the United States, US courts, law enforcement and national security authorities may be able to access it under US law. Microsoft stores your information for us under a contract that requires it to protect your information and not to use it for its own purposes. Our Privacy Officer (section 19) can answer questions about this.
Transfer details. Country: United States (Azure West US 3, with backups in East US). Recipient: Microsoft Corporation. Information: the server-side information described in section 4. When and how: whenever the app connects to our servers, over encrypted connections. Purpose: hosting our servers, database, backups and monitoring. How long: as set out in section 11.
11. How long we keep it
We keep information only as long as we need it. Our systems delete or anonymise it on a schedule.
| Information | How long we keep it | When you delete your account |
|---|---|---|
| Account profile (nickname, public ID, appearance, study direction, time zone and time-zone group, labels, setup answers) | While your account exists. We do not delete accounts for being inactive. | Most details (such as your study direction, colour and setup answers) are cleared at once. Before app version 1.3, your nickname was replaced with "Deleted Account". Starting with app version 1.3, your nickname stops being shown to others at once; if you were 16 or older, we hold its key for 30 days (see "Nickname hold" below), and if you were under 16, we keep no nickname at all. A few fields (your public ID, outfit, age group, time zone and time-zone group, labels and the reserved purchase ID) stay until deletion finishes. The whole record is removed when deletion finishes (within 72 hours). |
| Nickname hold (the old nickname's key, your public ID and its expiry only; from version 1.3; section 4.3) | 30 days: written each time you change a self-chosen nickname (so nobody else can take the old one right away), and when a 16-or-older account whose nickname was self-chosen is deleted. Not written for an app-assigned nickname. | If you were 16 or older and had chosen your own nickname, the same 30-day hold is written for your last nickname at deletion; not written if you were under 16, or if your nickname was still the one the app assigned. |
| Email address and verification codes (encrypted; from version 1.3; section 4.12) | While your account exists. Verification codes expire 10 minutes after they are sent, whether or not you use them. | If you were under 16, no email is kept at all. Otherwise, deleted when deletion finishes (within 72 hours). |
| APNs push token and install ID hash for push notifications (from version 1.3; section 4.11) | Overwritten each time your device registers again; otherwise kept up to 180 days after that, or until Apple reports the token invalid — not tied to your device session (section 4.11) | Deleted when deletion finishes (within 72 hours) |
| LearnTogether Plus transactions (transaction ID, product, expiry, sandbox flag; from version 1.3; section 4.13) | Kept as Apple transaction records normally are | Unlinked from your account; the transaction record itself is not deleted |
| Private room membership, invites and join requests (from version 1.3; section 4.14) | While you are a member; 30 days after you leave or are removed, for the room's guest limit | Deleted, including the 30-day record, when deletion finishes (within 72 hours) |
| Apple sign-in link and encrypted Apple token | While your account exists | Deleted at once. We tell Apple to end the link, normally within 1 hour (retries for up to 72 hours). |
| Device sessions | 30 days after sign-out or expiry. Sessions unused for 90 days expire. | Signed out on all devices within about 30 seconds. The session records (hashed values and times only) are removed when deletion finishes (within 72 hours). |
| Seat sessions and round results | Long term. They are the core study statistics. | Anonymised at once: replaced with a random value that is never stored, and your snapshot and companion list are cleared. You are removed from other people's companion lists. They can no longer be linked to you. |
| Study days, totals and familiarity counts | While your account exists | Deleted, including other people's counts about you |
| Tasks and your task setting | While your account exists | Deleted |
| Task reactions | 7 days | Deleted, both sent and received |
| "See you tomorrow" plans | 13 months after the planned time | Deleted |
| Nods, waves, emoji and phrases | 7 days | Deleted, both sent and received |
| Reports | 12 months after a report is closed. Open reports are kept until handled. | Your account ID is removed. Only a one-way code (hash) of it is kept. |
| Ban and unban records | 12 months. The latest ban is kept for as long as an account is banned. | Your account ID is removed. Only a one-way code (hash) of it is kept. |
| Blocks | While your account exists | Deleted in both directions |
| Consent records (Community Guidelines, usage-data choice) | While your account exists | Deleted |
| Sign-in check codes | About 25 minutes at most | Not linked to anyone |
| Outgoing message queue (messages waiting to be sent to other services, such as Apple, linked to your account) | 7 days after delivery. Messages that could not be delivered: 30 days. | Left to expire on schedule. The message that tells Apple to end your sign-in link carries your encrypted Apple token; its contents are cleared as soon as it is delivered. |
| Repeat-request records (stop a request being done twice; store the server's reply, linked to your account) | 24 hours | Deleted at once |
| Security audit log | 13 months. Stores only hashed account IDs, plus a keyed hash of the IP address for security-related actions (the key changes every month, section 4.8). | Not changed (already hashed) |
| Deletion records | Deletion request: 12 months after it finishes. Deletion log: 35 days. Both store only hashed account IDs. | Used to make sure deleted accounts stay deleted |
| Server logs (Application Insights) | 30 days | Expire on schedule. They hold only the internal account ID. |
| Usage events (from version 1.0.1, only if you turn on Share usage data and crash reports; section 4.7) | Up to 13 months as raw events | Deleted within 24 hours of the request, the same as other account data |
| Crash reports (Sentry, from version 1.0.1, only if you turn on Share usage data and crash reports; section 4.7) | As set in our Sentry project | Not linked to your account, so there is nothing of yours for us to delete there |
| Database backups | 14 days. All backups expire within 28 days at most. | Expire on schedule. If we ever restore a backup, we re-apply all recent deletions before the service goes live again. |
| Emails to us | As long as we need them to deal with your request and any follow-up | Not linked to your account. Ask us by email if you want them deleted. |
From version 1.0.1, round results (above) also include each round's away report and your optional checkout-question answer; they follow the same retention and anonymisation.
12. Your choices, and how to withdraw consent
- Browse without an account. You can browse the campus and try on outfits without signing in.
- Share usage data and crash reports (renamed from Share app usage data in version 1.0.1). In Study Cottage → Settings, this is off by default. Version 1.0 does not send usage events either way. From version 1.0.1, turning it on sends the usage events and crash reports described in section 4.7, once you have answered the app's first-launch question on that iPhone; turning it off stops both immediately. We record your choice with your account. You can switch it off at any time.
- Your age range from Apple (from version 1.0.1, on iOS 26 or later). If Apple asks whether to share your age range with LearnTogether, you can decline. The app then asks for your birth month and year instead (section 4.2).
- Who sees your tasks. Turn off Show my tasks to my room in Today's Tasks.
- Your nickname (from version 1.3). Change it in Settings, at most once a month (section 4.3).
- Email reminders and your email address (from version 1.3). Add or replace your email address, or turn off email reminders, at any time in Settings (section 4.12); this takes effect instantly. The stored address itself is removed only when you delete your account (section 13).
- LearnTogether Plus (from version 1.3). Manage or cancel your subscription through your Apple ID's subscription settings; we receive an updated expiry from Apple when you do (section 4.13).
- Private rooms (from version 1.3). Leave a private room at any time; as an owner, remove a member at any time (section 4.14).
- Notifications. Allow or turn off reminders at any time in iOS Settings → Notifications → LearnTogether (section 5.1).
- Live Activities (from version 1.1). Turn off the seat's Live Activity at any time in iOS Settings, on LearnTogether's page (section 5.3). The app works the same without it.
- I'm studying on my phone (from version 1.0.1). Turn this on during a round so the app always counts your time as focus instead of away.
- Blocks. Block anyone you share a room with. You can unblock them later in Study Cottage → Settings → Blocked.
- Sign out. This ends your session on that iPhone.
- Stop using Sign in with Apple. In iOS Settings, tap your name, then Sign in with Apple (on some iOS versions it is under Sign-In & Security). Choose LearnTogether and follow the steps to stop using Sign in with Apple with it. The labels differ a little between iOS versions. We then sign you out on all devices and delete the stored Apple token. Your account and records stay, and you can sign in again later. To remove them, delete your account.
- Delete your account. We stop using your data to run your account. Most of your personal data is deleted or anonymised at once, and the rest within 72 hours. A few safety records (reports, ban records and the security audit log) keep only a one-way code instead of your account ID, for the periods in section 11. See section 13.
13. Deleting your account
In the app: on the campus, open Study Cottage → Settings → Delete my account, and confirm. This works even if your account is banned.
What happens:
- You are signed out on all devices within about 30 seconds. You are removed from your room.
- In the same step, our main database deletes or anonymises most of your personal data (see section 11). Before app version 1.3, your nickname was replaced with "Deleted Account" at once. Starting with app version 1.3, your nickname stops being shown to others at once; if you were 16 or older and had chosen your own nickname, we hold only its key, your public ID and its expiry for 30 days before deleting that too (an app-assigned nickname is released at once instead), and if you were under 16, we keep no nickname and no email at all. A few fields of the account record (your public ID, outfit, age group and time zone) and your signed-out device sessions stay until deletion finishes.
- We tell Apple to end the Sign in with Apple link for our app.
- The whole process finishes within 72 hours, and then the account record is removed completely.
- Reports, ban records and the security audit log keep only a one-way code (hash) instead of your account ID, for the periods in section 11.
- Backups expire within 28 days. If we ever restore one, we re-apply deletions before going live.
- On your iPhone, the app forgets your sign-in and the app's install ID, and clears the list of unsent actions, any exported file and any reminders it has set. App preferences, such as your Share app usage data choice, stay on your iPhone until you delete the app.
From version 1.0.1, this step also removes your private note, if any, and any away reminder it has scheduled.
From version 1.1, it also removes your seat's Live Activity from the Lock Screen at once (section 5.3).
If you sign in with the same Apple ID later, you start a new, empty account. Your old data does not come back.
If you delete your Apple Account, Apple tells us, and we delete your LearnTogether account the same way.
If you only browsed: we hold nothing on our servers that is linked to you. In the app, Study Cottage → Clear browsing data on this device removes the app's saved preferences from your iPhone, including the Bookling you picked before signing in, and resets any outfit you tried on. It keeps the app's install ID and the age-check lock, if they exist (section 3). Deleting the app removes its files from your iPhone. Items kept in the iPhone Keychain (the install ID and the age-check lock) may remain after the app is deleted.
14. Getting a copy of your data, and correcting it
Export. In Study Cottage → Settings, tap Export my data, then Save my data to save or share a file (JSON) of the information linked to your account that we hold on our servers. It includes, among other things, your profile and appearance, age group, consent records, seat sessions and round results, interactions you sent, your tasks and task setting, "See you tomorrow" plans, study days and totals, blocks, reports you made, and actions we took on your account. It does not include other people's internal IDs. Banned accounts can export too.
From version 1.0.1, the export also includes any of your own usage events that are still stored (section 4.7); it does not include crash reports, which are not linked to your account.
From version 1.0.1, the export also includes the per-round away information and your checkout-question answers, as part of your seat sessions and round results.
Starting with app version 1.3, the export also includes your nickname, your email address if you gave us one, your LearnTogether Plus transactions, and your private room memberships, invites and join requests.
Why we ask you to use the app. We do not store your name. Starting with app version 1.3, we may store an email address if you chose to give us one (section 4.12), but an email address does not prove a request is from you, so signing in to the app remains the only reliable way for us to confirm that. If you contact us another way, we will ask you to sign in with the same Apple ID and use Export or Delete in the app. We do not export or delete an account because an email gives its public ID. The public ID is shown to other people's apps in your rooms, so it does not prove who you are. If you have trouble getting into the app, email us and we will help you sign back in so you can do it yourself.
Correction. You can change your Bookling's colour and outfit in Wardrobe, and who sees your tasks in Today's Tasks. Your time zone comes from your iPhone. Your study direction is chosen during setup; to change it, email us. Before app version 1.3, nicknames were made by the app and could not be changed. Starting with app version 1.3, you can change your nickname in Settings, at most once a month (section 4.3). If you think something else we hold is wrong, email us.
You have the right to ask for access to, and correction of, your personal information under New Zealand's Privacy Act 2020. We will respond within the time the law requires (in New Zealand, 20 working days).
15. Age requirement and young people
- You must be 16 or older to sign in and join rooms. The app's App Store age rating is 16+.
- Browsing does not ask your age, because while you only browse we create no account and keep nothing on our servers that is linked to you (section 3).
- If the age check shows you are under 16 (from your birth month and year or, from version 1.0.1, from Apple's age range; section 4.2), we do not let you join. If an account was just created, we delete it at once and tell Apple to end the sign-in link. The app then blocks the age check on that iPhone for 30 days.
- We keep only an age group, never your birth date. Nobody else can see your age group.
- There is no chat or private messaging, and no free text between users. People can only send preset interactions, such as a nod or a wave. A nod or wave goes only to the person it is sent to.
- Users aged 16–17 use the same features as adults in version 1.0. Their tasks are also visible to their room by default, and they can turn this off with Show my tasks to my room in Today's Tasks.
- Crew (from version 1.3) is available only to users 18 and older (section 4.16). Users aged 16–17 do not see or use it.
- Private rooms with a 16–17 member (from version 1.3). If a member aged 16–17 is currently in a private room, the owner must approve each new member before they join (section 4.14).
- Email for users aged 16–17 (from version 1.3). You add and verify an email address the same way as any other age — from Apple or typed and verified — but you only ever receive one kind of mail from us: the reminder for a saved plan and its verification codes. We never send any other kind of email to a 16–17 account (section 4.12).
- Reports about possible under-16 users, or about unwanted contact, go to the top of our review queue.
If you believe someone under 16 is using LearnTogether: if you share a room with them, long-press their row in the room's list and choose Report…, then Seems under 16. You can also email [email protected]. If you are that user, or their parent, you can include the public ID shown as ID in the user's own Settings. We will review it and act on it, for example by banning the account.
16. How we protect your information
- All connections use encryption (TLS 1.2 or later).
- Our database, backups and storage are encrypted at rest by Microsoft Azure.
- Apple tokens are encrypted again by our app server. Our own sign-in tokens, install IDs and sign-in check codes are stored only as one-way hashes. (The one exception: after a sign-in token is renewed, an encrypted copy is kept for 60 seconds to recover from dropped connections, then cleared within minutes.) Starting with app version 1.3, your device's APNs push token (section 4.11) is stored as itself, not a hash, because APNs can only be addressed with the actual token.
- Starting with app version 1.3, your email address (section 4.12), if you give us one, is encrypted in our database, the same way Apple tokens are.
- The database is not reachable from the public internet. Our services use managed identities instead of passwords.
- Staff access is limited to what is needed. Admin actions are logged.
No system is perfectly secure. If a privacy breach is likely to cause serious harm, we will notify the New Zealand Privacy Commissioner and the people affected as soon as we can, as the Privacy Act 2020 requires. Before app version 1.3, we had no email address for you, so we did this through a notice in the app and on our website and App Store page. Starting with app version 1.3, if you have given us an email address (section 4.12) we may also email you directly; we still do not have one for everyone, so we may still use a notice in the app, on our website and on our App Store page as well.
17. If you live outside New Zealand
We are a New Zealand company, and New Zealand's Privacy Act 2020 applies to how we handle your information.
- United States. We do not sell your personal information or share it for cross-context behavioural advertising. We do not knowingly collect information from children under 13. Our age check refuses anyone under 16.
- European Union, European Economic Area and United Kingdom. Version 1.0 is not offered in these regions yet. We will update this policy before it is.
18. Changes to this policy
We will update this policy when the app or our practices change. We will change the date at the top. If a change is important, we will tell you in the app before it takes effect.
19. Contact us and complaints
Questions, requests or complaints:
Privacy Officer, TIMEAWAKE LIMITED
21 Longshore Drive, Long Bay, Auckland 0630, New Zealand
[email protected]
If you are not happy with our response, you can complain to the New Zealand Office of the Privacy Commissioner at privacy.org.nz.