Privacy Notice

Last updated: 14 June 2026

1. Who is responsible

Torian is operated by Adrian Munishi ("we", "us", "our"). For the personal data we collect to provide the Service, we act as the data controller.

2. What data we collect and why

Category	Examples	Purpose	Legal basis
Account data	Email, display name, password (hashed), avatar	Create and secure your account	Contract performance
App content	Subjects, tasks, study sessions you create	Provide the Service to you	Contract performance
Usage & telemetry	Pages visited, device type, language, IP address	Security, fraud prevention, product improvement	Legitimate interests
Support messages	Content of your support requests	Provide customer support	Legitimate interests
Marketing (optional)	Email address, preferences	Send product updates if you opt in	Consent

3. Who we share data with

Hosting & infrastructure — our cloud provider hosts the application and database (data may be processed in the EU/US).
Paddle.com Market Limited — our Merchant of Record. Paddle processes payments, manages subscriptions, calculates and remits sales tax/VAT, issues invoices and handles refunds. See the Paddle Privacy Policy.
Professional advisers — accountants and legal counsel, where strictly necessary.
Authorities — where required by law (e.g. court order or lawful request).

We do not sell your personal data.

4. International transfers

Where personal data is transferred outside the UK/EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions issued by the European Commission.

5. Data retention

We keep your data for as long as your account is active. If you delete your account, we delete or anonymise associated personal data within a reasonable period, unless we are required to retain it for legal, accounting or fraud-prevention purposes.

6. Your rights

Subject to applicable law, you have the right to:

access the personal data we hold about you;
rectify inaccurate data and complete incomplete data;
request erasure of your data;
restrict or object to certain processing;
data portability;
withdraw consent at any time (without affecting prior processing);
lodge a complaint with your local data protection authority.

We aim to respond to requests within one month.

7. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, hashed passwords and role-based access controls. No Internet service is 100% secure, but we work to reduce risk.

8. Cookies

We use a small number of cookies and similar storage technologies that are strictly necessary to run the Service (for example, to keep you signed in). We do not use marketing cookies. Your browser can block or delete cookies at any time, though essential cookies are required for the Service to work.

9. Children

The Service is not directed at children under the age required for valid consent in their country. We do not knowingly collect their data.

10. Contact

For privacy questions or to exercise your rights, contact Adrian Munishi at hello@getstudycompass.store.