Last updated: 24 September 2026
1. Who we are
iStudyPlus (“Service”, “we”, “us”) is operated by Elite Plan Company Limited (“Company”), with registered address in Tsim Sha Tsui, Kowloon, Hong Kong.
Website: https://istudyplus.locally-made.com/ (and any successor domain we designate).
Privacy contact: info@istudyplus.com.hk
2. Scope
This Policy explains how we collect, use, store, and share personal data when you visit or use iStudyPlus, create an account, purchase or use a membership, use Hub tools (including Question Bank, Key Concepts, and Flashcards), or use the on-site AI chat features.
3. Personal data we collect
Depending on how you use the Service, we may collect:
Account and profile
Name, email address, password (stored in hashed form), membership level, course preferences you select at signup, and account status (for example activation).
Billing and membership
Membership plan, order and membership history metadata, and payment-related information processed by our payment provider. Card details are handled by Stripe; we do not store full card numbers on our servers.
Student dashboard
WordPress account data linked to your Paid Memberships Pro level, course access, and account preferences (including selected course for Gold membership).
Service use
Pages and features you access, device and browser type, approximate location derived from IP address, login times, and technical logs needed to run and secure the site (including server and security logs). We do not currently use third-party analytics or marketing trackers (such as Google Analytics, GTM, Hotjar, Clarity, or Plausible).
Communications
Messages you send us (support or feedback) and emails we send about your account or the Service.
AI chat
Text and optional images you submit to the iStudyPlus AI chatbot, plus technical metadata needed to process the request (for example timestamps and rate-limit counters). Chat may be used without logging in. Prompts are processed by our AI infrastructure (currently an on-server model) so we can generate a reply.
Cookies and similar technologies
Essential cookies and related storage for login and session security, membership checkout, registration flow (including a short-lived signed cookie used for course selection during signup), AI rate limiting, and membership-related site scripts. See section 8.
We do not intentionally collect special categories of data (for example health or biometrics) for the Service.
4. How we use personal data
We use personal data to:
- create and manage accounts, memberships, and access to free or paid content;
- process payments, renewals, refunds, and related accounting;
- provide Hub tools, study materials, and AI chat features;
- send service emails (activation, password reset, important account notices);
- maintain security, prevent abuse, enforce rate limits, and debug errors;
- improve the Service using aggregated or de-identified information where practicable;
- comply with law and respond to lawful requests.
We do not sell your personal data.
5. Legal basis / Hong Kong PDPO
We process personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) and other applicable law. In practice we rely on: your use of the Service and contracts with us (account and membership); our legitimate interests in operating, securing, and improving the Service; and consent where we ask for it (for example optional marketing, if offered later).
6. Sharing
We share personal data only as needed with:
- hosting and infrastructure providers that run the website and related services;
- Stripe for payment processing;
- systems that process AI chat prompts to generate responses (content you send in chat may be transmitted to those systems for that purpose);
- email delivery providers for transactional mail;
- professional advisers or authorities when required by law or to protect rights and safety;
- a successor entity if we reorganise or transfer the business, under equivalent protections where required.
Processors act on our instructions and under appropriate agreements where required.
7. International transfers
Servers or processors may be located outside Hong Kong. Where we transfer personal data abroad, we take steps we consider reasonable to protect it consistent with this Policy and applicable law.
8. Cookies
We use essential cookies and similar technologies for membership checkout, login and session security, registration flow, AI rate limiting, and core site function. Disabling essential cookies may break account or checkout features.
We do not currently set third-party analytics or advertising cookies. If that changes, we will update this Policy and, where required, provide notice or controls.
9. Retention
We keep account and membership records for as long as your account is active and for a reasonable period afterward for backups, disputes, fraud prevention, and legal or accounting needs. Chat logs and technical logs are kept only as long as needed for the purposes above, then deleted or anonymised where practicable. You may request deletion subject to section 11 and legal retention duties.
10. Security
We use measures appropriate to the Service (access controls, HTTPS, hashed passwords, rate limiting on AI chat). No method of transmission or storage is completely secure; please use a strong unique password and keep login details confidential.
11. Your rights
Subject to the PDPO and other applicable law, you may request to:
- access personal data we hold about you;
- correct inaccurate data;
- erase data or restrict processing where applicable;
- object to certain processing;
- withdraw consent where processing is based on consent (without affecting prior lawful processing).
Contact us at info@istudyplus.com.hk. We may need to verify your identity. You may also complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong (https://www.pcpd.org.hk/).
12. Children
iStudyPlus is aimed at IB students and educators. If you are under the age where you can consent to data processing in your jurisdiction, use the Service only with a parent or guardian’s involvement. If you believe we have collected a child’s data without appropriate consent, contact us and we will take reasonable steps to delete it.
13. Third-party links
The Service may link to external sites. Their privacy practices are their own; this Policy does not cover them.
14. Changes
We may update this Policy from time to time. The “Last updated” date will change, and material changes may be notified by email or a notice on the site. Continued use after the update means you acknowledge the revised Policy.
15. Contact
Questions about this Policy or your personal data:
info@istudyplus.com.hk
Elite Plan Company Limited
Tsim Sha Tsui, Kowloon, Hong Kong