Privacy Policy

Introduction

Through the Waters, a DBA of Honeycomb Collective Inc. (“TTW,” “we,” “us,” or “our”), operates the Study Buddies platform at joinstudybuddies.com (“Platform”). The Platform enables universities and educational programs to run facilitated co-working sessions for enrolled students.

This Privacy Policy describes how we collect, use, and protect personal information from students, facilitators, administrators, and institutional contacts who use the Platform. It does not cover the separate corporate website at throughthewaters.org.

For institutional customers, the applicable Data Processing Agreement or other signed data protection agreement governs TTW’s contractual obligations concerning student education records. This Privacy Policy describes our general privacy practices and should be read together with any applicable institutional agreement. If a provision of this Privacy Policy conflicts with an applicable signed data protection agreement, the signed agreement will govern the parties’ contractual obligations.

If you have questions about this policy or our data practices, please contact us at hello@throughthewaters.org.

Information We Collect

We collect what we need to operate the Platform and measure its impact:

• University email address: used for login; no password required
• Full name: displayed on session rosters
• Mobile phone number (optional): used to send text messages if you choose to receive them
• Session RSVPs and attendance: which sessions a user registered for and attended
• Post-session survey responses, including free-text responses: used for program impact analytics and qualitative feedback
• Information you provide when using the Platform such as responses to optional questions, preferences, and program-specific information entered by you or your program administrators
• Technical and security information, such as IP address and browser information, used to keep the Platform secure and working

We do not collect financial data, social security numbers, health records, or biometric data.

Our infrastructure providers (including our database and application hosting providers) may collect certain technical and operational data (such as IP addresses, request logs, and session identifiers) as part of normal platform operations. This data is used solely to maintain security and performance, and is governed by each provider’s own data practices.

As the Platform grows, we may add features that collect additional information.

How We Use Your Information

We use the information we collect to:

• Operate the Platform and facilitate session scheduling and attendance
• Deliver post-session surveys and calculate program impact analytics
• Generate reports and analysis for your institution
• Improve the Platform’s design, surveys, and features, and for research using de-identified trends
• Provide technical support
• Communicate with you about your account and the Platform, by email or, if you opt in, by text message
• Comply with applicable legal obligations

We do not sell your personal information. We do not use student data for advertising or for any purpose not described in this policy. The AI tools we use are set up so the provider does not train models on that data.

How We Share Your Information

We share information in limited circumstances:

• With your institution: program administrators and facilitators can see student data within their program, including name, contact email, and phone number if provided, consistent with their agreement with TTW
• With our sub-processors: Supabase (database), Vercel (application hosting), Resend (transactional and notification emails), Twilio (text message delivery), Zoom (video conferencing), and Sentry (error monitoring, which may include error-triggered session replay; configured to mask or scrub personally identifiable information), each governed by its own terms and privacy practices
• With AI-assisted tools we use to maintain and troubleshoot the platform and to analyze program data, including AI features within our service providers’ products. Information such as email addresses or IP addresses may be shared for maintenance and troubleshooting. When we analyze survey responses, attendance, or other program data, we replace names and email addresses first.
• Across institutions in de-identified form: TTW may compare trends and share de-identified insights across partner institutions to improve the Platform and for research; no identifiable student data is shared across institutions
• When required by law: in response to a valid legal obligation, court order, or government authority

Student Data and FERPA

Study Buddies processes student education records on behalf of partner institutions. TTW acts as a “school official” with a legitimate educational interest under the Family Educational Rights and Privacy Act (FERPA), under the direction and authorization of each partner institution. Partner institutions retain ownership and control of their students’ educational records.

The specific terms governing how TTW processes student data, including permitted uses, access controls, retention, and security, are set out in the Data Processing Agreement between TTW and each institution, where one is in place. Please refer to that agreement or contact your institution for further detail.

Data Storage and Security

Student data in our primary database is stored in the United States via our database provider. TTW maintains reasonable technical and organizational measures to protect personal information. Data is encrypted at rest and in transit by our providers, and we use access controls designed to prevent one institution’s data from being accessible to another institution’s users.

No method of electronic storage is completely secure. While we take data protection seriously, we cannot guarantee absolute security.

Data Retention and Removal of Identifying Information

We retain personal information as needed to operate the Platform, provide services to your institution, maintain program records, and comply with applicable legal obligations. Where an institutional agreement provides for the return or removal of student information, we will follow that agreement.

Where supported by our data-handling procedures, an institution may request that we remove a student’s identifying information from our primary database. This process may replace identifiers such as a student’s name, email address, and phone number with a token while preserving session and survey records for institutional reporting. It does not necessarily delete all records, alter free-text content, or remove copies held by our service providers. The treatment of backups and provider-held copies is subject to applicable agreements, provider practices, and legal requirements.

For questions about your information, contact hello@throughthewaters.org or your program administrator.

Text Messages

We send text messages only to users who opt in. Messages are reminders, updates, and announcements about Study Buddies sessions and activity, and how often you receive them varies. We keep a record of your text message choices, such as when you opted in or out. Message and data rates may apply. Reply STOP to opt out or HELP for help. You do not need to agree to receive text messages to use the Platform. We do not sell mobile phone numbers or text message opt-in consent, and we do not share them with third parties or affiliates for marketing or promotional purposes.

Text message program terms

Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Object to or restrict certain processing of your data

To exercise any of these rights, please contact us at hello@throughthewaters.org or speak with your program administrator.

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information. To submit a request regarding your personal information, please contact us at hello@throughthewaters.org.

Updates to This Policy

We may update this Privacy Policy from time to time. The version number and date at the top of this page reflect the most recent revision. If we make material changes, we will notify you by posting a prominent notice on the Platform or by sending you a direct notification. Your continued use of the Platform after the effective date of any update constitutes your acceptance of the revised policy.

Contact Us

Through the Waters (a DBA of Honeycomb Collective Inc.)
Email: hello@throughthewaters.org
Website: joinstudybuddies.com