You Upload the Reviewer for Free. The App Sells It Back as a Tutor.
Indonesian students feed exam notes into a study app that trains a paid tutoring product, then campuses buy it back as a licensed service.
Every semester, students across Indonesia open the same app before finals. They upload lecture slides, past exam reviewers, hand-copied notes from a friend who took the class last year. The app summarizes it all, quizzes them, flags the parts they keep getting wrong. Free account, no card required.
What the terms of service bury is the part where that uploaded material does not stay yours. The platform reserves the right to use submitted content to improve its products. In plain terms, your reviewer becomes training data. The polished tutoring tier the company sells to universities later is built, in part, on what you handed over when you were cramming at 2 a.m.
The exchange nobody consented to out loud
Here is the loop. A student uploads a decade of someone's painstaking summaries for a notoriously hard accounting course. The model learns from thousands of uploads like it. The company packages that into a premium tutoring product and pitches it to the same campuses as an official learning tool. The university pays a license fee. The student pays again, this time through tuition or a subscription the department recommends.
You did the labor of compiling the knowledge. You pay to rent it back in a cleaner wrapper.
Nobody signed up for this in a way that felt like a decision. The consent lives in a checkbox you tapped past because the deadline was in six hours. That is not an accident. The whole design assumes you will never read the training clause.
Why campus buy-in makes it worse
When a lecturer or a faculty office endorses the app, the pressure to use it stops being optional. Resisting means studying slower than your classmates. Data privacy advocates have flagged this pattern across edtech: the free tier harvests, the institutional tier monetizes, and the user caught in the middle is a student who cannot easily opt out of the tool their program now expects.
Indonesia's Personal Data Protection Law, Law No. 27 of 2022, took effect on 17 October 2022 and became fully enforceable on 17 October 2024, when its two-year grace period ended. The law requires clear consent and limits on how personal data gets reused. Enforcement, as groups tracking the rollout acknowledge, lags well behind what the app economy actually does day to day. A reviewer full of your name, your handwriting, your weak subjects is personal data by any honest reading. It rarely gets treated that way.
What you can do before the next upload
Check whether the app offers a setting to exclude your content from training. Some do, buried deep. Strip identifying marks before uploading anything. Share notes in a closed group chat or a shared drive your batch controls instead of feeding them to a platform that sells the aggregate.
And when a department tells you the paid tutor is the official tool, ask who built the content inside it. The answer, often enough, is the batch three years ahead of you, who uploaded their reviewers for free and never saw a cut. You are next in line to do the same, unless you close the tab first.
