Privacy Policy

We collect only what is needed to personalize academic practice and operate the service. We do not sell personal information, and we do not use student data for advertising or to build advertising profiles.

• Account information — name, email address, password credentials (stored hashed by our authentication provider), and role (student, parent, teacher, school).
• Academic information — assessment answers, practice responses, timing data, study activity, goals, target exams and target schools.
• Derived insights — Scholar Index™, Readiness™, Scholar DNA™ and similar progress measures calculated from your activity.
• Technical information — device and browser type, approximate region, and error/diagnostic logs generated when you use the app.
• Billing information — subscription status and the last four digits and brand of a saved card. Full card numbers are handled by our payment processor and never reach Scholar's systems.

A student account exists to deliver practice and coaching to that student. Student academic records are visible to the student, to a parent or guardian the student (or the parent, during onboarding) has linked to the account, and to a school or teacher when the account was created under a school program.

Students can request an export or deletion of their data at any time by emailing support@thescholarapp.com.

Parent accounts store contact details, the students linked to them, notification preferences and email delivery records for weekly summaries and reports. Parents see progress and insight views for linked students; they do not see a student's private reflections written for the AI coach unless the student shares them.

A parent or guardian may request access to, correction of, or deletion of a linked minor student's information by contacting us from the email address on the parent account.

Scholar uses cookies and browser local storage that are necessary for the service to work: keeping you signed in, remembering the exam you are studying for, saving in-app preferences (such as where you placed the AI coach button), and protecting against abuse. We do not use advertising cookies or third-party ad trackers.

You can clear or block cookies in your browser settings. If you do, signing in and saving progress may not work.

We record product analytics — pages visited, features used, assessment and practice events, and reading/timing signals during passage-based questions — so we can measure learning outcomes and improve the product. These events are tied to your account so your own coaching can use them.

Aggregated, de-identified statistics (for example, average score improvement) may be used to describe how Scholar performs. Aggregate reporting never identifies an individual student.

Conversations with the AI Academic Coach, generated study plans, explanations, summaries and reports are produced by large language models accessed through our AI provider gateway. To generate a useful answer, the relevant portion of your academic context — such as the question you are working on, recent performance, and your goals — is sent with the request.

• AI conversations and generated content are stored on your account so coaching stays consistent over time.
• We do not permit our AI providers to use Scholar data to train their public foundation models.
• AI output can be wrong. Coaching, explanations, score estimates and admissions probabilities are directional study guidance, not official scores, academic advice, or admissions decisions.
• You can delete your AI history by contacting support.

We keep account and academic data for as long as the account is active, because progress measures depend on history. When an account is deleted, personal data is removed from production systems within 30 days and from routine backups within 90 days, except where we must keep records longer to meet legal, tax or accounting obligations (for example, payment records).

Free Academic Assessment results submitted without an account are retained so a report can be re-sent, and are deleted on request.

Data is encrypted in transit and at rest by our hosting and database providers. Access to student records is enforced at the database level with row-level security, so an account can only reach its own data or data explicitly shared with it. Answer keys, explanations and other sensitive content are served from the server only when a member is entitled to see them.

Administrative access is limited to the people who need it to operate the service. No online service can promise perfect security; report a suspected vulnerability to support@thescholarapp.com and we will respond promptly.

We use a small number of processors to run Scholar. Each receives only the data needed for its function and is bound by its own agreement with us.

• Stripe — payment processing, subscription billing and the customer billing portal. Stripe receives billing contact details and card data directly.
• Supabase — database, authentication and file storage for account and academic data.
• Lovable — application hosting, the deployment platform and the AI gateway that routes model requests.
• AI model providers (Google, OpenAI, Anthropic) — generate coaching, explanations, study plans and summaries from the context described above.
• Resend — delivery of transactional and report emails from support@thescholarapp.com.

This list changes as the product changes. Email us for the current list at the time of your request.

Scholar is built for high-school-aged students preparing for the PSAT, SAT, ACT and AP exams. Accounts for students under 13 are intended to be created by a parent, guardian or a school acting with parental consent, and we do not knowingly collect personal information directly from a child under 13 without that consent.

If you believe a child under 13 created an account without consent, email support@thescholarapp.com and we will delete the account and its data.

FERPA. When Scholar is used by a school, district or program, we act as a school official with a legitimate educational interest under FERPA and handle education records solely on the institution's behalf and instructions. We do not disclose those records to third parties except the processors listed above, and institutional records are returned or deleted at the end of the engagement on request.

COPPA. Where a school provides consent on behalf of parents for students under 13, that consent covers only the educational use of Scholar. We collect no more information than is reasonably necessary for the student to participate, and we do not condition participation on disclosing more than that.

This section describes our operating practices; it is not a legal opinion or a certification of compliance. Schools that need a signed data privacy agreement should contact us.

You can access most of your data in the app, update your profile at any time, unsubscribe from non-essential email from any message, and request an export or deletion by email. We respond to privacy requests within 30 days and may verify your identity first.

Privacy questions, requests and vulnerability reports: support@thescholarapp.com. We update this policy as the product changes and will revise the "last updated" date above.