Scholr brings your school grades, schedule, and student ID into one place. This policy explains what we collect, why we collect it, and what stays on your device. It covers the Scholr app and this website (scholr.cc).
The short version: almost everything stays on your phone. We only send data to our servers for features you choose to turn on, and we list every one of those below.
What stays on your device
By default, your information stays on your phone. Your Aeries and Google sign-in details, your session cookies, and most of your grades and schedule live in your device’s secure storage (the iOS Keychain). They are not sent to us.
What we collect, and why
We only send data off your device for features you choose to use. Here is the full list, with the reason for each.
- Google refresh token, only if you turn on grade alerts. So our server can check Aeries for new grades and notify you, we store the token that keeps your Google session alive. It is encrypted at rest in a secure vault and can only be read by the server function that polls your grades. Turn grade alerts off and we stop using it.
- A device notification token. An Apple Push Notification token, so we can deliver grade alerts to your phone.
- Your phone number, only if you post a teacher rating. We verify your number through Twilio before you can post. This keeps ratings honest and cuts down on abuse. Your number is stored with your account and is never shown to anyone.
- Your school, school email, and a hashed student ID. Tied to an anonymous account and used to moderate teacher ratings and prevent abuse. The student ID is stored as a one-way hash, not as the raw number.
- Teacher ratings you post. The rating, your comment, the school year, and the date. Ratings are shown to other students anonymously. We never attach your name or any identifier to a public rating.
- Student ID card details, only when you add a Wallet pass. To build your Apple Wallet pass we send your name, grade, ID number, school email, and photo to our pass generator. No passwords or login details are ever sent.
Who processes your data
We rely on a few trusted services to run these features: Supabase (our database, encrypted vault, and server functions), Twilio (phone verification), Apple (push notifications, the App Store, and Wallet), and Google (sign-in). Your grades and schedule come from your school’s Aeries system. Scholr is independent. It is not Aeries, and it is not run by your school or district.
Your choices, and how long we keep things
You stay in control.
- Turn off grade alerts and we stop checking your grades on the server and stop using your stored token.
- Delete any teacher rating you posted, right from inside the app.
- To delete your account and the data tied to it, email us at 3xybiz@gmail.com and we will take care of it.
Students and school data
Scholr is used by students and shows your own school records through your own school account. If you are not old enough to agree to this on your own, please go through it with a parent or guardian. If you believe a student’s information was collected in a way it should not have been, contact us and we will fix it.
Security
We encrypt sensitive data at rest, limit who and what can read it, and keep credentials out of our logs. No system is ever perfect, but we take this seriously and keep the amount we collect as small as we can.
Changes to this policy
If we change this policy we will update the date at the top, and for anything significant we will let you know in the app.
Contact
Questions about privacy? Email us at 3xybiz@gmail.com or reach us on Discord at discord.gg/w4gh2BwZM3.