Scholr signs in to the systems your school already runs and puts your grades, your schedule and your student ID behind one app. This policy explains what we collect, why, how long we keep it, and how to get rid of it. It covers the Scholr iOS app, its widgets, and this website.
The short version. Almost everything stays on your phone. We send data to our servers only for features you switch on, every one of those is listed below, and you can delete your Scholr account from inside the app at any time. We do not sell your information, we do not share it for advertising, and there are no analytics or ad trackers in the app. This website counts its visits through Vercel, with no cookies and nothing that follows you to other sites.
Who we are
Scholr is an independent app. It is not run by, affiliated with, or endorsed by your school, your district, Aeries, 5Star Students, or any other platform it connects to. When Scholr shows you your grades, it is signing in to your school’s system with your own account and showing you your own records.
Contact: help@scholr.cc, or Discord at scholr.cc/discord.
What stays on your device
By default your information does not leave your phone. Your school session, your gradebook, your transcript, your schedule, your saved hall pass QRs and your class renames live in the app’s own protected storage on your device, and your Google sign-in token lives in the iOS Keychain. None of that is sent to us unless you turn on a feature below that needs it.
What we collect, and why
We only send data off your device for features you choose to use. This is the complete list.
- A Google refresh token, only if you turn on grade alerts. So our server can check your gradebook for new grades while the app is closed, we store the token that keeps your Google session alive. It is held encrypted in a secure vault, readable only by the server function that runs the check, and never written to a log. Turn grade alerts off and we delete the enrolment and stop using the token.
- A device notification token. An Apple Push Notification token, so a grade alert can reach your phone.
- Your phone number, only if you post a teacher rating. We verify it through Twilio before your first post. This is what keeps ratings from being an anonymous flood. Your number is stored with your account and is never shown to anyone.
- Your school, your school email, your name, your grade level, and a one-way hash of your student ID. Tied to an anonymous account so we can moderate ratings, answer a support request, and stop one person running many accounts. We store a hash of the student ID, never the number itself. Your name is never shown to other students.
- Your app version, iOS version, device model, the school year, and when you last signed in to your school. Stored with your account each time the app opens, so a support reply can start from what you are running instead of asking. Never used for advertising.
- Your app log, only when you send it or we ask for it. If you tap Send logs to Scholr in Settings, or if we flag your account to help with a problem you reported, the app uploads its diagnostic log: what the app did and what our servers answered. It carries no password, no login token, no grades and no name. We keep your three most recent uploads and delete anything older than 30 days.
- Teacher ratings you post. The score, your comment, the school year and the date. These are shown to other students without your name or any identifier attached.
- Reports and blocks. If you report a rating we store which rating, the reason you chose, anything you typed, and that it was you who reported it, so the same person cannot report one rating repeatedly. If you block someone we store the pair of accounts. Neither is ever shown to the person reported or blocked.
- Student ID card details, only when you add a Wallet pass. To build the pass we send your name, grade, ID number, school email and photo to our pass generator. No password or login token is ever part of that.
- Your subscription receipt, only if you buy Scholr Elite. Apple gives us a signed receipt. We verify it and store the transaction identifiers and the expiry date so the app knows you are a subscriber. We never see your card, and Apple does not give us your billing details.
- Auto-flex settings, only if you turn the scheduler on. The weekdays you picked and the teachers you picked, so the nightly job can sign you up.
- Invites, only if you use one. Your invite code, and, when a friend joins from your link, a record that your account invited theirs, so we can add your reward and make sure each student counts once. Neither of you is shown who the other is: you see a count.
- A page view, when you open this website. Vercel logs the page, the site that sent you, the country and city your connection appears to come from, and your browser, device type and operating system. There is no cookie. Vercel tells visitors apart with a hash of the request that it throws away after 24 hours, so it cannot follow you between days or to other sites.
We do not collect your precise location, your contacts, your photos (the camera is used for scanning hall pass QR codes and nothing is uploaded), or an advertising identifier.
How long we keep it
- Teacher ratings, reports and blocks: until you delete them or your account.
- Your account record, phone number and hashed student ID: until you delete your account.
- The grade-alert token and enrolment: until you turn grade alerts off, or delete your account.
- Auto-flex settings: until you turn the scheduler off, change schools, or delete your account.
- Subscription records: for as long as the subscription is active, and afterwards for as long as we need them for tax and accounting.
- Server logs: rotated automatically. They do not contain credentials.
- Website page views: kept by Vercel with nothing that identifies you once the 24-hour visitor hash expires.
Who processes your data
We use a small number of services to run these features. Each one sees only what that feature needs.
- Supabase, our database, encrypted vault, server functions and push delivery. Privacy policy
- Twilio, the phone verification texts. Privacy policy
- Apple, push notifications, the App Store, Apple Wallet, and a check that an invite comes from a real iPhone that has not been counted before (DeviceCheck; it identifies no person). Privacy policy
- Google, the sign-in your school uses. Privacy policy
- Vercel, hosting for this website and its cookie-free visit counts. Privacy policy
- Cloudflare, which delivers mail sent to help@scholr.cc. Privacy policy
- Resend, which sends our replies. Privacy policy
Your grades and schedule come from your school’s own system. That system is your school’s, not ours, and its own privacy policy governs it.
Data is stored in the United States.
Students and school records
Scholr shows you your own school records, using your own school credentials, at your request. We are not a school official and we do not act on your school’s behalf, so Scholr is not a FERPA school-records system. Your school remains the custodian of your education records. If your school or district would rather you not use a third-party app with your school account, follow their rules first.
Children
Scholr is intended for students aged 13 and up. We do not knowingly collect information from anyone under 13. If you are under 18, please read this policy with a parent or guardian. If you believe a child under 13 has given us information, email us and we will delete it.
Your choices and your rights
- Delete your account from inside the app. Settings, then Privacy and safety, then Delete my Scholr account. It erases your ratings, your reports and blocks, your phone number, your grade-alert enrolment and its stored token, your auto-flex plan, your push tokens, your Wallet pass claim, your invite code, the record that you were invited, any free Elite you earned, and any logs you sent. One thing stays: the hash of your student ID, with your school, in a list of students who have been counted as an invited friend, so nobody can be counted twice. It names nobody. It cannot be undone.
- Delete a single rating any time, from the rating itself.
- Turn grade alerts off and the server stops checking your grades and drops the stored token.
- Block or report anything posted in teacher ratings.
- Ask us anything. Email help@scholr.cc and we will answer.
If you live in California, the CCPA as amended by the CPRA gives you the right to know what we collect, to get a copy, to correct it, to delete it, and not to be discriminated against for asking. The list above is our disclosure, the in-app delete is our deletion mechanism, and you can email us for a copy or a correction. We do not sell personal information and we do not share it for cross-context behavioural advertising, so there is nothing to opt out of. If you live somewhere with similar rights, the same options are open to you.
Security
Sensitive values are encrypted at rest, access is restricted to the specific server function that needs them, and credentials are kept out of logs. Direct reads of the ratings table are restricted to your own rows, so nothing can join a public rating back to the account that wrote it. No system is perfect, which is why we collect as little as we can get away with. If we ever discover a breach affecting your information, we will tell you and the relevant authorities as the law requires.
Changes
If this policy changes we will update the date at the top, and for anything significant we will say so in the app before it takes effect.
Contact
Email help@scholr.cc or find us on Discord at scholr.cc/discord.