Privacy policy

Last updated: September 13, 2026

Scholarity helps you create and practice Study Sets. This policy explains the information used to provide that service. We do not sell personal data. We share information with service providers when needed to operate Scholarity, as described below.

Information we handle and why

• Accounts and security: your email, password hash and salt for password accounts, verification and recovery records, and sign-in/session information. Google sign-in provides your verified email and provider account identifier. Browser/device identifiers help enforce signup and usage limits and protect accounts.
• Study material: the notes and extracted text you submit, generated Study Sets, practice answers, progress and preferences. We use these to generate study activities, save your account library and support practice.
• Billing: Stripe customer/subscription identifiers, plan status, invoices and usage records allow us to manage paid access. Stripe processes checkout and payment details; do not send card details to Scholarity support.
• Support and operations: messages you send us and diagnostic information about failures help resolve issues and secure the service. Hosting and delivery systems process technical request information such as IP addresses.

AI processing and other service providers

Extracted source text is sent to Scholarity’s server and OpenAI when you generate material. AI Tutor sends the question and context you explicitly submit; it does not automatically receive your notes or earlier messages. Do not submit sensitive information or material you are not authorized to share. Provider processing and retention are governed by their applicable service terms; this policy does not promise that submitted material is never retained by an AI provider.

Hosting, database and email providers process information needed to deliver the service. Stripe handles billing, and Google handles Google sign-in if you choose it. Information may be processed outside your country, including in the United States, where different laws may apply. We may also disclose information when required by law or needed to address fraud, security incidents or protect lawful rights.

Browser storage and optional usage sharing

Scholarity uses browser storage and authentication cookies for sessions, guest sets and preferences. Unsaved input drafts are held in app memory while you work. Guest sets remain in that browser; clearing browser data removes them. Generating a guest set still sends source text to the server and OpenAI.

A bounded diagnostic activity buffer and campaign attribution may be stored in your browser before a usage-sharing choice. Refusing sharing clears that usage buffer and attribution. When optional collection is enabled, sending basic activity counts to Scholarity requires your affirmative consent. These counts use a random browser ID, campaign tags and broad device category, without your notes, practice answers or email. You can change your choice with the Usage sharing control in the app. Server activity records have a 30-day retention window and are pruned during collection or administrative maintenance; pruning is not a promise of immediate removal at exactly 30 days.

Account authentication, allowance and payment records needed to operate the service are separate from optional usage sharing. Ads and social networks you visit have their own privacy practices.

Email choices

Getting-started reminders and plan prompts require your opt-in and are sent only when their relevant unfinished step or allowance condition applies. Unsubscribe using the link in an onboarding email or change your email preference in Settings. This stops onboarding and plan reminders; essential account, security and billing messages may continue.

Retention and your choices

Account study material and progress are retained to provide your saved library. Deleting a Study Set removes it from your active library but retains its full material, extracted source text and progress for recovery in Settings → Deleted Study Sets until permanently purged. Deleted sets become eligible for administrative purge after 10 days; the actual purge time depends on maintenance execution. Deletion does not mean immediate erasure. Account, support, security and billing records can have different retention needs. Backups, provider records and records needed for legal or accounting obligations may remain after an account or set is removed.

You can edit or delete Study Sets in the app and use Delete account in Settings when available for your account. Review or cancel an active subscription in Settings → Manage billing before deleting your account. Contact us to request access, correction or deletion, withdraw optional consent, ask about retention or raise a privacy concern. We may need to verify your identity and explain any lawful restriction before fulfilling a request.

Security and policy changes

Scholarity uses account authentication, access controls and password hashing. No online service can guarantee complete security. We will update this page when practices change and seek additional consent where required for a new optional purpose.

Contact

Privacy questions: admin@scholarity.ca
Scholarity
365 H Street, #49766
Blaine, WA 98230, United States