Privacy Policy

Scholarly is free and we do not sell anything, so we have no reason to sell your data — and we don't. We collect what the product needs to build your study plan and nothing we have no use for. You can ask us to delete your account and everything attached to it at any time, and we will.

Scholarly (Scholarly) operates scholarly.space. For anything in this policy, including data deletion requests, contact scholarlyhub.space@gmail.com.

Only these, and only because each one is used:

• Account — your name, email address and a hashed password. We never store your password itself, only a bcrypt hash of it, which cannot be reversed.
• What you tell us at signup — your current and target SAT score, test date, school year, country, the universities you're aiming at, your weakest area and how much time you can study. This is what makes your plan yours; without it everyone gets the same generic advice.
• Your activity — which questions you answered, whether you got them right, how long each took, your scores, bookmarks and streaks. This is what the plan adapts to.
• Sessions — when you book, what you asked for, and your timezone.
• Coins and referrals — your balance, every transaction, and who invited you.

We do not use advertising trackers, we do not build a profile of you for anyone else, and we do not ask for your address, phone number or payment details — Scholarly is free, so there is nothing to pay.

We hold your account and practice data to provide the service you signed up for. Where local law requires consent, creating an account and answering the onboarding questions is that consent — and you can withdraw it by deleting your account.

Most SAT students are. Scholarly is intended for students aged 13 and over. If you are under the age where your country lets you agree to this on your own — 13 in the US, 16 in much of Europe — please ask a parent or guardian to read this with you before signing up.

A parent or guardian can email us to see what we hold about their child or have it deleted, and we will act on that without argument. We do not knowingly collect data from children under 13; if we discover we have, we delete it.

A small number of services we depend on, each doing one job, none of whom are allowed to use your data for their own purposes:

• Vercel — hosts the website.
• Neon — hosts the database.
• Google Meet — runs the video call if you book a session. Google's own terms apply while you are in the call.
• Resend — delivers emails such as booking confirmations and password resets.

When you book a session, the mentor running it sees your name, email and what you wrote in the booking form — that is how they prepare for your session.

Because these services operate internationally, your data may be processed outside your country.

For as long as you have an account. Delete your account and we remove your profile, practice history, bookings, coins and referral records. We may keep a minimal record that an account was deleted, so that a deleted account cannot be silently re-credited with referral rewards.

You can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete it. Email us and we will do it — we are not going to make you fill in a form. You can also edit most of your profile yourself from Settings.

Passwords are hashed with bcrypt. Traffic is encrypted in transit. Coin balances and session bookings are only ever changed on our servers, never from your browser, so they cannot be tampered with from the client.

No system is perfect. If you find a security problem in Scholarly, please tell us rather than anyone else, and we will fix it and credit you if you want us to.

If we change this policy in a way that matters, we will say so on the site rather than quietly updating the date at the top.