Short version: Scrolar has no accounts, no ads, and no tracking. We don't collect personal data. Everything you do in the app stays on your device.
This policy describes how the Scrolar iPhone app ("Scrolar", "the app", "we") handles information. By using the app you agree to this policy.
Scrolar is operated by its individual developer (the "operator"), who is the data controller for the limited processing described here. You can reach us at scrolarapp@gmail.com. Because we collect no personal data and carry out no large-scale or special-category processing, we are not required to appoint a Data Protection Officer or an EU representative.
We do not collect personal data. Scrolar has no user accounts, no sign-in, and no server operated by us that receives information about you. Our App Store privacy label is "Data Not Collected."
Information the app creates while you use it — your chosen topics, study progress, review schedule, streaks, XP, answers, and saved or liked cards — is stored only on your device. It is never transmitted to us. You can erase it at any time in Settings → Clear Local Study Data, or by deleting the app. We make no automated decisions that produce legal or similarly significant effects (spaced-repetition scheduling runs entirely on your device).
The app downloads study content (plain text and JSON) over a secure HTTPS connection from a static content host (GitHub Pages and its content-delivery network, Fastly). These requests contain no account, no identifiers, and no cookies set by the app.
As with any internet service, the hosting/CDN provider automatically logs technical information such as IP address and request time to deliver the files and keep the service secure. Under EU law an IP address can be personal data, so for transparency: that logging is carried out by the hosting provider as an independent controller of its own infrastructure logs — we neither receive, access, nor combine those logs with anything else. Our legal basis for the limited processing involved in delivering content this way is our legitimate interest (GDPR Art. 6(1)(f)) in operating a secure, reliable service. See GitHub's and Fastly's privacy statements for how that infrastructure handles such logs.
Scrolar Pro is an optional subscription. Purchases are processed entirely by Apple through the App Store — we never receive or store your payment information. The app only keeps an on-device flag indicating whether your subscription is active, provided by Apple's StoreKit; the legal basis for that check is performance of your subscription contract. Apple acts as a separate, independent controller for purchase data under Apple's own privacy policy.
Scrolar contains no third-party analytics, advertising, or tracking SDKs. We do not track you across other apps or websites, we do not use advertising identifiers, and we do not show ads.
The only third parties involved are Apple (app distribution and purchases) and GitHub/Fastly (static content hosting/CDN). Each acts under its own privacy terms; we share no personal data with them beyond what the technical interaction necessarily involves (e.g. your device's IP reaching the CDN to fetch a file).
These providers operate infrastructure in the United States, so delivering content and processing purchases can involve a transfer of technical data to the U.S. We do not carry out these transfers ourselves; the providers maintain their own safeguards (for example EU–U.S. Data Privacy Framework certification and/or Standard Contractual Clauses). See Apple's and GitHub's privacy statements for details.
Because there is no account and no copy of your data on our side, you already hold and control your data directly. You have the right to access, rectify, erase, restrict, object to, and port your data (GDPR), and, if you are in California, to know, delete, correct, and opt out (CCPA/CPRA). Here is how each works in practice:
California (CCPA/CPRA): we collect no personal information, and we do not sell or share personal information (including for cross-context behavioural advertising), so no "Do Not Sell or Share My Personal Information" link is required. We collect no sensitive personal information, so the right to limit its use does not apply. We will not discriminate against you for exercising any right.
To make a request, email scrolarapp@gmail.com. We respond within the timeframes the law requires (one month under GDPR; 45 days under CCPA); for most requests we hold no data to act on. You also have the right to lodge a complaint with a data-protection supervisory authority — in Sweden this is the Swedish Authority for Privacy Protection (IMY); in California, the California Privacy Protection Agency.
Scrolar is a general-audience (4+) educational app; it is not directed to children, and it does not knowingly collect personal information from anyone — including children — because it does not collect personal information at all. There is no account and no data leaves the device.
We do not sell, rent, or share personal data. We have none to share (see Section 6 for the infrastructure providers).
Your on-device data stays on your device until you clear it or delete the app — there is no server retention by us. Any technical logs created by the hosting/CDN provider are retained and controlled by that provider under its own policy. You are always in control: clear data from Settings → Clear Local Study Data, or remove everything by deleting the app.
On-device data is protected by iOS. Content is fetched over encrypted HTTPS connections.
If we update this policy, we'll revise the date above and, for material changes, note them in the app or its App Store release notes.
Questions about privacy? Email scrolarapp@gmail.com.