ScrollCAT is an MCAT flashcard study app, free to use with an optional paid subscription. We believe your data belongs to you, not us. This policy explains exactly what we collect, why, and how it's protected. There are no ads, no data brokers, and no surprises.
What We Collect
- Anonymous user ID: a randomly generated UUID created on first launch. No name, email, or personally identifiable information is requested or stored for basic use.
- Study activity: which cards you rated Easy or Hard, your daily card review count, and your high score. Used only to personalise your study experience (e.g. showing difficult cards more often).
- Optional profile data: if you choose to create a profile, we store your username, display name, avatar (emoji and color), and optional MCAT exam date. This data is associated with your anonymous user ID and visible to friends/challengers within the app. Profile creation is entirely optional.
- Sign in with Apple (optional): if you choose to link your account with your Apple ID, Apple shares your name and email address (or a private relay email, at your choice) with us on first sign-in. We use this only to identify your account and never sell or share it with third parties. You can decline this and continue using the anonymous ID instead.
- Subscription & purchase data (optional): if you purchase the Coached Mode subscription, our payments processor RevenueCat collects your purchase/transaction history and subscription status to manage entitlements. We never see or store your card number or other payment details; that is handled entirely by Apple.
- Challenge & social activity: if you use the challenge or friends features, we store challenge results and friend connections linked to your anonymous user ID.
- Bug reports: if you submit a bug report (via the shake gesture or Settings), the report text and your anonymous user ID are sent to us. No additional device data is collected automatically.
What We Never Collect
- Name or email, unless you choose to sign in with Apple
- Phone number or any other contact information
- Location or GPS data
- Camera or microphone access
- Third-party advertising or analytics SDKs
- Your card number or other payment details: Apple handles all billing
How Data Is Stored
Your study data lives in two places:
- On your device: via local storage for fast, offline access. This never leaves your device unless you have an internet connection.
- Supabase (cloud): a PostgreSQL database used to sync your progress across devices and preserve it through reinstalls. Supabase is SOC 2 Type II certified. Data is stored in the
us-east-1AWS region. View Supabase's privacy policy โ - RevenueCat: if you subscribe to Coached Mode, RevenueCat processes your purchase and subscription status on our behalf. View RevenueCat's privacy policy โ
Data is keyed only to your anonymous UUID and protected by Row Level Security (RLS); no other user or administrator can access your study records.
Push Notifications
ScrollCAT may send a daily local reminder to study. This notification is scheduled entirely on your device; no notification data is transmitted to our servers. You can disable notifications at any time in your device Settings.
Data Retention & Deletion
Your data remains stored as long as you use the app. You can delete all data associated with your account at any time using either method:
- In-app: go to Settings โ Account โ Delete Profile. This immediately and permanently removes your profile, card progress, SRS history, and all associated data from our servers.
- By email: contact us at sgoldcreatives@gmail.com. We will permanently delete your data within 30 days.
Children's Privacy
ScrollCAT is designed for college-age students and adults preparing for the MCAT. We do not knowingly collect data from children under 13. If you believe a child has used the app, contact us and we will delete their data promptly.
Changes to This Policy
We may update this policy as the app evolves. We'll update the "Last updated" date at the top of this page. Continued use of the app after changes are posted constitutes acceptance of the updated policy.
Questions or Deletion Requests?
We're happy to help. Reach out and we'll respond within a few business days.
sgoldcreatives@gmail.com