Privacy Policy
Last Updated: April 17, 2026This Privacy Policy explains how Scory collects, uses, and protects your personal information when you use our service. We are committed to transparency and data minimisation.
1. Who We Are
Scory ("we," "our," or "the Service") is an AI-powered academic reflection platform for IB students, operated by an independent developer. Our registered contact email is pyhe.pierce@gmail.com. Payment processing for premium subscriptions is handled by Paddle.com Market Limited ("Paddle"), our Merchant of Record. Paddle collects and processes payment information on our behalf in accordance with PCI-DSS standards.
2. Information We Collect
We collect the following categories of information: • Account Information: Your email address, used for login and subscription management. • Academic Content: IB grades, raw scores, assessment types, topics, and notes you enter voluntarily. • Diary & Reflections: Personal journal entries and study reflections you write in the app. • Usage Data: Anonymous interaction logs (feature usage frequency) to improve platform stability. • Payment Data: Handled exclusively by Paddle. Scory does not store card numbers, bank details, or billing addresses. We only receive a subscription status and tier level from Paddle.
3. How We Use Your Information
We use your data solely to: • Provide and personalise the Scory service (grade tracking, AI analysis, Scory Times newspaper). • Verify subscription status to unlock premium features. • Send transactional emails (e.g., subscription confirmation) via Paddle. • Improve platform stability through anonymised usage analytics.
4. AI Processing (Google Gemini)
Scory uses the Google Gemini API to generate insights, study guides, and The Scory Times newspaper. When you use an AI feature, the relevant text (grades, reflections, diary content) is transmitted to Google's servers for inference. Per Google's current data processing terms, data submitted via the Gemini API is not used to train or improve Google's base AI models without explicit opt-in. Processing occurs under Google's enterprise-grade security and data protection standards.
5. Special Notice: Diary Content & AI
To generate your personalised Scory Times edition, the Google Gemini API reads recent diary entries to identify themes and study patterns. By using the Scory Times feature, you acknowledge that your diary text will be transmitted to Google's servers. If you prefer to keep diary entries private, please refrain from generating the newspaper.
6. Payment Processing (Paddle)
All payments for Pro and Max subscriptions are processed by Paddle.com Market Limited, who acts as the Merchant of Record. Paddle is responsible for: • Collecting and processing payment card and billing information. • Issuing receipts, invoices, and refund processing. • Tax calculation and remittance where applicable. By subscribing, you agree to Paddle's privacy policy (paddle.com/legal/privacy) and terms. Scory only receives your email address and subscription status from Paddle — never your full payment details.
7. Data Storage & Security
Your academic data is stored on Supabase, a SOC 2 Type II compliant cloud database provider. All data is encrypted in transit (TLS) and at rest (AES-256). We do not automatically delete inactive accounts.
8. Children's Privacy
Scory is designed for high school students (typically ages 15–19). If you are under 13, please ensure a parent or guardian has reviewed this policy and consented to your use of the platform. We do not knowingly collect data from children under 13 without verified parental consent.
9. Your Rights
You have the right to: • Access the personal data we hold about you. • Request correction of inaccurate data. • Request deletion of your account and all associated data (see Section 10). • Withdraw consent for AI processing by discontinuing use of AI features. • Lodge a complaint with your local data protection authority.
10. Account & Data Deletion
You can delete your account directly within the Scory app (Settings → Danger Zone → Delete Account). This permanently removes all grades, diary entries, reflections, and profile data. Alternatively, email pyhe.pierce@gmail.com with the subject "Data Deletion Request" from your registered email address. We will process your request within 7 business days.
11. Data Sharing
We do not sell, rent, or trade your personal information. Data is shared only with the following third parties necessary to provide the Service: • Google (Gemini API — AI inference) • Supabase (database hosting) • Paddle (payment processing — Merchant of Record)
12. Cookies
Scory uses a single functional cookie ("guestMode") to support the guest demo experience. No advertising or tracking cookies are used. Paddle may set session cookies during the checkout process in accordance with their own cookie policy.
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify users of material changes by updating the "Last Updated" date below. Continued use of Scory after changes constitutes acceptance of the updated policy.
14. Contact Us
For privacy questions, data access requests, or concerns: Email: pyhe.pierce@gmail.com Response time: within 7 business days.