PrepScroll ("we," "our," or "us") is committed to protecting your privacy and the privacy of the children and students who use our application. This Privacy Policy describes how PrepScroll collects, uses, and safeguards information when you use our iOS application (the "App"). Please read this policy carefully. By downloading or using PrepScroll, you agree to the practices described herein.
1. Overview of PrepScroll
PrepScroll is an educational iOS application designed to help students build better study habits. The App uses Apple's Family Controls, ManagedSettings, and DeviceActivity frameworks to temporarily restrict access to distracting applications (such as social media and entertainment apps) until the user completes a set of SAT or ACT practice questions. The goal is to transform idle screen time into productive academic preparation.
2. Information We Do NOT Collect
We want to be explicit and unambiguous about what PrepScroll does not access or collect:
- No message or communication content. PrepScroll never reads, accesses, or stores the content of your text messages, emails, social media posts, direct messages, or any other personal communications.
- No browser history. PrepScroll does not access your Safari browsing history, search queries, or any web content you view.
- No social media feeds or content. The App does not access the content of any social media platform. It only enforces time-based access restrictions at the system level through Apple's frameworks.
- No biometric data. PrepScroll does not use your device's camera, Face ID data, fingerprint data, or any other biometric information. No facial recognition or body data of any kind is collected or processed.
- No location data. We do not request or access your precise or approximate location.
- No contact information. We do not access your contacts, address book, or any information about the people you communicate with.
- No advertising identifiers. PrepScroll does not use advertising identifiers (IDFA) and does not engage in behavioral advertising or ad tracking of any kind.
3. How App Blocking Works — What We Do and Do Not See
PrepScroll uses Apple's DeviceActivity and ManagedSettings frameworks to enforce app restrictions. This system-level integration is architecturally designed by Apple to preserve user privacy. Specifically:
- PrepScroll can instruct the operating system to block or allow access to app categories or specific apps you have selected to restrict.
- PrepScroll receives aggregate, anonymized usage signals (e.g., "time spent in social media category today") solely for the purpose of enforcing the blocking rules you configure.
- PrepScroll does not receive, process, or store the specific names of all apps installed on your device beyond those you explicitly select for restriction.
- All app restriction enforcement happens on-device. Apple's frameworks are designed such that the content of the blocked applications is never accessible to PrepScroll.
4. Information We Do Collect
To provide the core functionality of PrepScroll, we collect the following limited categories of information:
- Practice Question Performance Data. The App records your responses to SAT/ACT practice questions, including: questions answered, accuracy rate, subject area (e.g., Math, Reading, Science), difficulty level (Easy, Medium, Hard), and session timestamps. This data is used solely to personalize your question recommendations and display your progress dashboard.
- App Usage & Study Session Data. We track the duration of study sessions within PrepScroll (time spent answering questions) and the amount of screen time earned. This data is used to calculate streaks, score boosts, and earned screen-time credits.
- App Restriction Preferences. The list of app categories or applications you have chosen to restrict is stored to enforce your preferences across sessions.
- Account Information (if applicable). If you create an account, we may collect an email address and display name. Passwords are never stored in plain text and are managed through industry-standard hashing practices.
- Subscription and Purchase Data. If you purchase a subscription, we store your subscription status (active, expired, or trial), subscription tier, and renewal or expiry date. Payment transactions are processed entirely by Apple's In-App Purchase system; PrepScroll does not receive, store, or process your credit card, debit card, or any other payment instrument details.
5. How We Store Your Data
Your performance and study data is stored in a secured Supabase database hosted on infrastructure with encryption at rest and in transit (TLS 1.2+). Access to this database is restricted to authorized PrepScroll systems only. Where feasible, data may also be cached locally on your device using Apple's standard secure storage (Keychain and app-sandboxed storage).
We retain your data for as long as your account is active or as needed to provide you with the service. You may request deletion of your data at any time by contacting us at prepscrollapp@gmail.com.
Your data is never sold, rented, licensed, or shared with third parties for commercial or advertising purposes.
6. Children's Privacy and Parental Controls (COPPA Compliance)
PrepScroll takes the privacy of children extremely seriously and complies with the Children's Online Privacy Protection Act (COPPA) and applicable state laws.
- Users under 13: For users identified as under the age of 13, PrepScroll leverages Apple's Family Sharing and the Family Controls framework, which requires Guardian (parent or legal guardian) approval before the App can be installed and configured. We do not knowingly collect personal information from children under 13 without verifiable parental consent facilitated through this Apple-managed process.
- Guardian visibility: A parent or guardian who has set up Family Sharing retains oversight and control over the child's use of PrepScroll through Apple's standard parental control mechanisms.
- If we learn that we have inadvertently collected personal data from a child under 13 without proper consent, we will delete that information promptly. Please contact us at prepscrollapp@gmail.com if you have concerns.
7. Age Assurance (Texas SB 2420 Compliance)
In compliance with Texas Senate Bill 2420 and emerging age-assurance requirements, PrepScroll uses Apple's Declared Age Range API to determine the appropriate experience for each user. This system allows the App to provide age-appropriate content and features without collecting, storing, or processing actual birth dates or government-issued identification. The age range determination is handled entirely by Apple's platform and is not transmitted to or stored by PrepScroll.
8. Third-Party Services
PrepScroll uses the following third-party infrastructure providers solely for app functionality:
- Supabase — backend database and authentication infrastructure. Supabase processes data in accordance with its own privacy policy and is GDPR-compliant.
- Apple Inc. — App distribution (App Store), In-App Purchase payment processing, Family Controls framework, Declared Age Range API, and on-device processing. When you purchase a subscription, Apple acts as the merchant of record and processes all payment data in accordance with Apple's Privacy Policy.
We do not integrate any third-party advertising SDKs, analytics platforms (e.g., Firebase Analytics, Mixpanel), or social media tracking pixels.
9. Data Security
We implement commercially reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS/TLS), encrypted storage, and restricted access controls on our backend systems. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
10. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights with respect to your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request that we correct inaccurate or incomplete data.
- Deletion: Request that we delete your personal data ("right to be forgotten").
- Portability: Request that your data be provided in a portable format.
- Withdrawal of Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at prepscrollapp@gmail.com. We will respond within 30 days.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, notify users within the App. Your continued use of PrepScroll after any changes constitutes your acceptance of the revised policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
PrepScroll
Email: prepscrollapp@gmail.com
We are committed to resolving any privacy concerns promptly and transparently.