Privacy Policy
Last updated: 29 July 2026 · Version 1.0Scolefy is a school organiser. It holds your timetable, assignments, grades and study sessions. That is personal information about your education, and we treat it that way. This policy explains exactly what we collect, why, who else can see it, and how to get rid of it.
- Who we are
- The short version
- Information we collect
- How we use your information
- Legal bases (EEA/UK)
- Who we share information with
- Where your data is stored
- How long we keep it
- Your rights and choices
- Children and students
- Security
- Regional disclosures
- Links and third-party content
- Changes to this policy
- Contact us
1. Who we are
Scolefy (“Scolefy”, “we”, “us”) is an iOS application published by Zinx Studios Ltd, a company registered in England and Wales under company number 17227307, with its registered office at 167-169 Great Portland Street, London W1W 5PF, United Kingdom.
For the purposes of the UK and EU General Data Protection Regulation, we are the data controller for the information described in this policy.
You can reach us at info@zinxstudios.com.
2. The short version
| Question | Answer |
|---|---|
| Do I need an account? | Yes. Scolefy requires an account so your school data can sync across your devices and survive losing your phone. |
| What do you store? | Your account details, and the school content you create — classes, timetable, assignments, grades, study sessions, and any files you attach. |
| Can you read my grades? | Your content is stored in your own private area of our database and is not shown to other users. Our staff do not routinely access it; see §6. |
| Do you sell my data? | No. We do not sell personal information and we do not share it for cross-context behavioural advertising. |
| Can I delete everything? | Yes — from inside the app, in one step. See §9. |
| Is my data used to train AI? | No. We do not use your content to train machine-learning models. |
3. Information we collect
3.1 Account information
Scolefy requires an account. Depending on how you sign in, we receive:
- Sign in with Apple — a unique Apple identifier, your email address (or Apple’s private relay address if you chose to hide it), and the name you chose to share.
- Sign in with Google — a unique Google identifier, your email address, and your Google account name.
- Email and password — your email address and a password. Passwords are handled by Firebase Authentication and stored only as a salted hash. We never see your password in readable form.
We also store the display name shown on your profile, which you can change or clear at any time.
3.2 The school content you create
This is the substance of the app. When you use Scolefy we store, and sync to your account, the information you enter:
- Classes and subjects, teachers, rooms, colours and icons
- Your timetable, including lesson times, week patterns and term dates
- Assignments and homework: titles, notes, due dates, completion state, checklists and formatted content blocks
- Recurring assignment series and assignment templates
- Grades and marks, grading systems, weightings and calculated averages
- Terms, academic years, and archived school years you have rolled over
- Study sessions: start and end times, durations, timer configurations, and which subjects each session was spent on
- Your in-app settings and preferences, such as notification timings, timer presets, theme and dashboard layout
Grades and academic performance can be sensitive. We store this content so the app works across your devices; we do not analyse it to profile you, and we do not disclose it to anyone other than the service providers listed in §6.
3.3 Files you attach
You can attach material to assignments — photographs taken with the camera, images from your photo library, scanned documents, PDFs, freehand drawings, and web links. These files, together with any filenames and captions you give them, are uploaded to your private storage area and synced to your other devices.
We do not scan, index or inspect the contents of your attachments. Note that photographs may contain whatever you point the camera at, so avoid attaching material you do not want stored in the cloud.
3.4 Subscription and purchase information
Scolefy offers an optional paid subscription. Purchases are processed by Apple through the App Store. We never receive your card number, billing address or any other payment details.
We use RevenueCat to check whether your subscription is active. RevenueCat receives an identifier linked to your Scolefy account, your purchase and renewal history for this app, and basic device and app-version information, so that premium features unlock on every device you sign in to.
3.5 Usage and diagnostic information
We use Firebase Analytics to understand how the app is used in aggregate. This includes automatically collected information such as app opens, session length, app version, device model, operating system version, and coarse region derived from IP address.
During onboarding we also record two optional answers:
- How you heard about Scolefy (for example App Store search, TikTok, Instagram, Reddit, YouTube, a friend or classmate, or a teacher) — you may choose “prefer not to say” or skip the question.
- Your stage of education (middle school, high school or university) — collected purely as a statistic, so we understand who the app serves. It does not change or personalise anything in the app. This may be skipped.
These are stored as coarse categories against a pseudonymous analytics identifier. They are not linked to your grades or your content, and they are never used to target advertising to you.
3.6 Notifications and Live Activities
If you enable notifications, Scolefy schedules reminders for lessons, assignment due dates and study breaks. Most of these are scheduled locally on your device and their contents never leave it.
The study timer can run as a Live Activity on your Lock Screen and Dynamic Island. To keep it advancing while the app is closed, your device issues a push token for that Live Activity, which we store against your account and send to Apple’s Push Notification service together with the timer stage and its remaining time. The token is deleted when the session ends. It cannot be used to identify you outside this app and it carries none of your school content.
3.7 Advertising
Scolefy includes the Google Mobile Ads SDK so that a free, ad-supported tier can be offered. Where advertising is shown, Google may process device identifiers, coarse location derived from IP address, and ad interaction data in order to select and measure ads. Google’s handling of this data is described in the Google Business Data Responsibility notice.
- Advertising is never shown to subscribers with an active Scolefy premium subscription.
- We do not pass your name, email address, school content or grades to any advertising network.
- Apple’s advertising identifier is only used if you grant permission through the App Tracking Transparency prompt. If you decline, ads are non-personalised.
- In the EEA and UK, personalised advertising is shown only where you have consented through the consent prompt presented in the app. You can change your choice at any time from Settings → Privacy in the app.
3.8 Device permissions
Scolefy asks for these permissions only when you use the related feature:
| Permission | Why |
|---|---|
| Camera | To photograph homework, notes and study materials, and to scan documents. |
| Photos (add only) | To save images that Scolefy generates, such as exported timetables, to your photo library. Scolefy does not request read access to your library. |
| Notifications | To deliver lesson, assignment and study reminders. |
You can withdraw any of these at any time in iOS Settings → Scolefy.
3.9 What we do not collect
- We do not collect your precise location.
- We do not read your contacts, calendar, health data, messages or call history.
- We do not request read access to your photo library.
- We do not record audio or video in the background.
- We do not ask for your date of birth, and we do not knowingly build age profiles.
4. How we use your information
- To provide the app — storing your school data and syncing it between your devices, running timers, generating your dashboard and widgets.
- To manage your account — authenticating you, recovering access, and honouring deletion requests.
- To deliver reminders you have asked for.
- To operate subscriptions — unlocking premium features and restoring purchases.
- To improve Scolefy — understanding in aggregate which features are used, where people drop out of onboarding, and which devices and languages to prioritise.
- To keep the service safe — investigating abuse, fraud and technical faults.
- To meet legal obligations and respond to lawful requests.
We do not use your school content for advertising, and we do not use it to train machine-learning or AI models.
5. Legal bases (EEA and UK)
If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under Article 6 GDPR:
| Purpose | Legal basis |
|---|---|
| Providing the app, your account and cloud sync | Performance of a contract (Art. 6(1)(b)) |
| Subscription billing and entitlement checks | Performance of a contract (Art. 6(1)(b)) |
| Reminders and notifications | Consent, given by enabling notifications (Art. 6(1)(a)) |
| Analytics and product improvement | Consent where required, otherwise our legitimate interest in improving the app (Art. 6(1)(a)/(f)) |
| Personalised advertising | Consent (Art. 6(1)(a)) |
| Security, abuse prevention and diagnostics | Legitimate interests (Art. 6(1)(f)) |
| Responding to legal requests | Legal obligation (Art. 6(1)(c)) |
Where we rely on consent, you can withdraw it at any time without affecting processing carried out beforehand.
6. Who we share information with
We do not sell your personal information. We share it only with the service providers that make the app work, and only to the extent they need it. Each acts as our processor under contract, except where noted.
| Provider | What it handles | Notice |
|---|---|---|
| Google / Firebase | Authentication, database (your school content), file storage (attachments), analytics, and the server functions that drive study pushes and account deletion | Firebase privacy |
| Apple | Sign in with Apple, App Store purchases and subscription billing, and push notification delivery. Apple is an independent controller for payment data. | Apple privacy |
| RevenueCat | Subscription status and purchase history for this app | RevenueCat privacy |
| Google AdMob | Serving and measuring advertising in the free tier. Google acts as an independent controller for advertising data. | Google ads notice |
We may also disclose information:
- where required by law, court order or a valid request from a public authority;
- to establish, exercise or defend legal claims, or to protect the rights and safety of our users or the public;
- to a successor entity in connection with a merger, acquisition or sale of assets — in which case we will notify you before your information becomes subject to a different privacy policy.
A small number of our personnel can technically access stored data for troubleshooting, backup and abuse investigation. We access individual accounts only where necessary for those purposes or where you ask us to.
7. Where your data is stored
Scolefy’s database and file storage run on Google Cloud infrastructure in
the European Union — specifically Google’s
eur3 multi-region, which replicates data across data centres in Belgium
and the Netherlands. Your school content does not leave the EU in normal operation.
Some of our providers operate globally and may process limited information — such as account identifiers, analytics events and subscription records — outside the EU and the UK, including in the United States. This applies to Google (analytics and advertising), Apple (sign-in, payments and push notifications) and RevenueCat (subscription status).
Where personal information is transferred out of the UK or the EEA, that transfer is covered by the UK International Data Transfer Addendum, the European Commission’s Standard Contractual Clauses, or an adequacy decision, as applicable. As a UK company we rely on the UK’s adequacy findings for EEA transfers into the United Kingdom.
8. How long we keep it
| Data | Retention |
|---|---|
| Account and school content | Until you delete the item, or delete your account |
| Attachments | Until you delete the attachment or your account |
| Deletion records (tombstones) used to sync removals between devices | Automatically purged on a rolling schedule |
| Live Activity push tokens | Deleted when the study session ends |
| Analytics | Retained by Firebase Analytics for up to 14 months, then aggregated |
| Purchase and subscription records | Kept as long as needed for tax, accounting and dispute-resolution purposes |
When you delete your account, an automated process removes your database records and your stored files. Backups are overwritten on a rolling basis and are fully purged within 30 days.
9. Your rights and choices
Delete your account and everything in it
In the app, open Profile → Delete Account. You will be asked to confirm your identity, then your account, your school content and your uploaded files are deleted. This cannot be undone. Full instructions are on our account deletion page.
Your other rights
Depending on where you live, you may have the right to:
- Access a copy of the personal information we hold about you;
- Correct information that is inaccurate or incomplete;
- Delete your information;
- Port your information to another service in a machine-readable format;
- Object to or restrict certain processing;
- Withdraw consent you have previously given;
- Not be discriminated against for exercising any of these rights.
To exercise any of these, email info@zinxstudios.com from the address on your account. We respond within 30 days. We may ask you to verify your identity before acting, to make sure we are not disclosing your data to somebody else.
Controls inside the app and on your device
- Turn reminders off entirely, or per category, in Scolefy’s notification settings.
- Revoke camera, photos or notification permissions in iOS Settings → Scolefy.
- Limit ad tracking in iOS Settings → Privacy & Security → Tracking.
- Manage or cancel your subscription in iOS Settings → Apple Account → Subscriptions.
Complaints
If you are in the EEA or UK and believe we have handled your information improperly, you may lodge a complaint with your local supervisory authority. We would appreciate the chance to address it first.
10. Children and students
Scolefy is built for students, and we expect many of our users to be minors. We take that seriously.
- Scolefy is not directed to children under 13 and we do not knowingly create accounts for them. If you are under 13, please do not use Scolefy.
- If you are between 13 and the age of digital consent in your country (which is between 13 and 16 in the EEA, and 13 in the UK), you may use Scolefy only with the permission of a parent or guardian.
- We do not build advertising profiles of users we believe to be minors, and we do not sell or share minors’ personal information for cross-context behavioural advertising.
- We ask for the minimum amount of information necessary to run the app, and we do not require a date of birth.
If you are a parent or guardian and believe a child under 13 has created an account, email info@zinxstudios.com and we will delete the account and its contents promptly.
Scolefy is a personal organiser used by individual students. It is not a school information system, and we do not enter into school-district or institutional data processing agreements.
11. Security
- All traffic between the app and our servers is encrypted in transit with TLS.
- Data stored in Firestore and Cloud Storage is encrypted at rest.
- Server-side security rules restrict every document and file to the account that owns it, so one user cannot read another user’s data.
- We never store your password; authentication is delegated to Firebase Authentication, Apple or Google.
- Deleting your account triggers an automated server-side process, so removal does not depend on manual action.
No system is perfectly secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.
12. Regional disclosures
California (CCPA/CPRA)
In the past 12 months we have collected the categories of personal information described in §3: identifiers, commercial information (purchase history), internet or app activity, and the content you choose to create or upload. It is collected for the business purposes in §4 and disclosed to the service providers in §6.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We do not knowingly sell or share the personal information of consumers under 16. You may exercise your rights to know, delete, correct, and opt out by contacting info@zinxstudios.com; we will not discriminate against you for doing so.
United Kingdom
Zinx Studios Ltd is established in the United Kingdom and is the controller for the purposes of the UK GDPR and the Data Protection Act 2018. Our legal bases are set out in §5, and your rights are in §9. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.
European Economic Area
If you are in the EEA, the EU GDPR applies to our processing of your personal data. Our legal bases are set out in §5 and your rights in §9. You can contact us about any of them at info@zinxstudios.com.
You also have the right to lodge a complaint with the data protection supervisory authority in the EEA country where you live or work.
13. Links and third-party content
You can attach web links to assignments. Opening a link takes you to a site we do not control and whose privacy practices are its own. This policy does not cover them.
14. Changes to this policy
We update this policy when the app changes. The version number and date at the top always reflect the current text.
If we make a material change — for example, collecting a new category of information, adding a feature that makes your content visible to other people, or sharing data with a new kind of recipient — we will give you notice in the app before it takes effect, and where the law requires it, ask for your consent. Continuing to use Scolefy after a change takes effect means you accept the updated policy.
15. Contact us
Zinx Studios Ltd
167-169 Great Portland Street, London W1W 5PF
United Kingdom
Privacy enquiries and data requests: info@zinxstudios.com
We aim to respond within 5 working days, and always within 30 days.