Privacy policy

What we collect

Scholexis collects the information you provide when creating an account (name, email address) and the academic data you enter while using the app (courses, assignments, tasks, events, and energy check-ins). Accommodation data you enter is stored privately and never shared with instructors, institutions, or third parties without your explicit consent.

How we use it

Your data is used to provide the Scholexis service to you and for no other purpose. We do not sell your data, share it with advertisers, or use it to build advertising or behavioral profiles. The operational subprocessors listed below process data only as needed to run the service. Energy and accommodation data is user-private by default — you control any sharing.

Ready-to-Resume breadcrumbs

If you turn on Scholexis breadcrumbs in your profile, the app can remember the current route and the field you were working in when you leave an assignment or task page. It does not read other tabs, Google Docs, browser history, or cursor position outside Scholexis. The breadcrumb record stays inside your account and is marked with its Scholexis source.

Implementation intention resurfacing

When Scholexis surfaces an implementation intention, it uses the task text you saved, along with the task's due date and status. It does not read location, calendar, or other passive context for these cues yet.

Data storage and subprocessors

Your data is stored in a secure PostgreSQL database hosted by Neon. We use industry-standard encryption in transit (TLS) and at rest. Account passwords are never stored — authentication is handled via secure session tokens managed by NextAuth.

The operational subprocessors that process your data in the course of running Scholexis:

• Neon — PostgreSQL database hosting (all stored data).
• Brevo — transactional email delivery. Currently used to send account-verification and password-reset emails to you, and to forward beta inquiries submitted through the /beta page to the Scholexis team (your name, email, grade level, and what you wrote in the inquiry form). The integration is configured to deliver any transactional email Scholexis dispatches; if and when features add emails to other recipients (e.g. access-grant notifications), this disclosure will be updated before the feature ships.
• NextAuth — session token management (server-side, no third-party sharing).

If we add or change subprocessors, this list will be updated and the “Last updated” date above will reflect the change.

Your rights

You can export or delete your data at any time by contacting us at privacy@scholexis.app. We will fulfill data deletion requests within 30 days.

Contact

Questions about this policy? Email privacy@scholexis.app.