Does AP Scholr sell your personal data?

No. AP Scholr does not sell personal information and has never sold it. We also do not share it for cross-context behavioural advertising as California defines that term.

Does AP Scholr store your tutor messages or essays?

No. Tutor conversations, free-response submissions and scanned images are forwarded to the AI provider to produce a response and are not retained on our servers afterward.

Can you delete your AP Scholr account and data?

Yes. Email apscholrnow@gmail.com and we will delete your account. Deletion cascades to your progress, scores, petitions, usage counters, affiliate clicks and quota overrides, and we remove the AI call logs that reference your user ID.

Yes. Every feature is free with no paywall, no trial and no credit card. The service is funded by advertising rather than by charging students.

Privacy Policy | AP Scholr

The short version

We never sell your data: No sale, no sharing for cross-context advertising, and no data broker has ever received it.
Your essays are not stored: Tutor messages, free-response answers and scanned images are used to produce your result and then discarded.
Everything is deletable: One email to apscholrnow@gmail.com removes your account and everything attached to it.
Ads pay for it, and you choose: Advertising keeps the service free. Whether ads are personalised is your call, changeable at any time.

1What we collect in your account#

Account basics: Email and, optionally, your name. If you sign in with Google we receive your Google account email and any public profile name.
Email verification status: Whether your email has been confirmed.
Signup preferences: Whether you opted into study-reminder emails, and how you signed up (email or Google).
Study activity: Which courses you have added, which units you have worked on, and which activities you have completed: notes, practice, quizzes, exams, writing, flashcards.
Scores: Quiz, practice and exam scores you submit, plus the grades the AI returns on your written responses.
Referral attribution: If you arrived through a referral link we save the referrer’s code on your first authenticated visit so the referrer gets credit.

2What we collect when you generate content#

AI tutor messages: The questions and conversation you send to the tutor. These are forwarded to Google Gemini, or to OpenAI as a fallback, to generate replies. We do not retain tutor message history on our servers after the response is delivered.
Writing submissions: The prompts and free-response answers you submit for AI grading. These are sent for evaluation and are not stored verbatim afterward.
Notes, image and scan inputs: If you use photo scan, the image is sent to the vision model to extract text and is not retained on our servers after processing.
AI usage counter: A daily count of how many generations you trigger, so we can enforce the per-day quota that protects the budget.
AI call logs: For each AI call we record the model used, the input and output token counts, the endpoint, and the course and unit you were studying, so we can see where the money is going. These logs are tied to your user ID so we can spot abuse. They are not shared with anyone.

3What we collect for quota and access#

Bonus access codes: If you redeem a code we sent you, we store which code you used and the new daily limit it grants.
Petitions for more credits: If you submit a petition we store the reason you wrote, the timestamp, your IP address, and after review which admin approved it and what limit was granted. We use this to grant credits and to detect abuse.
Affiliate clicks: When you tap a book recommendation we record the course, the link variant, the product ID, and if you are signed in your user ID. This tells us which recommendations are actually useful.

4What we collect automatically#

Device and browser signals: IP address, user agent and timestamps, used for rate limiting, abuse detection and security logging.
Admin audit log: If you are an admin, every admin-panel access is logged for security review: page, IP, status and duration. Regular users have no audit log.

5What stays on your device and never reaches us#

Some data never leaves your browser. We use localStorage for:

Your My Courses list.
Your streak counter and last-active date.
Your theme preference, light or dark.
An onboarding flag, so the onboarding flow is not shown twice.
Your ad-consent choice.
The keys of practice problems already shown to you, so they are not repeated.
A short-lived pending opt-in flag during signup, so the email-reminder choice survives the OAuth round trip.
A referral code, kept until your first authenticated visit and then removed.
Your SAT bank progress: which questions you answered, which you flagged, and your accuracy stats.

6How we use it#

To show your dashboard, streaks and per-unit progress.
To generate study content and grade your written responses.
To enforce daily quotas and rate limits so the service stays up for everyone.
To detect abuse, such as brute-force code attempts or quota gaming.
To improve the platform based on aggregate usage patterns.
To track AI provider costs so the service stays sustainable.

We do not sell your personal data. We never have, and we do not share it for cross-context behavioural advertising as California defines that term.

7Why we are allowed to process it#

If you are in the UK, EEA or Switzerland, our lawful bases under the UK GDPR and EU GDPR are:

Contract: Running your account, saving your progress and generating the study content you asked for.
Legitimate interests: Rate limiting, abuse detection, security logging and understanding aggregate usage, balanced against your rights.
Consent: Personalised advertising and study-reminder emails. You can withdraw either at any time without affecting anything else.
Legal obligation: Retaining records where the law requires it.

8Where it is stored and who processes it#

Account data, progress, AI usage logs, affiliate clicks and petitions live in Supabase (Postgres) hosted in the United States. AI calls go to Google’s Gemini API and, when a fallback is needed, to OpenAI. Both providers process your prompts under their own terms and are contractually prohibited from training on your data without consent.

If you are outside the United States, using AP Scholr means your data is transferred to and processed in the United States. We rely on the standard contractual clauses our providers offer for those transfers.

We do not share your data with any third party beyond what is required to run the service. Advertising and analytics use the separate services described below.

9How long we keep it#

Account and progress data: For as long as your account exists. Deleted on request, and deletion is permanent.
Tutor messages, essays and scanned images: Not retained after the response is delivered.
AI call logs and usage counters: Kept while the account is active for cost tracking and abuse detection, and removed when the account is deleted.
Security and rate-limit logs: Kept for a short operational window and then discarded.

10How we protect it#

All traffic is served over HTTPS, with HSTS and a strict Content Security Policy.
Database access uses row-level security. The cache and admin tables are reachable only by the service role, never by a browser.
Admin access is logged and audited on every request.
Rate limits and quotas apply to every generation endpoint.

No service can promise perfect security. If you believe your account has been accessed by someone else, email apscholrnow@gmail.com and we will act on it.

11Advertising and cookies#

AP Scholr displays Google AdSense ads to keep the service free. Google and its partners may use cookies, including the DoubleClick DART cookie, to serve ads based on your prior visits to this and other sites, and to measure ad performance and detect invalid clicks.

Choose your preference any time on the Ads and cookies page. You can also opt out of personalised ads through Google Ads Settings or aboutads.info.

Visitors in the EEA, UK and Switzerland are served non-personalised ads by default until consent is given. Google explains how it handles partner data at policies.google.com/technologies/partner-sites.

12Analytics#

We use Google Analytics and Vercel Analytics to understand aggregate usage, such as which pages are popular and how long sessions last. These tools set their own cookies. No personally identifying information is sold to anyone.

13Students under 13#

AP Scholr is built for high-school students preparing for AP exams and is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has given us information, email apscholrnow@gmail.com and we will delete it promptly.

If your school has asked students to use AP Scholr, the school should confirm it is satisfied with this policy before directing students to sign up.

14Your rights and how to use them#

Wherever you live, you can ask us to do all of the following by emailing apscholrnow@gmail.com from the address on your account. We do not charge for this and we do not treat you differently for asking.

Get a copy: We will send you everything we hold that is tied to your account.
Correct it: Tell us what is wrong and we will fix it.
Delete it: Deletion removes your account from Supabase Auth, which cascades to your progress, petitions, AI usage counters, affiliate clicks and quota overrides. AI call logs referencing your user ID are removed too.
Take it elsewhere: We will provide your data in a portable, machine-readable format.
Object or restrict: You can object to processing based on our legitimate interests, or ask us to restrict it.
Withdraw consent: Change your advertising choice on the Ads and cookies page, or unsubscribe from reminder emails from any of them.
Withdraw a petition: If you submitted a credit petition and want it removed before review, email us from the address you submitted with.

You can also clear local data yourself: clear localStorage for apscholr.com in your browser settings and your streak, selected courses, SAT progress, theme and ad-consent choice are wiped from that device. Your next signed-in visit syncs fresh state.

If you are in the UK or EEA and think we have handled your data badly, you can complain to your national data protection authority. We would rather you told us first so we can fix it.

15Changes to this policy#

When this policy changes we update the date at the top of the page. If a change materially affects what we collect or how we use it, we will say so in the product rather than relying on you to re-read this page.

16Contact#

AP Scholr is operated by Aarush Herle. Privacy questions, data requests and anything else on this page go to apscholrnow@gmail.com. We usually reply within a day or two.

17Quick answers#

Does AP Scholr sell your personal data?: No. AP Scholr does not sell personal information and has never sold it. We also do not share it for cross-context behavioural advertising as California defines that term.
Does AP Scholr store your tutor messages or essays?: No. Tutor conversations, free-response submissions and scanned images are forwarded to the AI provider to produce a response and are not retained on our servers afterward.
Can you delete your AP Scholr account and data?: Yes. Email apscholrnow@gmail.com and we will delete your account. Deletion cascades to your progress, scores, petitions, usage counters, affiliate clicks and quota overrides, and we remove the AI call logs that reference your user ID.
Is AP Scholr free?: Yes. Every feature is free with no paywall, no trial and no credit card. The service is funded by advertising rather than by charging students.