Legal
Privacy Policy
Last updated 21 August 2026
Scholarship Alert holds the least it can get away with. This page says exactly what that is, who else touches it, and how to get it back or get rid of it.
The short version
We store what improves your matches and nothing else. We do not sell your personal data, and we never have. Your CV is used to fill in your profile, which you confirm — the raw file is never sent to product analytics. You can export everything or delete your account from inside the app, and deletion means deletion.
What we hold, and why
| What | Why we hold it | Basis |
|---|---|---|
| Email address and name | To create your account, sign you in and send the digests you asked for | Contract |
| Profile: field, level, nationality, languages, funding needs, destinations | To decide eligibility and score fit. Without it there are no personalized matches | Contract |
| CV file, if you upload one | To pre-fill that profile. Optional — you can type everything instead | Consent |
| Saved opportunities, tracker states, milestones, checklists | To keep your applications where you left them | Contract |
| Notification preferences and device push token | To send deadline and match alerts, and to stop when you say stop | Consent |
| Subscription status | To know whether you have Pro. Held as an entitlement, mirrored from the app store | Contract |
| Diagnostics and usage events | To find crashes and see which flows fail. Stripped of CV content | Legitimate interest |
What we deliberately do not collect
No contacts, no photo library, no location, no advertising identifier, no cross-app tracking. The app asks for nothing it cannot justify against a matching decision.
What we never do
- We never sell personal data, and we do not share it with advertisers.
- Your raw CV never reaches product analytics. Analytics sees that a CV was parsed, not what was in it.
- We do not use your data to train third-party models.
- We do not claim to predict whether you will win an award, and we do not build a profile of your likelihood of success.
Who else processes it
Running the service means trusting a small number of processors. Each one sees only what its job requires.
| Processor | What it sees |
|---|---|
| Authentication provider | Your email, name and sign-in credentials. If you sign in with Google or Apple, your password stays with them and never reaches us |
| Subscription provider | An anonymous customer identifier and your purchase status. Card details go to Apple or Google and are never seen by us or by them on our behalf |
| Hosting and database | Your profile, saved items and tracker, encrypted in transit and at rest |
| Push notification service | A device token and the alert text |
| AI provider | See the next section |
Before launch: name each processor and its jurisdiction explicitly. Regulators expect the list, not the categories.
Scout and AI
Scout answers from our own database by default. When it needs a model, it is sent the minimum structured context required to answer — your field, level and eligibility-relevant facts. The raw CV file is never sent.
Pro users can request an explicit live search, which goes to a separate queue and again carries only the minimum structured profile context. Results from a live search stay provisional until they pass the same verification every other record passes.
How long we keep it
Profile, saved items and tracker are kept while your account exists. Diagnostics are kept in aggregate. When you delete your account, your personal records are removed from the live database and fall out of backups on the normal backup rotation.
Your rights, and how to actually use them
Wherever you live, you can do all of this. If you are in the EU, UK or a state with comparable law, these are your rights under that law — access, portability, rectification, erasure, restriction and objection.
- See and correct your data — Profile, in the app. Everything we hold about your background is editable there.
- Export it — ask us and we will send your profile and tracker data in a machine-readable format.
- Delete it — Settings, then Delete account. It is immediate and it is not reversible.
- Stop the notifications — Settings, or your device's notification controls.
- Complain — you may complain to your local data protection authority.
International transfers
Scholarship Alert serves people in most countries, so your data may be processed outside the country you live in. Where that happens we rely on the transfer safeguards our processors provide.
Before launch: state where your servers actually are and which transfer mechanism you rely on.
Children
The app is built for people applying to university-level and early-career programs and is not directed at children under 13. If you believe a child has given us data, tell us and we will remove it.
Changes
If this policy changes in a way that matters, we will say so in the app before the change takes effect rather than quietly editing this page.
Contact
Questions about any of this go to info@scholarshipalert.app, or through support.
Before launch: add your legal entity name and registered address, and set the effective date.