Privacy Policy

1. Information you provide

Scholarship profile. Depending on the questions you answer, we collect your country of study, date of birth, school and education level, graduation year, grades and grading scale, major, location and address, citizenship, activities, service hours, honors, and languages. We also collect contact details and any personal statement you provide.

Some questions concern household income, financial aid, first-generation status, ethnicity, gender, disability, LGBTQ+ identity, or veteran status. These answers may be sensitive under applicable law. They are intended to help identify relevant opportunities. Use available skip or “prefer not to say” choices if you do not want to provide an optional answer. We will obtain separate consent where required; accepting our Terms is not a substitute for that consent.

If you provide a parent’s or another person’s contact information, you should have permission to do so. Do not enter information about other people that is unnecessary for your use of the service.

Information before registration. You do not have to finish registration for information to reach our servers. While you complete onboarding, the app can synchronize answers and draft edits, question completion states, and progress. This may happen while you are editing, before you press Continue. We use an installation identifier to associate this information with your installation. If you later sign in, that information can be connected to your account.

Account information. When you register or sign in, we process account identifiers, name, email address, email verification information, and sign-in method. Firebase Authentication supports authentication. If you use email and password, Firebase processes your credentials. When you use Apple or Google sign-in, we receive the information and authentication results made available by that provider, not your Apple or Google password.

Files and photos. In the current app, imported documents and your profile image are stored locally on your device. Our profile synchronization sends document categories and whether a document is available; it does not send the document contents or profile image. Text you type into profile fields, including a personal statement, can be synchronized. Your device’s backup settings may separately affect local files. Any future feature that uploads document contents will explain that transfer before it occurs.

Support. If you contact us, we process the message and information you choose to include to investigate and respond. Please do not send passwords, authentication tokens, payment card details, or unnecessary sensitive documents.

2. Information generated through use

We process an installation identifier, account identifiers where applicable, app version, operating system version, device type, language, region and time zone. The installation secret is held in the device’s Keychain; our user registry stores a hash used to recognize the installation. It is not an advertising identifier.

We record onboarding progress and events such as app launch, step views, edits, submissions, skips, and sign-in. The service also keeps profile revisions, including earlier answers, to maintain consistent records and support application requests. Changing an answer does not necessarily remove an earlier stored revision; you may request deletion as described below.

The app stores scholarship interactions, application records, statuses, and reminder preferences locally. When you send an application-related request to our service, we can store the selected scholarship, request status, profile snapshot, applicant details, and related service events. Receipt of a request does not mean an application has been sent to a scholarship provider.

Our service providers also process technical connection information needed to deliver and protect their services, which may include IP addresses and operational logs. Firebase Remote Config and its supporting installation services help deliver app configuration. This does not mean that every Firebase product, such as advertising analytics, is enabled.

The initial version of ScholarFit is free to use and does not offer in-app purchases or subscriptions. We do not collect payment information or process subscription entitlements for this version. If we introduce paid features later, we will update the relevant disclosures before collecting purchase-related information.

The public Support, Privacy Policy, and Terms of Service pages do not use advertising trackers, analytics scripts, or a sign-in form. Your browser and our website hosting provider exchange technical connection information needed to serve and protect these pages. Clicking our email link opens your email service; information you send is processed as a support communication.

3. How we use information

We use information to:

• provide sign-in, preserve progress, and associate your profile with your account;
• find and rank potentially relevant scholarships and explain matches;
• help you review requirements, organize application activity, and manage reminders;
• receive and manage application-related requests and their supporting records;
• deliver app configuration, troubleshoot errors, and protect against misuse;
• respond to support requests and privacy requests; and
• comply with applicable legal obligations.

Matching and competition indicators are estimates based on available information. They do not decide your legal eligibility or whether a provider will award funding. Scholarship providers make their own decisions.

Deadline reminders currently use local notifications on your device. You control notification permission in iOS Settings. Allowing notifications does not sign you up for marketing emails.

The current service does not send your profile to a generative AI model to produce essays or submit applications. If we introduce a materially different use of personal information, we will explain it and obtain any consent required by law before that use.

4. When information is shared

Service providers. We use Google Firebase for authentication and app configuration, Apple and Google for supported sign-in options, Supabase for server-side database services, and infrastructure providers that host and operate our API. They process information needed for their respective functions. Authorized personnel operating ScholarFit may access relevant records for support, maintenance, security, and handling requests; access is not limited to automated systems.

Scholarship providers and links. Opening a provider’s website takes you to a separate service governed by its own terms and privacy practices. Information you enter there is handled by that provider. A ScholarFit application request is not, by itself, permission to send every part of your profile to every provider. If we offer assisted submission, the specific recipient, information to be sent, and required authorization will be presented separately before submission. We will not use general acceptance of this policy as authorization to sign personal declarations for you.

Legal and business circumstances. We may disclose information when legally required, to respond to valid legal process, or where reasonably necessary to protect people, rights, and service security. Information may be transferred in a merger, acquisition, or similar transaction, subject to applicable law and appropriate notice.

We do not sell personal information or share it for cross-context behavioral advertising. The current service does not use your scholarship profile to refer you to lenders or market third-party financial products.

5. Where information is processed

Our API and primary Supabase database are hosted in Singapore. Authentication, app configuration, support communications, and other supporting operations may also be processed in the locations used by our service providers or accessed by the operator of ScholarFit. These operations are not necessarily limited to Singapore. The choice of Hong Kong law in our Terms does not mean that all information is stored in Hong Kong. These locations may have different privacy laws from your home jurisdiction. Where cross-border transfer requirements apply, we will use the protections required by those laws. Contact us for information about the providers and transfer arrangements relevant to your information.

6. Retention

We retain personal information for as long as reasonably needed for the purposes described in this policy, including providing the service, resolving support matters, protecting security, and meeting legal obligations.

Unregistered onboarding information, profile revisions, and activity records are retained only for the purposes described above. You can request deletion as explained below; inactivity or uninstalling the app is not confirmation that server records have been deleted.

Account deletion removes the account and its associated personal information, rather than merely disabling access. When deletion completes, we remove this information from our primary database and other active systems. If completion takes additional time, we will explain the expected processing time and confirm completion.

Copies of deleted information may remain only in restricted backups for up to 90 days after account deletion, unless retention of specific information is required by applicable law. These backup copies are not used for scholarship matching, marketing, or routine service operations. The 90-day period applies to restricted backups; it is not a period for retaining your deleted profile in the primary database.

If specific information must be retained to meet a legal obligation, we limit that retention to what is necessary and restrict its use. We do not treat an account deletion request as permission to continue using deleted profile information for matching or marketing.

7. Your choices and requests

You can review and edit available profile fields in the app, skip optional questions, and control notifications in iOS Settings. You may withdraw consent to optional processing where consent is the relevant basis. Withdrawal does not undo processing already lawfully performed and may limit features that need the information.

Signed-in users can use the app’s account deletion control. This requests removal of the server-side account and associated registry records and deletes the authentication account through the supported deletion flow. If the app reports a failure, retry or contact us; do not assume a failed request completed.

If you used the app without registering, contact support@fitmyscholarship.com to request access to or deletion of records associated with your use. We may ask for limited information needed to locate the records and verify the request. Do not send an installation secret, password, or sign-in token.

Signing out, resetting onboarding, or uninstalling the app does not by itself delete all information already sent to our servers. The initial version has no paid subscription to cancel.

Depending on applicable law, you may have rights to access, correct, delete, or receive a copy of information; withdraw consent; or object to or restrict certain processing. Contact us to exercise these rights. We will respond within the time required by applicable law, explain any lawful exception, and provide information about an available appeal route where required. You may also complain to the relevant privacy regulator. We will not penalize you for exercising a legally protected privacy right.

8. Younger users

ScholarFit is intended for users aged 14 or older. If you are below the age at which you can independently consent to the relevant processing in your jurisdiction, a parent or guardian must provide any legally required consent before you provide personal information. Sensitive information may require additional consent.

We do not knowingly collect information from children under 14. If you believe a child below that age has provided information, contact us so that we can investigate and remove information where appropriate. We may pause processing or request age or consent information when necessary. Please provide only the information reasonably needed for that check.

9. Security

We use measures designed to protect information, including HTTPS connections to our API, authentication controls, and restrictions on database access. Protection also depends on device security, provider configuration, and how access is managed. No system can guarantee complete security. Keep your device and sign-in credentials secure and contact us if you suspect unauthorized access.

10. Changes and contact

We may update this policy as the service changes. We will update its effective date and provide additional notice for material changes, and obtain renewed consent when required. Contact support@fitmyscholarship.com with privacy questions or requests. The person responsible for these requests is MARIERAKSHI LOUNGMOO, the independent developer operating ScholarFit.