Privacy Policy
Last updated: 2 October 2026
1. Data processed
Depending on your role and the features you use, Scolaris processes account and contact details, school identifiers, education records, grades, attendance, payments, messages and attachments. Messaging keeps message text and attached files in conversations. When used, Oracle may receive your prompts, transcripts, photos and documents; attached photos and documents are sent as provided. Dictation sends audio to an external speech recognition service for transcription, after which the text is used as an Oracle request. A direct call sends audio in real time to an external voice service, which hears the voice and provides spoken output; confidential mode transcribes audio on Scolaris infrastructure before sending text and uses an external service for speech synthesis. Tokens needed for push notifications are stored. Crash and diagnostic reports may contain technical data; application errors are also recorded in Scolaris’s own error log. Do not enter sensitive data that is not needed.
2. Purposes and third-party services
Data is used to manage accounts, education, communications, payments, notifications, support and security. If you grant Oracle consent, which you can withdraw in settings, requests are sent to third-party artificial intelligence providers; identifiers are masked where processing allows, but attached files are sent as provided. Voice, transcription, file storage/hosting, email delivery, mobile operating systems notifications and error monitoring use specialist providers. Their processing is subject to their own terms. The code does not let us guarantee that models do not train their systems on submitted data.
3. School accounts and minors
Schools create and administer student accounts, including accounts for minors. The school is responsible for creating these accounts, establishing a lawful basis and informing students and their representatives. Scolaris provides management tools and processes data according to the school’s instructions and settings. Access controls separate each school’s accounts and data from those of other schools.
4. Retention, backups and deletion
Account data remains linked to the account while it is active. Messaging content and attachments remain in conversations until removed under the school’s rules. Files are kept in the storage used by the feature that receives them. Local database backups run daily and local archives are kept for seven days. An off-site copy is encrypted before transfer when remote storage is configured; local rotation is defined in code, while remote retention depends on storage configuration. This script does not encrypt local backups. When an account deletion request is submitted, access to the account is cut off immediately. Deletion or anonymisation takes place after 30 days; the person can cancel before then by signing in again or from the deletion screen. In the mobile app, open Settings → Delete my account; on the web, open Settings → Profile and then the account deletion section. School records that the school must retain may remain without an account identity. A school closure request provides 30 days before closure processing and deletion of the school’s data. A leadership handover changes the role only after the selected person accepts; it is not a deletion.
5. Rights and choices
Subject to applicable law, you may request access, correction, portability, restriction or erasure of your data. You may withdraw Oracle consent at any time; this stops new submissions but does not automatically delete conversations already stored. Send requests to support@scolarisapp.com. Data needed for the school’s legal obligations may be retained.
6. Cookies and local storage
The website and app use storage needed for sign-in, sessions and preferences. Data stored locally depends on the features enabled and the device. This policy does not claim that no technical identifiers are used.
7. Security and international transfers
Scolaris applies access controls and security measures appropriate to its features. Some processing or providers may be located outside the European Economic Area; where this occurs, transfers are subject to safeguards required by applicable law, such as standard contractual clauses where required. Application code alone does not support a claim that all data is encrypted at rest or that every connection uses TLS 1.3.
8. Contact
For questions or requests about your personal data, email support@scolarisapp.com.
9. Controller and updates
For student accounts, the school that creates the account determines the purposes and means of school data processing and is responsible for it. Scolaris provides the platform and services described above. This policy is dated 2 October 2026 and may be updated; the displayed date identifies its latest revision.