What we keep, what we don't.

1. Who we are

Scroll: Personal Finance is operated by SyncLabs ("we", "us", "our"). If you have any questions about this Privacy Policy, please contact us at synclabsupport@gmail.com. We aim to respond to all privacy-related requests within 30 days.

2. What data we collect

We collect the following personal data:

• Email address and name (when you create an account).
• Sign-in method (email, Google, or Apple).
• Your selected country (used to render the correct currency and decide which country-specific lessons to show).
• Your interests, experience level, financial goals, and optional income band.
• Your chosen daily-reminder time.
• Learning progress: lessons viewed, quiz answers, XP, streaks, and bookmarks.
• Purchase history (Scroll Plus subscription and Pro entitlement state).
• Device type and operating system, plus an IP address and user-agent string in our request audit log (used for security and abuse prevention).

We do not collect precise location data, contacts, microphone or camera input, advertising identifiers, bank login credentials, account numbers, transaction history, or any data unrelated to the app's core functionality. Scroll never connects to your bank or any financial account.

3. Why we collect it and our legal basis

We collect this data solely to provide the app's core features: your account, personalised lesson feed (matched to your country, experience level, and goals), progress tracking, daily reminder, and access to purchased content.

The legal basis for processing is performance of a contract (Article 6(1)(b) UK GDPR), we need this data to deliver the service you signed up for. The audit-log IP and user-agent fields are processed under our legitimate interest (Article 6(1)(f)) in keeping the service secure.

4. Third parties we share data with

We share data only with the following third-party services, which are necessary to operate Scroll: Personal Finance:

• Supabase, secure account authentication and Postgres database hosting.
• RevenueCat, manages in-app purchases and subscription state.
• Apple / Google, if you use Sign in with Apple or Google sign-in.
• Render, hosts our backend API server.

We do not sell, rent, or trade your personal data to any third party. We do not use advertising or analytics SDKs that share data for marketing purposes.

5. International data transfers

Some of our third-party service providers (including Supabase, RevenueCat, and Render) operate data centres outside the UK, including in the United States and the European Union. When your data is transferred outside the UK, we ensure it is protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO). For more information on these safeguards, contact us at synclabsupport@gmail.com.

6. How long we keep your data

We retain your personal data for as long as your account is active. If you delete your account or request deletion, we will remove your data within 30 days, except where we are required to retain it for legal or financial compliance reasons (such as purchase records held by Apple, Google, or for tax purposes).

To request deletion, email synclabsupport@gmail.com.

7. Account deletion

You can delete your account at any time directly within the app by going to Profile, then Delete account. Deleting your account permanently removes all your personal data, learning progress, bookmarks, and account information from our systems. This action is irreversible. Active subscriptions are not automatically cancelled by account deletion, you must cancel them through Apple's App Store or Google Play settings.

If you prefer, you can also request deletion by emailing synclabsupport@gmail.com. We will process the request within 30 days.

8. Your rights

No matter where you live, you can exercise the rights below by emailing us. We'll respond within 30 days. Specific rights and the regulator you can complain to depend on your country, details follow.

• Access, request a copy of the data we hold about you.
• Correction, ask us to fix inaccurate data.
• Deletion, ask us to delete your data.
• Restriction, ask us to limit how we use your data.
• Objection, object to certain types of processing.
• Portability, receive your data in a portable format.
• Withdraw consent, at any time, where processing is based on consent.

To exercise any right, email synclabsupport@gmail.com.

8a. United Kingdom (UK GDPR)

If you are a UK resident, you have the rights listed in Section 8 under the UK GDPR. You can also lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8b. European Union & EEA (GDPR)

If you are in the EU or EEA, you have the rights listed in Section 8 under the EU General Data Protection Regulation (Regulation (EU) 2016/679). You can lodge a complaint with the data protection authority in your country of residence, a directory is at edpb.europa.eu.

8c. California (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act gives you the right to know what personal information we collect, to delete it, to correct inaccurate information, and to limit our use of sensitive personal information. You also have the right to opt out of the sale or sharing of your personal information for cross-context behavioural advertising.

We do not sell your personal information and we do not share it for cross-context behavioural advertising. We will not discriminate against you for exercising any of these rights. To exercise them, email synclabsupport@gmail.com.

You can lodge a complaint with the California Privacy Protection Agency (CPPA) at cppa.ca.gov.

8d. India (DPDP Act)

If you are in India, the Digital Personal Data Protection Act, 2023 gives you the right to access, correct, and erase your personal data, and to grievance redressal. You also have the right to nominate another individual to exercise these rights on your behalf in the event of death or incapacity.

To exercise these rights or raise a grievance, email synclabsupport@gmail.com. If you are not satisfied with our response, you can complain to the Data Protection Board of India.

8e. Brazil (LGPD)

If you are in Brazil, the Lei Geral de Proteção de Dados (LGPD) gives you the right to confirmation of processing, access, correction, anonymisation or deletion of unnecessary data, portability, information about who we share data with, and the right to revoke consent.

To exercise these rights, email synclabsupport@gmail.com. You can lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD) at gov.br/anpd.

9. Children

Scroll: Personal Finance is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at synclabsupport@gmail.com and we will delete it promptly.

10. Notifications

If you opt in to the daily reminder, Scroll schedules a local notification on your device at the time you choose. These notifications are scheduled and delivered entirely on your device, no notification content or push tokens are sent to our servers. You can disable the reminder at any time in Profile, then Daily reminder, or by revoking the app's notification permission in your device's system settings.

11. Cookies and local storage

Scroll uses local storage on your device (Apple's Keychain / Android's Encrypted Shared Preferences for sign-in tokens, and on-device SQLite for cached lessons and offline progress for Plus subscribers). This data is stored on your device and may be synced to your account on our servers to enable features such as cross-device progress tracking and streaks.

12. Educational content, not financial advice

The content in Scroll: Personal Finance is for educational and informational purposes only. It does not constitute regulated financial, investment, tax, mortgage, or legal advice, and is not personalised to your individual circumstances. Country-specific information (e.g. UK ISAs, US 401(k)s, mortgage rates, tax bands) reflects the rules in place at the time of writing and may change. Before making any financial decision, consult a qualified, regulated professional in your jurisdiction.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or an in-app notice before the changes take effect. Your continued use of the app after notification constitutes acceptance of the updated policy. The "Last updated" date at the top of this page will always reflect the most recent version.