Privacy Policy

1. Overview

Scoravo respects your privacy. This policy explains what personal information we collect, how we use it, and your rights regarding your data. By using Scoravo, you agree to the practices described in this policy.

2. Information We Collect

Account Information

• Email address (required to create an account)
• Full name (optional, used for personalised greetings)
• Password (stored as an encrypted hash — we never see your plain-text password)
• Google account details if you sign in with Google

Usage Data

• Tests taken, scores, band estimates, and time spent on each test
• Your written responses submitted during writing practice
• Number of tests used per month (for plan limit enforcement)

Payment Information

• Payment processing is handled entirely by Stripe
• We do not store credit card numbers, bank account details, or any sensitive financial data
• We receive only a confirmation of successful payment and your plan tier

Technical Information

• Browser type and device type (collected automatically by hosting infrastructure)
• IP address (used for security purposes, not stored long-term)

3. How We Use Your Information

• To provide and personalise the Scoravo service (dashboard, scores, history)
• To enforce plan limits and process subscription payments
• To send transactional emails (password reset, payment confirmation)
• To improve our practice content and scoring system
• We do not sell your personal data to third parties
• We do not use your data for advertising purposes

4. Data Storage and Security

Your data is stored securely using Supabase, a trusted cloud database provider. Data is stored on servers in Singapore (Southeast Asia region). Supabase applies industry-standard encryption in transit (TLS) and at rest.

Your written test responses are stored in our database to power your history and progress tracking. You can request deletion of your data at any time (see Section 6).

5. Third-Party Services

6. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — update your name or email in account settings
• Deletion — request that we delete your account and all associated data
• Portability — request your test history in a readable format

To exercise any of these rights, email support@scoravo.com with the subject "Data Request". We will respond within 30 days.

7. Data Retention

• Your account data is kept as long as your account is active
• Test results and writing responses are retained to power your history dashboard
• If you delete your account, all personal data is removed within 30 days
• Payment records may be retained as required by applicable tax regulations

8. Cookies

Scoravo uses only essential cookies required for authentication (keeping you logged in). We do not use advertising cookies or third-party tracking cookies. No cookie consent banner is shown because we only use strictly necessary cookies.

9. Children's Privacy

Scoravo is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has created an account, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the dashboard. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

For any privacy-related questions or requests, contact us at support@scoravo.com.