SCORELAB

Privacy Policy

Last updated: July 8, 2026

1. Who we are

ScoreLab is an SAT and ACT preparation app for iOS, operated by Evan Bourkoff (United States). Questions about this policy or your data: ejbourkoff@gmail.com.

2. What ScoreLab does

ScoreLab helps students prepare for the SAT and ACT with practice questions, lessons, progress tracking, an estimated score projection, and an optional AI coach. Practice content in ScoreLab is original and AI-authored; ScoreLab is not affiliated with, or endorsed by, the College Board or ACT, Inc.

3. Information we collect

What we do NOT collect

No advertising or cross-app tracking SDKs
No third-party analytics SDKs
No location data
No contacts, photos, or files from your device
No credit card numbers (payments are handled entirely by Apple)

Account information

If you create an account, we collect your name (optional), email address, and a unique account identifier. Sign-in is provided through Sign in with Apple, Google Sign-In, or email and password. Email accounts are managed by Supabase; passwords are hashed and are never visible to us in plain text. You can also use ScoreLab without an account.

Study activity

Your practice results, answer history, streaks, goals, path progress, and score projections are stored on your device. They are not uploaded to our servers today. Deleting the app (or using "Reset all data" in Profile) removes them.

AI coaching content

When you use the AI coach ("Coach" chat, "Coach me on this," lesson deep-dives, or the daily plan note), the content needed to answer — your message, the practice question involved, and a summary of your study stats (accuracy by subject, target score, days until test) — is sent over an encrypted connection to our server, which forwards it to Anthropic's Claude API and returns the response. We do not store your coaching messages after the response is delivered.

Usage counters and device identifier

To enforce daily AI usage limits fairly, our server stores a daily counter keyed to your subscription transaction identifier (for Pro users) or your device's identifier-for-vendor (for free users). This identifier does not contain your name or email.

Purchases

ScoreLab Pro subscriptions are processed by Apple. We receive subscription status (an Apple-signed transaction confirming an active subscription), never your payment details.

4. How we use information

Provide the service: sign-in, AI coaching, subscription entitlements, usage limits
Send account emails: verification and password-reset messages
Protect the service: prevent abuse of AI usage limits and unauthorized access
Comply with law

We do not sell or share your personal information for advertising. We do not send marketing email.

5. AI disclosure

Model: AI coaching is powered by Claude, provided by Anthropic, via Anthropic's API.
No training on your data: under Anthropic's API terms, content sent through the API is not used to train Anthropic's models. We do not use your data to train models either.
Accuracy: AI output is probabilistic and can be wrong. Coaching explanations, study plans, and score projections are educational aids and estimates — not guarantees.
Practice content: questions and lessons are original, AI-authored material in the style of the SAT/ACT — not official test content.

6. Service providers

Provider	Purpose	Privacy policy
Anthropic	AI coaching (Claude API)	anthropic.com/legal/privacy
Supabase	Account authentication	supabase.com/privacy
Railway	Server hosting	railway.com/legal/privacy
Apple	Sign in with Apple, App Store payments	apple.com/legal/privacy
Google	Google Sign-In	policies.google.com/privacy
Resend	Delivery of verification / reset emails	resend.com/legal/privacy-policy

Lessons may link to YouTube for study videos. Those links open outside the app, and Google's terms and privacy policy apply there.

7. Data retention

Study data on your device: until you delete the app or reset your data
AI coaching messages: not stored after the response is delivered
AI usage counters: daily counts keyed to an opaque identifier
Account data: until you delete your account (see Your rights)
Server logs: retained briefly by our hosting provider for security and debugging

8. Your rights

You can access, correct, or delete your personal information. Email ejbourkoff@gmail.com from your account email and we will act within 30 days, including full account deletion.

EEA/UK (GDPR): we process account data to perform our contract with you, and usage data for our legitimate interest in operating the service securely. You also have rights to restriction, portability, objection, and to complain to your supervisory authority.
California (CCPA/CPRA): you have the right to know, delete, and correct. ScoreLab does not sell or share personal information as defined by the CCPA.

9. International transfers

Our servers are located in the United States. If you use ScoreLab from outside the US, your information is processed in the US.

10. Children

ScoreLab is designed for students preparing for college admission tests and is intended for users 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it. For users under 18, a parent or guardian should review this policy.

11. Security

All network traffic uses TLS (HTTPS)
Passwords are hashed by Supabase; we never see or store them in plain text
AI API keys live on our servers, never in the app
We store no payment card data

12. Changes

We will post any material changes here with a new "Last updated" date. Significant changes will also be highlighted in the app.

13. Contact

ejbourkoff@gmail.com — we respond within 30 days.