This Privacy Policy (“Policy”) describes how Scalar Software (“we”, “us”, “our”, or the “Company”), the data controller of your personal information, collects, uses, processes, stores, and protects your data when you access or use any application, website, tool, or software product we develop, publish, or operate (individually and collectively, the “Applications” or the “Services”) across iOS, Android, desktop, and web platforms. This Policy applies across our Applications; where a specific Application collects data not described here, we will provide additional notice within that Application.
By installing, registering an account with, or otherwise using any Application, you acknowledge that you have read and understood this Policy. If you do not agree with the practices described here, you must not use the Applications.
Where an Application allows you to sign in via a third-party provider, we receive only the data you explicitly authorise during that provider’s OAuth flow. Depending on the Application, this may include:
We never request, observe, or store your primary password for Discord, Google, GitHub, or any other third-party platform. All authentication takes place directly on that provider’s own secure domains.
When you use an Application, we and our infrastructure providers automatically collect limited technical information, including:
Certain free-tier Applications are supported by advertising served through third-party ad networks (such as Google AdMob). Where this applies, the relevant SDK may collect device identifiers, coarse location, and, on iOS, your advertising identifier (IDFA) where you have granted permission via Apple’s App Tracking Transparency prompt, in order to serve and measure advertisements. Section 4 explains how this data is kept separate from your account and platform data.
Where an Application offers a paid subscription or purchase, payment is handled directly by the Apple App Store, Google Play Store, or Stripe. We do not receive or store your full card number or other sensitive payment credentials; we may receive limited transaction information (such as subscription status and renewal dates) needed to provide the Paid Service.
We use the data described above solely to:
We do not use data collected via a third-party sign-in (Discord, Google, or GitHub) to inform or personalise advertising, and we do not use advertising identifiers to access or infer your account or platform data.
We use a small number of vetted infrastructure providers to operate the Services, each acting as a data processor on our behalf under appropriate contractual protections:
These providers are contractually restricted from using your data for any purpose other than providing services to us, and are prohibited from selling or independently processing your data for their own commercial purposes.
Where an Application displays advertising, we maintain a strict separation between advertising data and your account or platform data:
You can manage or reset your advertising identifier and tracking permissions at any time from your device’s system settings (for example, Settings > Privacy & Security > Tracking on iOS).
We place the following restrictions on our own data practices:
We apply reasonable technical and organisational measures to protect your data, including encryption of data in transit (TLS) and at rest, restricted access controls on our infrastructure, and secure on-device storage (such as the iOS Keychain or Android Keystore) for authentication tokens where applicable. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
We retain your account and application data for as long as your account remains active, or as needed to provide the Services. Where an Application caches data from a connected third-party account, that cache is refreshed or discarded on an ongoing basis and is not retained beyond what is needed to keep the Application functional. If your account is inactive for an extended period, or if your connected third-party authorisation is revoked, we may automatically delete the associated cached data. Diagnostic and log data is retained only as long as reasonably necessary for debugging and security purposes, after which it is deleted or anonymised.
Beyond the infrastructure providers described in Section 3, we may share your information:
We do not otherwise share your personal data with third parties for their own independent purposes.
Depending on your location, you may have rights to access, correct, restrict, or delete your personal data, or to receive a copy of it in a portable format. You can exercise these rights at any time by:
Upon a verified deletion request, we will permanently delete your account data, cached application data, and associated identifiers from our active systems, and any residual data in encrypted backups will be overwritten within the ordinary course of our backup lifecycle, and in any event no later than thirty (30) days. Where you are located in the UK or EEA, you also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) or your local data protection authority.
Our Services are intended for users who are at least thirteen (13) years of age. We do not knowingly collect personal data from children under 13. Where an Application serves advertising, ad requests are configured to comply with applicable child- and teen-directed advertising rules for users identified as under the relevant local age threshold. If we become aware that we have collected personal data from a child under 13 without appropriate consent, we will take steps to delete that data promptly.
Scalar Software is based in the United Kingdom. Where the UK GDPR or EU GDPR applies to you, we process your personal data under the following legal bases:
Our websites and web applications may use cookies or similar local storage technologies necessary to keep you signed in and to remember your preferences. Where an Application serves advertising on the web, third-party ad networks may also set cookies to serve and measure advertisements, subject to the separations described in Section 4.
We may update this Policy from time to time. We will update the “Last Updated” date above when we do, and, where changes are material, we will provide additional notice within the relevant Application. Your continued use of the Services after a revised Policy is posted constitutes your acceptance of the changes.
If you have questions, requests, or complaints regarding this Policy or how we handle your data, please contact us at hello@scalarsoftware.co.uk.