Privacy Policy

Scholarship OS is operated by Yrysbek Manasov. Questions about this policy or your data: scholarshipossupport@gmail.com.

Accounts are for people aged 13 and older. During the beta, Scholarship OS is for US residents. When you sign up you confirm both. Accepting the Terms of Service is a separate step, described below.

Account. Your email address and password. Your password is handled by our authentication provider, Supabase Auth, which sends account-related email (for example, a sign-in or password-reset message) through Resend, a third-party email-delivery service. Your name, as you enter it at sign-up.

Profile. The fields below. Current grade and state are required to save a profile; the other profile fields are optional. The state selector also includes an outside-the-United-States option; it does not change the US-residency requirement for the beta. Each field and what the app does with it:

• Name (optional): Shown on your profile and dashboard. Your sign-up name fills it in first.
• Current grade (required to save a profile): Compared with the grade levels a scholarship lists.
• Graduation year (optional): Shown as your class year on your profile.
• GPA (sensitive) (optional): Compared with a scholarship's stated minimum GPA, when it lists one.
• State (required to save a profile): Compared with a scholarship's stated location requirement.
• Intended major (optional): Compared with the fields of study a scholarship lists.
• Activities (optional): Compared with activity-based criteria a scholarship states.
• Volunteer hours (optional): Compared with a scholarship's stated service-hours requirement.
• Awards (optional): Counts toward your profile strength. Not used to match scholarships.
• SAT score (sensitive) (optional): Counts toward your profile strength. Not used to match scholarships.
• ACT score (sensitive) (optional): Counts toward your profile strength. Not used to match scholarships.
• Citizenship status (sensitive) (optional): Compared with a scholarship's citizenship requirement, when it states one.
• First-generation status (sensitive) (optional): Compared with a scholarship's first-generation requirement, when it states one.
• Citizenship country (sensitive) (optional): Compared with a scholarship's international eligibility rules, when it states them.
• Residence country (sensitive) (optional): Compared with a scholarship's residence rules, when it states them.
• Study destination country (sensitive) (optional): Compared with a scholarship's study-destination rules, when it states them.

Saved scholarships and tracker. The scholarships you save and the status you give each one (saved, in progress, submitted, won, not selected).

Sign-up confirmations. That you confirmed you are 13 or older and a US resident, and when, as your browser reported it. Signing up does not by itself record acceptance of the Terms of Service.

Terms acceptance. Accepting the current Terms of Service is a separate step, through a dedicated page, not part of signing up. When you accept, we record that you did, which version, and when, by our own server's clock, not your browser's. When Terms acceptance is required, the app presents this step before you continue to protected student features.

Technical data. Session cookies that keep you signed in. Our hosting provider, Vercel, and our database provider, Supabase, each keep their own request and system logs as part of running the service; we have not set up a log drain to send Vercel's logs anywhere else. What those logs contain in detail, and how long each provider actually retains or deletes them on their own systems, is each provider's own setting, not ours, and remains unconfirmed.

Support and correction messages. If you email us, or use a correction link, the message goes directly from your own mail program to scholarshipossupport@gmail.com. It is received and stored in that Gmail mailbox, not in the Scholarship OS application database — the app itself never sees or stores it. Because it is a Gmail address, Google receives, stores, and processes it as our mailbox provider, under Google's own terms and privacy practices, not ours.

Once we have resolved what you wrote to us about, we delete the message from the support mailbox within 90 days, unless we still need it for an ongoing issue or a legal obligation. We do this by hand, not through any automation in the app, so it depends on us actually doing it. Deleting a message from our mailbox does not by itself remove it from Google's own infrastructure or backups — how long Google itself might separately retain a deleted message is Google's setting, not ours, and we do not promise a timeline for that.

To show scholarships and match them to your profile details, to keep your tracker, to keep your account secure, and to answer your support requests. We do not use your information for advertising, and the app has no analytics tools.

A match score estimates how well your profile details fit a scholarship's stated criteria. It does not decide eligibility, and the provider decides it.

Administrators use Anthropic's API to read public scholarship pages and propose structured listing data for review. That request contains the scholarship page's address and text. Student account information and profile fields are not sent to Anthropic, and students do not use AI features.

Supabase stores the database (accounts, profiles, saved scholarships) and handles sign-in. Our Supabase project is on the Free plan, hosted in Oregon, USA (AWS us-west-2). Resend delivers account-related email (sign-in and password-reset messages) on Supabase Auth's behalf. Vercel hosts the website, on the Hobby plan; our production functions run from Washington, D.C., USA (iad1). Google (Gmail) is where support and correction emails sent to scholarshipossupport@gmail.com are received and stored, as described above. These are our account settings and the providers we use, not a statement of every copy or log any of them keeps as part of running their own infrastructure. We do not sell personal information, and we do not send your profile to scholarship providers.

We use session cookies to keep you signed in. They are needed for the app to work. Administrators also have a preview cookie. The app does not use advertising or analytics cookies.

If you choose Light, Dark, or System in Settings, we save that appearance preference in this browser's local storage. It is not saved to your account or sent to our server by the appearance feature. You can change it in Settings or remove it by clearing this site's browser storage. Deleting your account does not clear this browser-only preference.

Scholarship links take you to the provider's website to apply. Scholarship OS does not submit scholarship applications for you. Information you choose to give on another website is handled by that website under its own privacy practices and terms.

You can see and change your own profile. Other students, and the public, cannot: our database enforces this with row-level security, so even a signed-in session can only read its own profile. The app's own interface gives administrators no screen to view student profiles.

That protection is about the app and its other users. It does not describe every way the underlying data could be reached. As the operator, and through Supabase as the company that runs our database, there is access to the database itself (for example, through Supabase's own dashboard, or direct database work) that row-level security does not restrict, separate from anything the app's interface offers. The app has no feature for an administrator to browse student profiles, and we do not use this underlying access to look through profiles as a matter of routine. We, and Supabase as our database provider, can use it when it is genuinely needed — to investigate a support request you send us, to look into a security issue, or to carry out maintenance on the database.

You can edit your profile, remove saved scholarships, and start account deletion from Settings, which opens a separate confirmation page. Administrator accounts are the one exception to self-service deletion — see below. You can also email scholarshipossupport@gmail.com, including to ask us to delete an administrator account.

We keep your account data until you delete your account, including if you stop using it, unless earlier deletion is required by law. Deleting your account removes your profile, your saved scholarships, your record of accepting the Terms of Service, and your sign-in account. Administrator accounts cannot use self-service deletion: the app refuses the request, because an administrator's identifier is kept in the review log (see the next paragraph), and deleting the account out from under that role could leave the log inconsistent. An administrator who wants their account deleted should email scholarshipossupport@gmail.com instead.

Records that identify an administrator (for example, a review decision) are kept, because they are part of the review history. Our current Supabase plan does not include scheduled backups as a plan feature. A rollout migration created a separate copy of scholarship listings and verification records inside the production database. That migration did not copy student profiles, sign-in accounts, or saved scholarships. The operator reports no manual backup, CSV export, or download of student records. How long Supabase or Vercel actually retain or delete data on their own systems, beyond what we can see in our own account dashboards, is still to be confirmed.

Scholarship OS is not for children under 13. If you believe an account belongs to a child under 13, email scholarshipossupport@gmail.com.

When we change this policy, we will update the version date above. The version recorded at your sign-up is kept with your account.