Data Protection & Security

Traffic between your device and ScholarLog is encrypted in transit (HTTPS/TLS). Passwords are never stored in plain text. They're hashed before being saved.

You can add extra protection to your account:

• Biometric app lock (Face ID / fingerprint) for this device.
• Passkey sign-in, backed by your device's secure hardware.
• Google Sign-In, if you prefer not to manage a separate password.

To work without a connection, ScholarLog keeps a local copy of your data on your device. Enabling the app lock adds a layer of protection for that local copy if your device is shared or misplaced.

Your journal, assignments, and courses are only ever visible to your account. Administrative access is limited to what's strictly needed for support and is logged.

Your content is retained as long as your account is active. If you delete an entry, assignment, or your account entirely, it's removed from our active systems; backups are cycled out over time afterward.

If you believe you've found a security issue, please report it directly rather than sharing it publicly, so it can be addressed before wider disclosure.