Privacy Policy

Welcome to ScrollPaper. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. ScrollPaper transforms research papers into swipeable card formats for micro-learning, helping researchers, PhD students, and postdocs stay current with scientific literature.

We are committed to protecting your privacy and handling your data responsibly. Please read this policy carefully. By using ScrollPaper, you agree to the collection and use of information in accordance with this policy.

The following table summarises the data we collect, its purpose, and how long we retain it:

ScrollPaper uses artificial intelligence to extract key claims, assess methodology, and evaluate reproducibility indicators from research papers. Here is how this works:

• AI Claims Extraction: We use the Anthropic Claude API and Google Gemini to process paper abstracts and metadata to generate concise claim cards. Only paper metadata (not your personal data) is sent to these AI services.
• No Personal Data Sent to AI: Your personal information, reading history, and account details are never transmitted to third-party AI services. Only publicly available research paper content is processed.
• AI Output Storage: The AI-generated summaries, claims, and assessments are stored in our database and associated with the paper, not with individual users.

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following limited circumstances:

• Service Providers: We use Supabase for database hosting and authentication, PostHog for analytics, and Anthropic/Google for AI processing. These providers only receive the minimum data necessary to perform their services and are bound by their own privacy policies.
• Legal Requirements: We may disclose your information if required to do so by law, in response to valid legal process, or to protect the rights, property, or safety of ScrollPaper, our users, or the public.
• Aggregated Data: We may share anonymised, aggregated statistics about app usage that cannot be used to identify any individual user.

We implement appropriate technical and organisational measures to protect your personal information:

• All data in transit is encrypted using TLS/SSL
• Passwords are hashed and salted using industry-standard algorithms via Supabase Auth
• Database access is restricted through Row Level Security (RLS) policies
• API keys and secrets are stored securely and never exposed client-side
• Regular security reviews of our infrastructure and codebase

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to implementing best practices.

You have the following rights regarding your personal data:

• Access: You can view your personal data through your profile settings at any time.
• Correction: You can update your account information and preferences directly in the app.
• Deletion: You can request deletion of your account and all associated data by contacting us at sanjay@scrollpaper.com. We will process deletion requests within 30 days.
• Data Export: You can request a copy of your personal data in a machine-readable format.
• Withdraw Consent: You can withdraw consent for data collection at any time. Note that this may limit app functionality.
• Opt-Out of Analytics: You can opt out of anonymised analytics tracking in the app settings.

We retain your personal data only for as long as necessary to provide our services and fulfil the purposes described in this policy. When you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain certain information.

Anonymised and aggregated data that cannot identify you may be retained indefinitely for research and analytical purposes.

ScrollPaper is designed for researchers, academics, and professionals. We do not knowingly collect personal information from children under the age of 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us immediately.

ScrollPaper operates globally and your data may be processed in countries other than your country of residence, including the United States (where our service providers Supabase and Anthropic are based) and the European Union. We ensure that appropriate safeguards are in place for any international transfers of personal data in compliance with applicable data protection laws.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the updated policy within the app and updating the "Last Updated" date. Your continued use of ScrollPaper after any changes indicates your acceptance of the updated policy.

As an Australian-based service, ScrollPaper complies with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This includes:

• Open and transparent management of personal information (APP 1)
• Giving you the option of not identifying yourself where practicable (APP 2)
• Collecting only information that is reasonably necessary (APP 3)
• Taking reasonable steps to ensure data quality and security (APP 6, 11)
• Providing access to and correction of your personal information (APP 12, 13)

If you are located in the European Economic Area (EEA), you may also have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local data protection authority.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: