Privacy
Last updated September 2026
Scruba is a study tool, not an advertising business. We collect what we need to sign you in, run your study progress, and take payment — and nothing beyond that.
What we collect
Account details: the email address and password you sign up with. Passwords are hashed by our authentication provider (Supabase) and never stored in readable form.
Study activity: which questions you answer, whether you got them right, and how long a session ran. This is what builds your progress, your missed-question flashcards, and — on the annual plan — your reports and roadmap.
Payment details: if you subscribe, Stripe handles the card. We store only the subscription status and the identifiers Stripe gives us to keep your access in sync. We never see or store your card number.
Basic technical logs your browser sends with any request (IP address, user agent), kept short-term for security and debugging.
What we don't do
We don't sell or rent your data to anyone.
We don't run third-party advertising or ad-tracking pixels.
We don't use your answers to train models that leave your account.
Where your data lives
Accounts and study data are stored with Supabase. Payments run through Stripe. Both are established providers with their own security and privacy commitments.
Some study state — such as the list of questions you've missed in a session — is also cached in your browser's local storage so the app works smoothly. Clearing your browser data removes that local copy.
Your choices
You can update your email or password from account settings at any time.
You can ask us to delete your account and the study data tied to it by emailing hello@scruba.online. We'll confirm and remove it, keeping only what we're legally required to retain (for example, billing records).
Contact
Questions about privacy or a data request: hello@scruba.online.
If anything here changes materially, we'll update this page and the date above.