What Scaffold stores, and what it does not

Who runs Scaffold

Scaffold is built and operated by Mia Sachdev, an individual, not a company. You can reach me at miasachdev15@gmail.com about anything on this page.

What you give the app

To make an account you give an email address and a password. Everything else is what you type into the planner while you use it: tasks, events, deadlines and their categories, goals and their milestones, habits and the dates you ticked them, class names and grades, journal entries, inbox notes, and your theme and category colour settings.

There is no name field, no phone number, no address, no date of birth, and no payment information, because Scaffold is free and does not take payments.

Where it is kept

Your data lives in a Postgres database hosted by Supabase, who act as the infrastructure provider. Every table carries row level security, which means the database itself refuses to return a row whose owner is not the signed-in account. That is enforced at the database, not by the app asking nicely.

Passwords are handled by Supabase Auth and are stored hashed. I never see your password, and neither does the app.

What is measured

Scaffold records which top-level section you open and when, so I can see which parts of the app are actually used. A row looks like "this account opened Goals at this time" and nothing else. It does not record what you typed, what you clicked inside a page, or what any of your entries say.

There are no third-party analytics, no advertising trackers, no session recording, and no cookies beyond the one Supabase needs to keep you signed in.

Email and notifications

You get an email when you create an account and when you ask to reset your password. If you turn on the daily digest or push notifications, the app stores a device token so it can send them, and you can turn both off in settings. Nothing is sent for marketing.

Who else sees it

Nobody. Your entries are not sold, rented, shared with advertisers, or used to train any model. The only parties with technical access are Supabase as the host, and me as the operator, and I do not read individual accounts except when you ask me to help with a specific problem.

Deleting it

Email me and I will delete the account and everything attached to it. Deletion cascades through every table, so the tasks, goals, habits, grades and journal entries go with it. There is no archived copy kept afterwards.

Young users

Scaffold is built for students, so some users are under 18. The app collects no more from a younger user than an older one, and the list above is the whole list. If you are a parent or guardian and want an account removed, email me and I will do it.

Changes

If this page changes in a way that affects what is collected, the date at the top changes with it and the account email address gets a note.