Privacy Policy

1. Who this policy covers

ScrollCount, Android application ID com.scrollcount.app, is provided by Korigain (“Korigain,” “we,” “us,” or “our”). This policy applies to the ScrollCount Android app, the service at scroll.korigain.com, the free allowance, accounts, Google Play subscriptions, and registered-user competition features.

ScrollCount is independent of TikTok and is not endorsed by TikTok. TikTok is referenced only as the app whose usage you choose to count.

2. Information processed on your device

After account sign-in, ScrollCount can count up to 300 estimated videos as the installation’s included allowance. After that limit, an active Google Play subscription is required to continue counting. Reaching the limit does not upload detailed history. The following information is kept in the app’s private Android storage:

Accessibility service

With your express permission, ScrollCount’s AccessibilityService receives limited event metadata from the supported TikTok packages: event time and type, package and Activity class name, scroll movement, list indices, item count, and a content-change bitmask. It uses these signals to estimate when the feed advances and to distinguish feed viewing from LIVE.

ScrollCount cannot retrieve TikTok window content. It does not request access to the accessibility node tree and does not read or store captions, comments, TikTok usernames, messages, TikTok passwords, typed text, or other TikTok screen content. It does not tap, swipe, type, like, follow, post, or control TikTok.

Usage Access

If you grant Usage Access, ScrollCount processes Android foreground-app events to determine when TikTok starts and stops. Other package names may be processed briefly to determine that you left TikTok, but the app stores only the resulting TikTok session and time information.

Optional counter over TikTok

ScrollCount can optionally show a small counter while TikTok is active. It shows only today’s aggregate estimated-video count or, on a positively identified LIVE screen, the current LIVE room number and elapsed time. It does not read or control TikTok content, occupies only its small counter area, and is removed when TikTok closes.

This feature is off by default. ScrollCount presents a separate explanation with allow and not-now choices before opening Android’s “Display over other apps” settings. Agreeing to the explanation does not grant access; Android requires you to grant the special access yourself. Declining it does not disable ordinary video or LIVE tracking inside ScrollCount.

Notifications

If you enable reminders, video, time, milestone totals, a trailing seven-day summary, or an occasional reminder that the optional counter is off may appear in local Android notifications and on your lock screen according to your device settings. The reminder never enables the counter or opens a permission screen by itself. ScrollCount does not use a remote push-notification provider.

ScrollCount does not request location, contacts, camera, microphone, storage, or advertising-ID access. Your country may be suggested from the device locale when you complete your public profile, but you choose and confirm it; GPS location is not used.

3. Account and server data

A ScrollCount account is required before counting starts. After the 300-video included allowance, an active Google Play subscription is required to continue counting. Signing in alone does not unlock paid access after that allowance. Google sign-in is the only way to create, identify, or recover a ScrollCount account.

The Google ID token and its claims may be processed temporarily by the app, Korigain’s server, and Google’s token-verification service. Korigain’s application database retains the Google subject identifier needed to recognize the account, but does not retain your Google email address, Google display name, or avatar.

When the temporary returning-password feature is enabled by ScrollCount’s server configuration, fresh verification from the same Google account lets you add or change a ScrollCount password. When the feature is disabled, password sign-in and password settings are not shown. The password travels only over HTTPS and the server retains a salted, one-way password hash rather than the plaintext password. A password cannot create an independent account or replace Google for account recovery. The username is used for returning password sign-in and is also public in rankings and leagues. A username change changes both the returning sign-in name and public username. Sensitive credential changes and deletion actions require fresh verification from the matching Google account.

When an account is created, the included estimates may be added to the account’s lifetime aggregate. The individual video rows and session times remain on the device. The server may store:

• an internal account identifier and authentication method;
• a Google subject identifier, login username, and optional password verifier;
• the public username and country code you choose;
• a private lifetime TikTok-open total for backup and restoration;
• up to 90 recent private daily aggregate rows containing the date, estimated watched count, confidence totals, TikTok time, measured-watch count and time, longest-session duration, LIVE-visit count, and LIVE time for backup and restoration;
• a lifetime aggregate estimate of videos watched for the registered-user Top 10;
• league names, invite codes, ownership, membership, and join dates;
• daily score date, week, points, enabled-goal count, and goals-met count;
• hashed authentication-session tokens, expiry times, and account update timestamps;
• Google Play purchase token and token hash, subscription product and base-plan IDs, verified state, expiry, renewal and acknowledgement state, linked-token hash, and verification timestamp;
• account-deletion request status, request and purge dates, cancellation status, and limited administrator-review records;
• support or deletion correspondence you send, including the reply email address, message contents, and request-verification history;
• and standard connection and request metadata that may appear in hosting or security logs, such as IP address, request time, and user agent.

An email address used to contact support is processed as correspondence and is not added to the ScrollCount account as a sign-in identifier. Do not include a password or Google token in a message.

The server does not receive individual video events, detailed viewing-session rows, session start or end times, opening times, individual LIVE-room records, accessibility events, TikTok account information, or TikTok content.

4. How information is used

Information is used only to provide and protect ScrollCount’s requested features:

• estimate and display your TikTok viewing activity;
• save your settings, goals, and optional reminders;
• run the free limit, authenticate the account, verify paid access with Google Play, and back up or restore private aggregate progress;
• let authenticated members change their username and, after fresh Google verification, add or change a password;
• operate the Top 10, invite leagues, and aggregate goal scoring;
• maintain service security, prevent abuse, and troubleshoot failures; and
• respond to privacy, support, and deletion requests.

ScrollCount contains no advertising SDK, analytics SDK, third-party telemetry SDK, or crash-reporting SDK. Korigain does not sell ScrollCount personal data or use it for targeted advertising.

5. When information is visible or shared

Other registered members

Completing an account profile can display your chosen username, chosen country, and lifetime aggregate video estimate in the global Top 10. Members of a league can see other members’ usernames, countries, weekly points, and scored-day counts. Anyone who has a league invite link can see the league name and invite code and may use the code to join.

Your private lifetime TikTok-open backup is never shown in rankings or to other members.

Service providers and legal requirements

If you choose Google sign-in or a subscription, Google processes sign-in and purchase information under Google’s Privacy Policy. Hosting, network, database, Google Play/Google Cloud, and support-email providers may process limited information on Korigain’s behalf to operate and secure the service or respond to a request. We may also disclose information if reasonably necessary to comply with law, protect users, investigate abuse, or defend legal rights.

6. Security

Local records are held in Android app-private storage. Android cloud backup and device-to-device transfer are disabled for ScrollCount data. Server communication uses HTTPS. Google ID tokens are not used as long-lived ScrollCount sessions. Passwords are checked through one-way verifiers; their plaintext values are not retained. The app receives a random opaque session token and the server stores only its hash. Subscription access is granted only after server verification with Google Play; purchase tokens are never embedded in the APK. Access to server data is limited to authenticated functions and operational administration.

No storage or transmission method is completely secure. We use reasonable safeguards appropriate to the limited information processed, but cannot guarantee absolute security.

7. Retention

• Individual local viewing history: remains on the device until you clear ScrollCount’s app data in Android Settings or uninstall ScrollCount. It has no automatic expiry. Signed-in daily aggregate backups remain with the online account so summary History can be restored.
• Active online account and competition records: remain while the account is active. A deletion request starts the scheduled process described below.
• Subscription records: remain while needed to verify access, process renewal/cancellation/refund state, prevent purchase-token reuse, resolve payment disputes, or meet financial and legal recordkeeping duties.
• Authentication sessions: become unusable after 30 days, when you sign out, or when the account is deleted. A deletion request revokes ordinary sessions; a time-limited, restricted session may be issued only to review or cancel the request before its deadline. Expired database records may remain until routine maintenance.
• Pending deletion: the account is disabled and hidden from public rankings when the request is accepted and scheduled for permanent purge 30 days later. An administrator may review the request but cannot reject it or extend the deadline. The purge proceeds when due even if no review occurred. The member may explicitly cancel during that window; sign-in can provide only restricted cancellation access and does not silently cancel the request.
• Support correspondence, operational logs, security records, and backups: may remain for a limited period while a request is handled and according to security, abuse-prevention, hosting, legal, and backup-rotation needs. Such retention does not keep the live account active.

8. Your choices and deletion

• Turn off ScrollCount tracking inside the app or disable its AccessibilityService and Usage Access in Android Settings.
• Disable notifications in ScrollCount or Android Settings.
• To remove phone-only viewing history, clear ScrollCount’s app data in Android Settings or uninstall the app. ScrollCount does not provide an in-app “Delete local data” action.
• Use the in-app account settings or the external ScrollCount account-deletion page to request deletion without reinstalling the app.

A deletion request is not an immediate completed deletion. Once a valid request is accepted, ordinary server access is disabled, existing ordinary sessions are revoked, and the username and account totals are hidden from public rankings and leagues. The account is scheduled for permanent purge 30 days after the accepted request. An administrator may review the request, but cannot reject it, extend its deadline, or stop the purge by taking no action.

The member may explicitly cancel the scheduled deletion during the 30-day window after completing the required verification. Sign-in during the window may issue only a restricted session used to view or cancel deletion; it does not automatically reactivate the account. If deletion is not cancelled, the live profile, private lifetime and daily aggregate backups, username, country, optional password verifier, Google identifier, synced aggregate, authentication sessions, subscription linkage, league relationships, and submitted scores are permanently purged at the stated deadline, subject only to the limited financial, log, backup, security, or legal retention described above. A league owned by the deleted member may be transferred to its oldest remaining active member, or removed if none remains.

The external page starts a request through scroll@korigain.com. Include the ScrollCount username if known, chosen country if known, and the deletion request itself. Support may then direct the member to a separate ownership check using fresh verification from the matching Google account. Never send a password or Google token by email. Administrator review cannot delay a valid request’s deadline and cannot guarantee account recovery.

Deleting a ScrollCount account does not cancel a Google Play subscription. Cancel the subscription separately in Google Play to stop future renewal charges. Account deletion also does not delete a Google account or erase detailed history held only on the phone; clear ScrollCount’s app data in Android Settings or uninstall the app to remove that phone-only history.

Depending on where you live, you may have additional rights to access, correct, object to, restrict, or request deletion of personal information. Contact us to make a request.

9. Children

ScrollCount is not directed to children under 13. The account flow does not use age to verify eligibility and does not provide a parental-consent mechanism. A parent or guardian who believes a child has created an account should contact us so the account and information can be reviewed and deleted where appropriate.

10. Changes to this policy

We may update this policy when ScrollCount’s features or data practices change. The current version will remain available at this URL with a revised effective date. Material changes will also be communicated in the app or through another appropriate notice when required.

11. Contact

For privacy questions, account deletion help, or data requests, contact:

Korigain — ScrollCount Privacy
Email: scroll@korigain.com
Website: https://scroll.korigain.com