Privacy Policy

Effective {{EFFECTIVE_DATE}}

Scribbit is a notes app made by Oddly Serious Inc. (“we”, “us”). This policy explains what we can see, what we keep, and why. The short version:

• We can’t read your notes. They’re encrypted on your devices with keys only your devices have. Not us, not our hosting providers, not anyone who gets a copy of our servers can read them.
• Scribbit’s AI runs on your Mac. Organizing your notes, searching them and turning voice notes into text all happen on your device. Your notes are never sent to an AI company, including ours.
• We keep only what we need to run your account, and we delete it when we no longer need it.
• We don’t sell or share your information for advertising, and there are no ads.

What “your notes” means here

Everything you write or record in Scribbit, and everything made from it: pages and their history, voice notes and their transcripts, images and files, what Cleanup organizes (tasks, projects, topics, people, links, decisions), search indexes, link previews, and settings that describe your content. All of it is covered by the encryption described below.

End-to-end encryption

When you create an account, your Mac creates a random key for it. Your notes are encrypted with keys derived from it before anything leaves your device, and they’re only decrypted on your devices.

• Adding another device needs one you already have (you compare a short code on both screens) or your recovery key. Signing in with your email alone gives no access to your notes.
• Your recovery key is shown once when you set up your account. Keep it somewhere safe. If you lose every device and your recovery key, your notes can’t be recovered by anyone, including us. This is the cost of real encryption, and it’s deliberate.
• What our servers store is encrypted data under random-looking names, with sizes padded so they say little about what’s inside. We can’t tell a page from a task, or which day something was written.

What we collect and why

Your account

• Email address, to sign you in (we email you a code) and to send you messages about your account. If you sign in with Apple or Google, we receive your email address (Apple may give us a private relay address) and an ID for your account from them, nothing else.
• Your name, only if you give one.
• Your plan: whether you’re on Free, the trial or Pro, and when the trial started or ends.
• Your devices: each signed-in device’s name (your computer’s name, such as “Sam’s MacBook Air”), its platform, and when it was last used. We show this list to you so you can manage your devices. A signed-out device is deleted 30 days later.
• Keys, sealed: copies of your account’s keys, encrypted so only your devices or your recovery key can open them, and each device’s public key.

The waitlist

If you join the waitlist on our website, we keep your email address and when you joined, to tell you when Scribbit is ready. Nothing else: no name, and no tracking of whether you open our email. We delete it when you ask, when you delete a Scribbit account made with it, or after we’ve told you Scribbit is ready.

Your synced notes

If you sync or back up your notes, our servers store them encrypted. We can see how many encrypted items and files your account has, their approximate sizes, and when they arrive or change. We need this to sync and to apply your plan’s storage limit. We can’t see what they contain.

Payments

Payments are handled by Stripe. You pay on Stripe’s page in your browser; Scribbit never sees your card number. Stripe shares with us your subscription’s status, plan and billing period, and your card’s brand and last four digits (so we can show which card is on file), and keeps your payment details, billing address and tax ID if you enter them, and a cancellation reason if you give one. Stripe’s use of that information is covered by Stripe’s privacy policy.

When you use our servers

Like any internet service, our servers see your IP address and the time of each request. We use them to keep the service running and to limit abuse (for example, too many sign-in attempts). Counters for that are kept as one-way hashes and last at most a day. Our hosting provider keeps access logs, with IP addresses and request paths (which hold only random IDs), for {{ACCESS_LOG_DAYS}} days.

Usage and crash reports

To find bugs and understand which features are used, the app can send us:

• Crash reports: what went wrong in the app’s code, the app version and your operating system. Crash reports are scrubbed before they leave your device and never contain note content, titles, file names, links, search terms or names from your notes.
• Usage events: that something happened (for example “Cleanup finished” or “a search was made”), how long it took, and which on-device AI engine was used. Never what was written, found or organized.

You can turn both off in Settings → Privacy and security.

What happens on your device only

These use your notes, so they never leave your device except as described:

• Cleanup, search and voice transcription run on your Mac, using Apple Intelligence where available or open models that run on your Mac. We make sure these never use cloud processing, including Apple’s Private Cloud Compute.
• Downloading models: if your Mac needs an open model, it downloads it from our server. That server sees your IP address and which model file you downloaded, like any download. macOS may download speech recognition files from Apple; Apple’s privacy policy covers that.
• Link previews: when you paste a link, your Mac fetches the page’s title directly from that website, without cookies. The website sees your IP address, as it would if you visited it. You can turn link previews off in Settings.
• API keys and passwords you write down are recognized, hidden on screen, shown only after Touch ID or your password, and never given to the AI, search or link previews.
• Notifications: reminders can show their words in macOS notifications. You can turn that off in Settings so they only say a reminder is due.
• Add to Calendar hands an event to your calendar app. Once added, the event is in your calendar, outside Scribbit’s encryption.
• Exports you make are unencrypted copies of your notes saved where you choose. They’re yours to keep safe.

Email

We email you only about your account: sign-in codes, account deletion, and changes to your plan. Stripe sends payment receipts. We don’t send newsletters or marketing unless you ask for them. Emails are sent through {{EMAIL_PROVIDER}}.

Who we share information with

We use a small number of service providers to run Scribbit. They process information only on our instructions and only to provide their service:

We don’t sell your personal information, and we don’t share it for advertising.

Legal requests. If the law requires us to hand over information, we can only give what we have: the account information above and your encrypted notes, which we can’t decrypt. We’ll tell you about a request unless the law forbids it.

How long we keep it

• Your account and your encrypted notes: until you delete your account.
• Sign-in requests, expired sign-in tokens and pairing requests: deleted within a day or two of expiring.
• Signed-out devices: deleted 30 days after signing out.
• Access logs: {{ACCESS_LOG_DAYS}} days.
• The waitlist: until you ask, until you delete an account made with the address, or until we’ve told you Scribbit is ready.
• Payment records: kept by Stripe as the law requires for financial records.

Going back to Free doesn’t delete anything: your notes stay stored and restorable.

Deleting your account

You can delete your account in Settings → Account. It deletes, from our servers, your account, your devices, your keys, your encrypted notes and files, and your Stripe customer record (which cancels any subscription). Your notes on your Macs stay there unless you delete them.

If you delete your account using only an emailed code, and it has keys, the deletion happens a week later, and your signed-in devices can cancel it. This protects you if someone gets into your email.

Your rights

Wherever you live, you can:

• Get a copy of your notes at any time with Export all notes (File menu, or Settings → Import and export). It includes everything Cleanup organized and, when you’re signed in, everything our servers hold for your account.
• Correct your information, or ask us to.
• Delete your account and everything we store for it.
• Object to or ask us to limit how we use your information, and turn off usage and crash reports.

If you’re in the European Economic Area, the UK or Switzerland, we process your information to provide the service you signed up for (your account, sync, billing), for our legitimate interests in keeping the service secure and working (abuse limits, crash reports), and with your consent where we ask for it. You can complain to your data protection authority. {{EU_REPRESENTATIVE}}

If you’re in California, you have the right to know, delete and correct your personal information, and not to be treated differently for using these rights. We don’t sell or share personal information as California law defines those terms.

To use any of these rights, email privacy@getscribbit.com. We’ll answer within 30 days.

Where your information is stored

Our servers are in {{HOSTING_PROVIDER_AND_REGION}}. If you live elsewhere, your information is transferred there, with the safeguards the law requires (such as the European Commission’s standard contractual clauses). Your notes are encrypted before they leave your device wherever they’re stored.

Children

Scribbit isn’t meant for children under 16, and we don’t knowingly create accounts for them. If you believe a child has given us information, email us and we’ll delete it.

Changes to this policy

If we change this policy in a way that matters, we’ll tell you in the app or by email before the change takes effect. The date at the top shows when it last changed.

Contact

Oddly Serious Inc., {{COMPANY_ADDRESS}} privacy@getscribbit.com