Privacy Notice

Last updated: June 15, 2026

1. Who we are

Scribao is operated by Julian Witkowski, acting as the data controller of the personal data processed through the Service.

2. What we collect and why

• Account data (email, password hash): to create and secure your account. Legal basis: contract.
• Profile data (display name, avatar): to personalize the app. Legal basis: contract.
• Content data (texts you save, OCR images, AI prompts): to provide the Service. Legal basis: contract.
• Usage & device telemetry (IP, device info, app events): for security, fraud prevention, and product improvement. Legal basis: legitimate interests.
• Support messages: to respond to enquiries. Legal basis: legitimate interests.

3. Who we share data with

• Subprocessors: cloud hosting and database (Supabase), AI inference providers (for OCR and Explain).
• Paddle.com, our Merchant of Record, for processing payments, subscription management, tax compliance and invoicing.
• Professional advisers (legal, accounting) where strictly necessary.
• Authorities where required by law.

4. International transfers

Data may be processed outside the UK/EEA. Where this happens we rely on adequacy decisions or Standard Contractual Clauses.

5. Retention

We keep account and content data for as long as your account is active, plus a reasonable backup period. We delete or anonymize data when no longer needed.

6. Your rights

You have rights of access, rectification, erasure, restriction, portability, objection, and to withdraw consent. You may also lodge a complaint with your local data protection authority. We respond within one month. Contact us at hello@scribao.app.

7. Security

We use appropriate technical and organizational measures including encryption in transit, access controls, and least-privilege service credentials.

8. Cookies

We use essential cookies and local storage to keep you signed in and remember preferences. We do not use advertising cookies.