Scribby (“Scribby”, “we”, “us”) is a daily quote app for iPhone. This policy explains what personal data we collect when you use the app or this website, why we collect it, and the choices you have. The short version: we collect what the app needs to work, we do not show ads, and we never sell your data.
Who is responsible
Scribby is the controller of the personal data described in this policy. For any privacy question or request, write to support@thescribby.app.
What we collect
Account
You sign in with Sign in with Apple. We receive your Apple account identifier, your name (if you choose to share it), and your email address. If you use Apple’s “Hide My Email” option, we only see the private relay address Apple creates for you.
Profile and preferences
To personalize your daily quote, the app stores the profile you set up: your display name, an optional profile picture, your quote language, the grammatical form you prefer to be addressed in, your time zone, and your answers from onboarding (for example the intentions and moods you pick). Your answers also help us understand, in aggregate, how well onboarding works.
Content and activity
We store what you create and do in the app so it can sync and come back to you: quotes you like and view (viewing powers your streak), folders you create and the quotes in them, folder sharing invitations you send or accept, your notification preferences (times, weekdays, frequency, sound, quiet hours), your widget preferences, your achievements, and any feedback you send us.
Purchases
Scribby+ subscriptions are bought through Apple and processed by RevenueCat on our behalf. We receive subscription status events (for example “trial started” or “renewed”) and an anonymized transaction identifier. We never see your payment details; Apple keeps those.
Device and usage data
- Analytics. We use PostHog (hosted in the EU) to understand which features are used and to watch for errors, including session replays of in-app screens. Analytics events are linked to a random identifier and your user ID, not to your name.
- Crash reports. We use Sentry to collect crash reports: device model, OS version, app version, and the technical state of the app when it crashed.
- Push notifications. We use OneSignal to deliver notifications. OneSignal processes your device push token and time zone so your daily quote arrives at the time you chose.
Photos
If you save a share card, the app asks for write-only access to your photo library. Cards are rendered on your device; nothing from your photo library is read or uploaded.
What we do not do
- No advertising, no ad networks, no tracking across other apps or websites.
- No selling or renting of personal data, to anyone, ever.
- No reading of your photo library, contacts, or location.
Why we collect it
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Provide the app: account, sync, streaks, folders, sharing | Account, profile, content and activity | Contract (Art. 6(1)(b)) |
| Deliver your daily quote and reminders at your chosen time | Notification preferences, push token, time zone | Contract (Art. 6(1)(b)) |
| Manage Scribby+ subscriptions | Purchase data | Contract (Art. 6(1)(b)) |
| Improve the app and fix crashes | Analytics, crash reports | Legitimate interests (Art. 6(1)(f)) |
| Answer your messages | Feedback, support email | Legitimate interests (Art. 6(1)(f)) |
Push notifications are only sent after you allow them in iOS, and you can turn them off at any time in the app or in iOS settings.
Who processes data for us
We use a small set of service providers, each bound by a data processing agreement:
| Provider | What for | Privacy policy |
|---|---|---|
| Apple | Sign in with Apple, App Store purchases | apple.com/legal/privacy |
| Cloudflare | Hosting, database, and file storage for the Scribby backend and this website | cloudflare.com/privacypolicy |
| RevenueCat | Subscription management | revenuecat.com/privacy |
| PostHog (EU) | Product analytics, session replay | posthog.com/privacy |
| Sentry | Crash reporting | sentry.io/privacy |
| OneSignal | Push notification delivery | onesignal.com/privacy_policy |
Some providers process data outside the European Economic Area. Where they do, transfers are protected by the EU Standard Contractual Clauses or an adequacy decision such as the EU-US Data Privacy Framework.
How long we keep it
Your data is kept while your account exists. When you delete your account (Settings, “delete account” in the app), your profile, quotes activity, folders, streaks, achievements, notification preferences, uploaded images, and subscription records are deleted immediately and permanently. Crash reports and analytics events age out of Sentry and PostHog on their standard retention schedules (at most 90 days for session replays and crash data, up to 12 months for aggregated analytics). Feedback you sent us may be kept in anonymized form.
Your rights
If you are in the EU, EEA, UK, or Switzerland, you have the right to access, correct, delete, and receive a copy of your personal data, to restrict or object to processing, and to withdraw consent at any time. You also have the right to complain to your local data protection authority.
If you live in California or another US state with a comparable privacy law, you have equivalent rights of access, deletion, and correction, and the right to know we do not sell or share your personal information as those laws define it.
Most of it you can do yourself in the app: edit your profile, change your quote language, or delete your account entirely. For everything else, email support@thescribby.app and we will respond within 30 days.
Children
Scribby is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.
Security
All traffic between the app, this website, and our backend is encrypted with TLS. Data is stored on Cloudflare’s infrastructure with access limited to what the service needs to run. No system is perfectly secure, but we keep the amount of data we hold deliberately small.
Changes to this policy
When we change this policy in a meaningful way, we will update the date at the top and, for significant changes, let you know in the app. Earlier versions are available on request.
Contact
Questions, requests, or concerns: support@thescribby.app.