Privacy

Scribble Flow is a product of ScreenTrace Technologies, the Data Fiduciary under the Digital Personal Data Protection Act, 2023. This page explains what we collect and why. We do not sell your personal data or workspace content.

Who is responsible

ScreenTrace Technologies operates scribbleflow.app and the Scribble Flow companion apps. For privacy questions write to support@scribbleflow.app. Plan and billing questions go to sales, listed at the bottom of this page.

What we collect

An account is required. We collect:

• Email and name
• Workspace content you capture (text, links, files, sketches, voice notes)
• Optional OAuth identity if you sign in with GitHub, Google, or Apple
• Usage needed to enforce plan limits (counts, not the contents of your thinking)
• Billing records handled by our payment providers (Razorpay / PayPal)
• Essential cookies and similar storage needed to keep you signed in (see Cookies)
• IP address and similar request metadata used for rate limits, security audit, and abuse prevention

How we use it

To provide the service: sign you in, store your desk, apply your plan, send account email, keep the product secure, and - if you leave AI features on - suggest titles, summaries, connections, and Memory answers grounded in your workspace. We process this on the basis of your account, the contract in the Terms of use, and (where a feature is optional) your settings.

AI

AI suggests; you decide. Suggestions are Accept, Edit, or Dismiss. Your original scribble is not replaced by an AI rewrite. In Settings → AI & data policy you can turn off enrichment, smarter search, and nudges. The desk still works with a built-in engine for titles, search, and organizing.

We do not train our own models on your desk. When AI features are on, relevant workspace text may be sent to the model provider configured for the service so it can classify, summarize, or answer. Voice notes may be transcribed by that provider. Answers are meant to be grounded in your notes and cite sources. They are still suggestions, not facts. ScreenTrace Technologies is not responsible for AI output you rely on. Model providers have their own terms; we do not promise they will never use API data under those terms.

Device permissions

Microphone (voice notes), camera / photos (image scribbles), and optional device unlock such as Face ID on the companion apps. We request these only to capture what you choose to save.

How long we keep it

We keep account and workspace data while your account is open. If you delete your account, we remove the account, workspace, and scribbles from the live service. Copies may remain for a short time in routine backups, then expire with those backups. Billing records and security logs may be kept longer where tax, payment, or abuse-prevention rules require it.

Your rights

Under the Digital Personal Data Protection Act, 2023 you may ask to access, correct, or erase personal data, and you may raise a grievance. Signed-in users can export JSON and delete the account in Settings → Your data. If you cannot sign in, use the privacy request form. We will verify identity before we export or delete from that form. We do not complete a deletion request automatically from an email we cannot match to an account.

Children

Scribble Flow is for people who can form a binding contract. You must be at least 18. We do not knowingly collect personal data from children as defined under Indian law. If you believe a child has an account, write to support@scribbleflow.app and we will delete it.

Company desks

When a company buys Scribble Flow, each employee still has a private desk. Admins manage seats, SSO, and policy. They do not read inboxes through this product. Company Memory only includes thoughts someone chose to publish. For that processing, the customer organization is the Data Fiduciary and ScreenTrace Technologies is the Data Processor. See the DPA and subprocessors.

Sharing

Share links you create are public to anyone with the link. They are not indexed by search engines. Revoke a link anytime. We do not sell personal information or workspace content.

Processors outside India

Some subprocessors (payments, email, OAuth, optional error reporting, and AI providers when you leave AI on) may process data outside India. The current list is on the subprocessors page.

Security

How we run the service is summarized on Security. That page is an operational description, not a certification.

Grievance officer

For grievances write to support@scribbleflow.app. We aim to acknowledge complaints quickly and to close them within fifteen days of receipt, as the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 require of intermediaries.

No extra duties

Providing this notice does not create any warranty, fiduciary duty, or liability beyond what the Terms of use allow. To the fullest extent permitted by law, ScreenTrace Technologies is not accountable for how you use the service or for third-party systems (payment providers, AI model providers, OAuth providers).

Contact

Support: support@scribbleflow.app. Sales: sales@scribbleflow.app.

Signed-in users can also review AI & data policy in Settings.