01
Introduction
ScribeTrack is a writing productivity application available on iOS and Android. This Privacy Policy explains what information we collect when you use ScribeTrack, how we use it, and what choices you have.
We do not run ads. We do not sell your data. Our business model is a simple subscription — your data exists to make the app work for you, not to generate revenue for third parties.
By using ScribeTrack, you agree to the practices described here.
02
Information We Collect
Information you provide directly
- Account credentials. When you register, you provide an email address and a password. Passwords are hashed before storage and are never stored in plaintext.
- Writing project data. Project titles, descriptions, genres, types, target word counts, and target finish dates that you enter into the app.
- Writing session logs. Per-session records you create via Quick Add: date, starting word count, ending word count, session start time, and session end time. We derive words written, session duration, and words per hour from these inputs — these derived values are also stored.
Information collected automatically
- Device and operating system information. Platform (iOS or Android), OS version, and device model, used for debugging and compatibility purposes.
- App version. The version of ScribeTrack installed on your device.
- Authentication tokens. We issue JSON Web Tokens (JWTs) to authenticate your sessions. These tokens are stored locally on your device and sent to our servers with each request. They do not contain your password.
- Error and crash data. If the app crashes or encounters an error, we may collect a stack trace and the state of the relevant operation to diagnose the issue. We do not collect the content of your writing projects in crash reports.
Subscription information (Pro tier)
Subscription purchases are processed by Apple (App Store) or Google (Google Play). We integrate with RevenueCat to validate your subscription status. We receive confirmation of whether your subscription is active, its tier, and its renewal status. We do not receive your payment card number or full billing details — those remain with Apple, Google, and their payment processors.
03
How We Use Your Information
| Purpose | Data used |
|---|---|
| Authenticate you and secure your account | Email, hashed password, JWT tokens |
| Sync your projects and sessions across devices | All project and session data |
| Calculate in-app analytics (WPH, streaks, predictions) | Session logs, project metadata |
| Provide offline functionality | Local SQLite cache on your device |
| Apply Free vs. Pro access rules | Subscription status from RevenueCat |
| Diagnose errors and improve app stability | Crash data, device and OS info |
| Respond to support requests | Email, account data, relevant session data |
| Comply with legal obligations | As required |
04
Data Retention
Active accounts
Free tier users: Your session history is accessible within the app for the preceding 365 days. Data older than 365 days is retained in our database but filtered from your free-tier queries — it is not deleted. If you upgrade to Pro, your full lifetime history becomes accessible immediately. No historical data is permanently purged based on tier, so upgrading is always reversible from your perspective.
Pro tier users: Lifetime session history with no filtering.
Account deletion
When you delete your account, we delete your account record, all associated project records, and all associated session records from our production database within 30 days. Residual copies in database backups are purged within 90 days as those backups rotate out. We will confirm deletion upon request.
05
Storage & Security
Your data is stored in a PostgreSQL database hosted on Neon (a serverless Postgres provider). Our backend API runs on a DigitalOcean virtual machine. All data in transit between the app and our servers is encrypted via TLS (HTTPS). Database connections use Neon's pooled, encrypted connection infrastructure.
Your device stores a local SQLite cache to support offline logging. This cache is subject to your device's own security (iOS Data Protection, Android encryption). We recommend using your device's lock screen and storage encryption features.
No security system is impenetrable. We maintain reasonable technical and organizational safeguards appropriate to the scale and sensitivity of the data we process.
06
Data Sharing
We do not sell, rent, or trade your personal information. We share data only in the following circumstances:
- Service providers. We share data with infrastructure providers (Neon, DigitalOcean) and RevenueCat strictly as necessary to operate the service. These providers are contractually prohibited from using your data for any purpose beyond providing their service to us.
- Legal compliance. We may disclose information if required by law, court order, or governmental authority, or if we believe in good faith that disclosure is necessary to protect our legal rights or prevent imminent harm.
- Business transfer. If ScribeTrack is acquired or merged with another entity, your information may be transferred as part of that transaction. We will notify you via email or in-app notice before your data becomes subject to a different privacy policy.
07
Your Rights & Choices
Regardless of your location, you have the following rights with respect to your data:
- Access. You can view all your project and session data within the app at any time.
- Export. Pro users can export session data as CSV via the app. Free users may contact us to request a data export.
- Correction. You can edit or delete individual sessions and projects within the app.
- Deletion. You can delete your account from within the app's settings. See Section 4 for what happens to your data upon deletion.
- Objection / restriction. If you believe we are processing your data in a manner inconsistent with this policy, contact us and we will investigate.
California residents (CCPA): We do not sell personal information. You have the right to know what personal information we collect and to request deletion. Contact us at the address below to exercise these rights.
EEA/UK residents (GDPR): Our lawful basis for processing your data is performance of a contract (providing the app you signed up for) and legitimate interests (security, debugging). You have the right to data portability and to lodge a complaint with your local supervisory authority.
08
Children's Privacy
ScribeTrack is not directed at children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has created an account, contact us and we will delete it promptly.
09
Third-Party Links
The app does not contain third-party advertising links. If future versions include links to external websites (for example, a community forum or documentation site), those sites operate under their own privacy policies and this policy does not apply to them.
10
Changes to This Policy
We may update this policy as the product evolves. When we make material changes, we will notify you via in-app notice or email at least 14 days before the changes take effect. The "Last Updated" date at the top of this document reflects the most recent revision. Continued use of the app after changes take effect constitutes acceptance of the revised policy.
11
Data Deletion
When you delete your account from within the app's settings, your user data is deleted from our systems as described in Section 4. No additional steps are required.
At any time after deleting your account, you may email support@scribetrack.ink to request written confirmation that your data has been deleted. If you need assistance deleting your account, you may also contact us at that address and we will complete the deletion on your behalf.
12
Contact
If you have questions, requests, or concerns about this policy or your data, reach us at:
Baltimore, MD, USA
We aim to respond to all privacy-related inquiries within 5 business days.