Privacy Policy

Scribble is a handwriting learning service provided by Saegis LLC. Children learn on iPad; authorized adults manage accounts, purchases, and reports through our website. This policy also covers adults who visit our public website, join our email list, or contact us.

We use personal information for the purposes described here. We do not sell personal information, show third-party ads in the learning app, or provide children’s learning records to advertisers.

• Adult accounts and access: name, email address, sign-in and security information, Family or school membership, and invitations or reporting permissions. For Family setup, we record when an authorized adult opens the supported iPad app so the dashboard can confirm sign-in.
• Child profiles: display name, age, handedness, avatar, and learning settings. Linked school accounts may also include a school-provided sign-in identity and roster relationship.
• Learning records: submitted handwriting strokes, attempts, scores, completed lessons and activities, unfinished session drafts, curriculum position, XP, streaks, and activity dates. These records let us provide feedback, resume learning, and show authorized reports.
• Billing and optional graduation reward packages: purchased enrollment and access dates, accepted purchase terms, payment identifiers, amounts, tax, refunds, account-owner shipping recipient and address if you opt in to gifts, shipment status, and fulfillment records.
• Email list and interests: the name, email, referral source, and other answers an adult chooses to submit. An email-list signup does not create a child profile or learning record. Avoid children’s names and sensitive details in free-text comments.
• Support: messages and troubleshooting information you choose to send. If you use optional voice dictation for an app support comment, Apple’s speech features process microphone input and the resulting text is sent when you submit the comment. The support-report submission does not include a raw audio recording.
• Technical information: IP address, browser or app version, request and security events, and limited diagnostic or usage information needed to operate and improve the service. Our public website also records permitted acquisition information, such as a referring site or campaign code.

Stripe collects payment details directly. Scribble stores the transaction records needed to provide purchases, support, refunds, and accounting; our application database does not store full payment-card numbers or card security codes.

• Provide secure accounts, child profiles, lessons, immediate feedback, and saved learning records.
• Show progress and reports to adults with permission to see them.
• Process enrollment, payments, refunds, and the preparation and delivery of optional graduation reward packages.
• Send necessary sign-in, invitation, purchase, refund, security, and service messages. Optional progress-email preferences are managed separately in Settings → Notifications.
• Send email-list or product updates an adult requests, with an unsubscribe option.
• Respond to support and privacy requests, investigate fraud or deliberate misuse, protect accounts, and maintain reliability and accessibility.

Family owners and admins can manage the children in their Family. They may invite an adult to see read-only reports for selected children or for all current and future children in that Family. Selected-child access does not automatically expand when another child is added. Report access may have an end date and can be revoked through Settings → Invitations.

School access follows the school’s authorized management, roster, and reporting relationships. Invited report viewers cannot use that invitation to learn as the child or manage purchases, settings, or other invitations. Scribble personnel may access information when needed for support, operations, security, or a privacy request.

The curriculum map may show anonymous peer avatars and curriculum positions within the same organization and curriculum release. That display does not include peers’ names, account identifiers, school or class identifiers, XP totals, or detailed activity histories. It is not a public child directory.

• Hosting and storage: providers operating Scribble’s website, API, database, and asset delivery process information needed to run those services. Our application hosting includes Vercel and Railway.
• Stripe: processes payments, related fraud checks, billing details, and refunds. We share the child’s first name to identify their subscription and help authorized adults distinguish siblings when managing billing. We do not share handwriting or learning results with Stripe. Optional gift shipping addresses are entered separately in the dashboard.
• Resend: delivers our emails, records opens and link clicks in adult marketing emails to help us understand campaign engagement, and stores adult email-list contacts and their submitted form answers.
• Fulfillment providers and postal carriers: receive the recipient, shipping address, and gift details needed to prepare and deliver a shipment. They do not receive handwriting records or private support messages for that purpose.
• Diagnostics and website measurement: PostHog processes limited app diagnostics when enabled. Google Tag Manager loads Google Analytics on adult public pages, including enrollment. Our server sends confirmed trial and purchase events to Google Analytics and Meta, and confirmed subscription cancellation events to Google Analytics. These events exclude personal form data and children’s learning records. Website measurement does not run on sign-in, dashboard or reporting pages.
• School integrations: authorized school systems, including Timeback for linked Alpha accounts, exchange identity, roster, and learning information needed for the school service.

We limit service-provider disclosures to their purpose. We may also disclose information when required by law, to respond to a lawful request, or to protect users and the service. We do not use these purposes as permission to disclose children’s information for unrelated advertising.

Scribble is designed for children, including children under 13. Parents or legal guardians authorize Family learning. For school-provided use, the school’s authorization must be for its educational purposes. Support calls, feedback, and marketing signup are optional and are not conditions of a child’s participation.

A parent or legal guardian may request access to, correction of, or deletion of their child’s information, and may refuse further collection or use. Contact hello@scribble.app with the account email and the request; do not send passwords, sign-in codes, or medical documents. We verify authority before disclosing or changing a child’s records. For school-managed records, we may coordinate with the school.

Stopping collection needed for lessons means the child cannot continue learning through Scribble. Removing an invited adult’s report access does not delete the child’s records. Leaving a Family or deleting one adult’s account does not automatically delete records shared with other authorized adults.

We retain information for the specific purposes described in this policy. Different records have different lifecycles:

• Profiles and learning history: kept to provide the child’s profile, continuing learning, and authorized historical reports. Profiles and authorized history remain visible after learning access ends. Request deletion of a child’s records through support; subscription cancellation in Stripe does not itself delete those records.
• Unfinished learning sessions: drafts are deleted on completion or explicit discard and become eligible for automatic cleanup after 14 days without a saved checkpoint. Completed learning history is separate from a draft.
• Family deletion: the owner can schedule deletion through Settings → Family & account with a 30-day cancellation period. Pending payments, active purchases, refunds, or unresolved payment reviews may need to be resolved first. Contact us directly about a child-data request rather than waiting for a billing issue to finish.
• Checkout information: we retain signup details for Checkout recovery, billing support and financial reconciliation. Abandoning or canceling Checkout does not automatically delete these records. Local signup details are removed when the Family’s data is purged; minimal financial receipts are retained separately. Contact us about deletion of personal information without deleting the whole Family.
• Shipping and purchase records: shipping setup is removed with the Family’s data when it is purged. Fulfillment exports have a 30-day deletion deadline. Minimal payment, refund, tax, and dispute records may be retained separately for accounting, legal obligations, and financial reconciliation; that does not require retaining a child’s handwriting history.
• Email list and support: you may unsubscribe or request deletion. We retain only what is needed to honor communication choices, resolve the request, and meet applicable legal or security obligations.

Deletion from active systems does not imply immediate deletion from every backup or from records a payment provider must retain independently. We restrict use of retained records to the purpose that requires keeping them. Contact us for a retention review or information about a particular record.

We use cookies or equivalent session storage to keep adults signed in and protect accounts. Google Analytics receives sanitized adult website visits and interactions, plus confirmed trial, purchase and subscription cancellation events. Meta receives confirmed trial and purchase events, amounts, and provider browser or ad-click identifiers. Meta website events also include the browser user agent required by that service. We do not send your IP address from our server or create a custom visitor ID. Names, emails, sign-in codes, magic links, form answers, shipping addresses and children’s learning records are excluded. Website measurement does not run on sign-in, dashboard or reporting pages. Do Not Track and Global Privacy Control disable measurement collection in your browser. You can also manage cookies through your browser settings. App diagnostics use an allowlist of events and properties; our app configuration disables session replay and person profiles and filters child names, emails, account identifiers, and raw submissions from those events.

Provider click context and conversion context on existing purchase records are retained for up to 90 days. Financial records follow their separate accounting retention requirements. We keep no separate website-event warehouse or attribution ledger. Google and Meta manage information they receive under their own privacy policies and applicable retention settings. Secure email-list recognition cookies last up to 30 days and may renew when you update your email-list preferences. Signing out clears email-list recognition.

We do not use children’s learning records for behavioral advertising or tracking across other companies’ apps or websites. We restrict access and use technical and organizational safeguards, but no service can guarantee absolute security.

We will update the date on this policy when it changes and provide additional notice or request consent when required for material changes. For privacy requests, contact Saegis LLC, trading as Scribble, at hello@scribble.app. Purchase and product support is available at support@scribble.app.