Privacy Policy
Updated August 6, 2026
Scribbble is an application that transforms handwritten notes into structured digital notes. Your privacy is a core pillar of the product: your notes are private and are never used to train AI models.
Data Controller
Mikko Hyvärinen
mikko@aedis.fi
What Data We Process
| Data | Purpose | Storage Location |
|---|---|---|
| Apple ID email address | Sign-in and account identification | Supabase (EU, Stockholm) |
| Scanned images | Note creation and displaying original pages | Supabase Storage (EU, Stockholm) |
| Note content (text, decisions, action items) | Core app functionality and search | Supabase (EU, Stockholm) |
| Monthly page counter | Tracking free tier quota (15 pages/month) | Supabase (EU, Stockholm) |
| Subscription details (Scribbble Pro) | Verifying subscription status | Processed by Apple App Store; we do not see or store your payment card details |
We do not collect location data, we do not use analytics or advertising tracking, and we never share your data with third parties for marketing purposes.
AI Processing
When you scan a page, the image is transmitted via our server to the Google Gemini API, which recognizes handwriting and structures the note. We use the Gemini API with settings ensuring that Google does not use submitted data to train its models. The image and recognized text are saved only to your personal account.
Data Retention and Deletion
- Notes and images remain stored until you delete them yourself in the app.
- When you delete a note, all associated decisions, action items, and search index entries are also deleted.
- You can request the deletion of your entire account and all associated data by emailing mikko@aedis.fi. Deletion will be completed within 30 days.
Your Rights (GDPR & Privacy Rights)
You have the right to access your data, rectify it, request its erasure, and export it (using the app's export features: text, PDF, and original images). For any inquiries or requests, contact the email address above.
Service Providers
- Supabase (database, file storage, authentication) — Server located in the EU (AWS eu-north-1, Stockholm)
- Google Gemini API (handwriting recognition) — Processing without model training usage
- Apple (Sign in with Apple, App Store payments and subscriptions)