← Back to Scriptly
Privacy Policy
Last updated: October 2026
See also: Terms of Service · Cookie Policy · Acceptable Use Addendum
Plain-language summary (not a substitute for the policy below): We collect what's needed to run your account — your Google sign-in email, the documents you choose to upload, and basic security logs like IP address. Uploaded pages are sent to a third-party AI provider to be read and answered, at reduced resolution. You choose whether documents are saved to your account or kept on your device only. We don't sell your data, and we don't run ad trackers.
1. Who this policy covers
This Privacy Policy explains what personal information Scriptly ("the Service") collects, how it is used, who it may be shared with, and the choices you have. It applies to everyone who creates an account or otherwise uses the Service. It should be read together with our Terms of Service and Cookie Policy.
2. Information we collect
Account information
- Your email address and a stable account identifier, obtained through Google Sign-In (Scriptly does not set or store a separate password for Google accounts);
- Your plan tier, credit balance, usage history, and any payment status associated with your account;
- Preferences and settings you configure (handwriting style, default subjects, feature toggles, etc.).
Content you provide
- Handwriting samples you capture (individual letterforms, signature, and style settings) — used only to render text in your simulated handwriting;
- Documents or images you upload for the AI to read and answer;
- Anything you tell the optional Custom-mode assistant about yourself, if you choose to use it and enable "remembering" (see Section 9 of the Terms of Service for details on how this is used);
- Any custom instructions or notes you type when generating or editing a document.
Automatically collected information
- The IP address associated with your sign-ins and active sessions, retained for account security, fraud prevention, and enforcement of our Terms (see Section 10 of the Terms of Service);
- Basic technical logs (timestamps, request outcomes, error rates) used to keep the Service running and to diagnose problems;
- Essential cookies and local-storage values described in our Cookie Policy.
We do not use third-party advertising trackers, and we do not sell personal information to data brokers or advertisers.
3. How your documents are handled
When you upload a document or image for the AI to answer, a reduced-resolution copy is sent to a third-party AI vision provider (for example, Google's Gemini models, or another comparable provider selected automatically based on availability) so it can read the page and propose answers. The original, full-resolution file stays on the Service for rendering and export; it is not otherwise shared.
Whether your documents are saved to your account (so they sync across your devices) or kept only in the browser you're using is your choice, set the first time you upload something and adjustable at any time in Settings → Privacy. Documents kept "this browser only" are stored in that browser's local storage and are never uploaded to our servers for storage — only the reduced copy sent to the AI provider for that one analysis leaves your device.
4. How we use your information
- To create and operate your account, and to save your handwriting, documents, and settings if you choose cloud sync;
- To process uploaded pages through an AI provider and render the resulting answers in your handwriting;
- To personalize documents using details you've explicitly shared with the Custom assistant, if that feature is enabled;
- To process payments and manage your plan or credit balance;
- To secure the Service — detecting abuse, enforcing bans, and investigating suspected violations of our Terms;
- To communicate with you about your account (for example, a security notice or a change to these policies).
5. Who we share information with
| Recipient | What they receive | Why |
|---|
| Google (Sign-In) | OAuth authentication exchange | To verify your identity when you sign in |
| AI vision/chat provider(s) | A reduced-resolution copy of an uploaded page, or your Custom-mode message, at the moment you ask the Service to process it | To generate answers or a chat reply |
| Payment processor (Stripe) | Billing details you enter at checkout | To process plan and credit purchases — Scriptly never receives or stores your full card number |
| Cloudflare (hosting infrastructure) | All traffic to the Service, as our hosting/CDN provider | To run and secure the Service |
We do not otherwise sell, rent, or share your personal information with third parties for their own marketing purposes. We may disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of Scriptly or others.
6. Staff access
A small number of staff accounts can view account and usage information, and — depending on their role — take moderation actions such as adjusting a credit balance, issuing a ban, or reviewing an IP address associated with abuse. Every staff action that changes or accesses sensitive data is logged, and access is limited to what each staff role needs. See Section 10 of the Terms of Service for more detail.
7. Data retention
We keep your account information for as long as your account is active. If you delete your account, or ask us to, we delete or anonymize the personal information associated with it within a reasonable period, except where we are required or permitted to retain limited records (for example, security logs relevant to an active abuse investigation, or records needed for tax/payment compliance).
8. Your choices and rights
- Access and export — you can review your saved documents, settings, and usage from within your account at any time.
- Local-only storage — you can choose, per upload, to keep documents on your device only rather than syncing them to your account.
- Delete what the assistant remembers — individual facts the Custom assistant has stored can be removed one at a time, or all at once, from within Custom mode.
- Account deletion — you can request deletion of your account and associated personal data through the contact channel provided in the app.
Depending on where you live, you may have additional rights under applicable law (for example, the right to request a copy of your data or to object to certain processing). Contact us through the app to exercise these rights.
9. Children's privacy
The Service is not directed at children under the age required by their jurisdiction to consent to data processing on their own behalf, and it should only be used by a younger person with the involvement and consent of a parent or legal guardian, consistent with Section 1 of our Terms of Service. If we learn that we have collected personal information from a child without appropriate consent, we will take steps to delete it.
10. Security
We use industry-standard measures to protect your information, including encrypted connections (HTTPS) for all traffic, hashed credentials, and role-based access controls that limit what staff can see or do based on their assigned rank. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. The Scriptly iPhone and iPad app
The Scriptly app for iPhone and iPad uses the same accounts as the website. What the app does with your information:
- Your handwriting stays on your device. The letters you draw, your styles, fonts you create and the worksheets you save are stored on your phone or iPad. They are not uploaded. Deleting the app removes them.
- Sign-in. You can use a username and password, Sign in with Apple, Sign in with Google, or a one-time code from the website. For a username and password we store the username and only a salted hash of the password (never the password itself), and we temporarily lock a username after repeated wrong passwords. Your sign-in token is kept in the iOS Keychain.
- Date of birth and preferences. If you enter a date of birth or choose preferences when you first open the app, they are stored on your device only and are not sent to us.
- Worksheet photos and the AI helper. The AI helper is optional. Only after you tap Allow on the consent screen does the app send a reduced copy of the page you chose, and the instructions for it, to our server, which passes them to an AI service (Google Gemini; if it is unavailable, another AI provider) to draft answers. We do not store the page image; we keep a record of each request, including the AI's reply, so a failed request can be refunded. You can withdraw consent at any time in Account › Worksheets, and nothing is sent without it. Please do not send pages containing sensitive personal information.
- Files shared to Scriptly. A photo or PDF you share to Scriptly from another app is opened on your device and is only sent for AI processing if you choose to scan it and have allowed it.
- Free credits. New accounts get free credits to try the AI helper. This version of the app has no in-app purchases.
- Deleting your data. In the app, go to Account › Account › Delete my account. This permanently deletes your account and the data we store for it, including documents, assistant memory and sign-in records.
- Tracking. The app has no advertising, no analytics SDKs and no tracking.
12. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will make a reasonable effort to notify users, for example through an in-app notice. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
13. Contact
Questions about this policy, or requests relating to your personal information, can be sent to studentoclockapp@gmail.com. You can also reach us from the support page: scriptlyai.pages.dev/support.