Privacy Policy

At Scribbin, we take your privacy seriously. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our website and services. Scribbin is based in the United Kingdom, and we handle personal data in line with the UK GDPR and the Data Protection Act 2018.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password, display name
• Profile Information: Profile picture, timezone, language preferences
• Payment Information: Processed securely through Stripe (we do not store credit card details)
• Story Content: Text prompts, story outlines, uploaded images, generated stories and illustrations
• Shipping Information: Address details for print orders (processed through Prodigi)

1.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, actions taken
• Device Information: Browser type, device type, operating system, IP address
• Cookies: A small number of strictly necessary cookies that keep you signed in and keep the service secure (see our Cookie Policy)
• Log Data: Access times, error logs, API requests

2. How We Use Your Information

We use collected information to:

• Provide Services: Generate stories, create illustrations, process orders, deliver content
• Account Management: Create and maintain accounts, authenticate users, manage subscriptions
• Payment Processing: Process payments, manage Story Tokens, handle refunds
• Improve Our Service: Understand how the app is used so we can fix problems and make Scribbin better (we do not use your stories or photos to train AI models)
• Communications: Send transactional emails, notifications, service updates
• Marketing: Send promotional emails (with your consent, unsubscribe anytime)
• Safety & Security: Prevent fraud, detect abuse, ensure child safety, enforce Terms of Service
• Legal Compliance: Comply with legal obligations, respond to lawful requests

3. How We Share Your Information

3.1 Third-Party Service Providers

We share information with trusted third parties who help us operate our services:

We only share what each provider needs to do its job, and we do not sell your personal information to anyone.

3.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal process, court orders, or government requests
• Enforce our Terms of Service and other agreements
• Protect the rights, property, or safety of Scribbin, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Report suspected child abuse or safety concerns to authorities

3.3 Business Transfers

If Scribbin is acquired or merged with another company, your information may be transferred as part of that transaction.

4. Data Retention

We retain your information for as long as necessary to provide services and comply with legal obligations:

• Account Data: Until you delete your account, plus 30 days for backup retention
• Story Content: Until you delete stories, or account deletion + 30 days
• Payment Records: Up to 7 years, to meet UK tax and accounting requirements
• Usage Logs: 90 days unless needed for fraud investigation
• Marketing Emails: Until you unsubscribe

5. Your Privacy Rights

5.1 Access and Control

You have the right to:

• Access: View your personal information in account settings
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Export: Download your stories and data
• Opt-Out: Unsubscribe from marketing emails

5.2 Where You Live

United Kingdom: We are based in the UK and handle personal data under the UK GDPR and the Data Protection Act 2018. As well as the rights above, you can object to certain uses of your data, ask us to restrict processing, and complain to the Information Commissioner's Office (ICO) at ico.org.uk. We'd appreciate the chance to put things right first, so please contact us before going to the ICO.

European Union / EEA: The EU GDPR gives you the same core rights, including data portability and the right to complain to your local data protection authority.

California (USA): California residents have the right to know what personal information we collect, to request deletion, and to opt out of the "sale" of personal information. We do not sell your personal information.

Elsewhere: Wherever you live, you can contact us to access, correct, or delete your information, and we'll help in line with your local laws.

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: HTTPS/TLS for data in transit, encryption at rest for sensitive data
• Authentication: Secure password hashing, optional 4-digit PIN for child lock
• Access Controls: Limited employee access to personal data
• Monitoring: Regular security audits and vulnerability assessments
• Incident Response: Procedures for handling data breaches

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Children's Privacy

Scribbin is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately at privacy@scribbin.com and we will delete it.

Parents and guardians are responsible for supervising children's use of stories created on Scribbin.

8. International Data Transfers

We are based in the UK, and some of the trusted providers who help us run Scribbin (listed in section 3) are based in the United States and elsewhere. This means your information may be transferred to and processed in countries outside the UK and EEA. Where we do this, we put appropriate safeguards in place, such as:

• The UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses
• EU Standard Contractual Clauses for transfers from the EEA
• Transfers to countries the UK or EU recognises as offering an adequate level of protection

9. Cookies

We use only a small number of strictly necessary cookies to keep you signed in and to keep the service secure. We do not use advertising or tracking cookies. For details, please see our Cookie Policy.

10. Do Not Track

Because we don't track you across other websites or use advertising cookies, there's nothing for a "Do Not Track" signal to switch off. You can still manage cookies through your browser settings at any time.

11. Third-Party Links

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on our website. Continued use after changes indicates acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Privacy & data protection: privacy@scribbin.com
General enquiries: hello@scribbin.com
Website: https://scribbin.com