Privacy Policy

Last updated: July 10, 2026

This Privacy Policy explains how Scribbl ("Scribbl," "we," "us," or "our") collects, uses, shares, and protects information when you use our mobile application (the "App"). Scribbl is developed and operated by Sean Boyer.

By using Scribbl, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your email address and a securely hashed password (or authentication token if you sign in via a third-party provider). Account authentication is handled through Supabase, our backend infrastructure provider.

1.2 User Content

Scribbl allows you to upload drawings, sketches, and photos of artwork so that our AI features (such as AI Art Coach, AI Critique, and Break It Down) can provide feedback. This content is stored securely and is used only to provide the features you request.

1.3 AI Chat Interactions

Messages you send to the AI Art Coach, along with any images submitted as part of that conversation, are processed by our third-party AI service provider in order to generate a response. We do not use your chats or uploaded artwork to train AI models beyond what is necessary to provide you the requested feature in the moment.

1.4 Subscription and Payment Information

If you purchase a subscription, the transaction is handled entirely by Apple's App Store and our subscription management provider, RevenueCat. We never see or store your payment card details. We receive limited information from RevenueCat (such as subscription status and renewal dates) so we can grant you access to Pro features.

1.5 Information We Do Not Collect

We do not collect location data, contacts, advertising identifiers, or any data beyond what is described above. We do not use third-party advertising or analytics SDKs that track you across other apps or websites.

2. How We Use Information

• To create and maintain your account
• To provide core App features, including AI-powered feedback on your artwork
• To process and manage your subscription
• To respond to support requests you send us
• To maintain the security and integrity of the App

3. How We Share Information

We do not sell your personal information. We share information only as follows:

• Supabase — our database and authentication provider, which stores your account information and uploaded content under industry-standard security practices (including Row Level Security).
• Our AI service provider — to process chat messages and uploaded artwork solely to generate the feedback or response you requested.
• RevenueCat and Apple — to process and validate subscription purchases.
• Legal requirements — if required to comply with a legal obligation, protect our rights, or respond to a valid legal request.

4. Children's Privacy

• We only collect the minimum information necessary to operate the App (an email address to create an account, and content the user chooses to upload for feedback).
• We do not knowingly use children's information for advertising, and we do not serve behavioral or targeted ads to any user.
• We do not knowingly sell or share children's personal information with third parties, other than the service providers described in Section 3 who are necessary to operate core App features.
• Parents or guardians who believe their child has provided us with personal information without appropriate consent may contact us at the email below to review, request deletion of, or restrict further collection of that information.
• If we learn that we have collected personal information from a child in a manner inconsistent with COPPA, we will take steps to delete that information.

If you are a parent or guardian and have questions or concerns about your child's use of Scribbl, please contact us — see Section 8 below.

5. Data Security

We use commercially reasonable safeguards to protect your information, including encrypted storage, Row Level Security policies on our database, and secure handling of API credentials. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account information and uploaded content for as long as your account remains active. If you delete your account, we will delete your personal information and uploaded content within a reasonable period, except where retention is required to comply with legal obligations or resolve disputes.

7. Your Rights and Choices

Depending on where you live, you may have rights under laws such as the Colorado Privacy Act (CPA), the California Consumer Privacy Act (CCPA), or the EU/UK GDPR, including the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Withdraw consent or opt out of certain processing
• Appeal a decision we make regarding your privacy request

You can exercise these rights at any time by emailing us at the address below, or by deleting your account directly within the App's Settings screen.

8. Contact Us

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you within the App or by email before the changes take effect. Continued use of Scribbl after changes take effect constitutes acceptance of the updated policy.