Privacy Policy

Last updated November 13, 2026

What we collect, what we do with it, and your choices.

What we collect

Your Google account basics. When you sign in with Google we receive your name, email address, profile picture and Google account ID. We don’t ask for access to your Gmail, Drive, contacts or anything else in your Google account.
Your passkeys. If you save a passkey, we keep its public key, which keychain it’s in, and when it was added and last used. Its private key and your Face ID, Touch ID or PIN stay on your device or in your keychain, and never reach us.
Your Apple ID basics. When you sign in with Apple we receive your email address (the one you choose to share with us), your name the first time you sign in, and an Apple account ID. Signing in with Google and with Apple as the same email address opens the same Scriven account.
Sharing. When you share a document, we keep who it’s shared with and whether they can edit it, and the people you’ve shared with, so you can find them again. The document’s history records who made each change.
Your notebooks. When you’re signed in on the iPad, your notebooks sync to Scriven so they’re on your other devices and the web: their pages and ink, text you type, the PDFs, photos and pictures you add, and the recordings kept with them. Recordings are transcribed on your iPad. A recording you share as a lesson link can be watched by anyone with the link until you stop sharing it.
Comments. Comments and replies you write in a shared notebook are kept with the notebook, with your name, and the people it’s shared with see them.
What you ask the AI. What you circle, write or say to the Magic pen, Talk, Live Notes or Tutor, and the part of the page it needs, is sent to Scriven to work out the answer (see who we share it with, below).
Messages to us. When you write to us, we keep your message and your email address in our support inbox so we can answer you.
What you give Scriven to write. PDFs, photos and other files you upload, text and LaTeX you type, and the pages Scriven writes back for you.
Your handwriting. If you add a hand, the sample sheets you write for it with a pen (every stroke, with its pressure and tilt), and the settings you choose for it. To learn your handwriting from what you write, your iPad reads your notebooks, and we keep what it found on each page (copies of your letters, with the words they’re in) so a new iPad picks up where it left off, and, on a paid plan, the letters it chose to make your font from. You can turn this off, or have all of it deleted (Forget everything), in Your handwriting on the iPad.
Purchases. When you buy a plan or credits, we keep what you bought, when, and what it cost, with your account. On the website, payment is handled by Stripe; in the iPad app, by Apple, which sends us a signed record of the purchase (never your Apple Account or card details). We use this to give you what you bought and to keep the records of payments the law requires.
Settings. Your specialties, paper, ink and similar preferences.
Feature requests you send. When Scriven can’t do something and you choose to tell us, we keep the title and details you send, nothing else, and not with your account. If you ask to be emailed when it’s ready, we keep it with your account so we can. Testing a test version of the iPad app, you can also choose to send what you asked and Scriven’s answer with it. On the iPad, the offer to send one appears only once you turn it on in Settings, Privacy (it’s on for testers).
Feedback on an import. After you bring notes in from another app on the iPad, you can tell us how it went with a thumbs up or down (or choose not to be asked again). With your answer we keep the import’s details (which app and version the notes came from, how many pages, strokes and pictures came in, and how long it took, never what’s in your notes), and, only if you add them after a thumbs down, what you write and the file you imported, so we can find what went wrong. It’s linked to your account if you’re signed in, and to a random number for this install if you aren’t. We use the file only to fix the import and delete it after 30 days; the rest is deleted after 180 days, and all of it when you delete your account. It’s sent only when you answer, whatever you chose about usage reports.
How you use Scriven. Which features you use and when (for example, opening a PDF or opening a page of the app), the country your connection comes from, and your device and browser type. We use this to keep Scriven running well and to decide what to improve. On the iPad this also covers how the app performs: how long things take, which version and model of iPad you’re on, and how long you use it. It’s names and numbers, never what you write or say. It’s linked to your account if you’re signed in, and to a random number for this install if you aren’t. We keep it for 45 days. On the iPad we ask first: nothing is sent until you say yes when you first open the app, and you can change your answer at any time in Settings under Privacy.
When something goes wrong. If Scriven hits an error while you use it, we keep a report so we can fix it: what went wrong and where, the page or document it happened on, what we showed you, your account, and your browser and device type. A report can quote the bit of text the error was about, but never includes your files. Reports are deleted after 60 days, and when you delete your account they no longer say who you are. If the iPad app crashes or stops responding, the report also says what the app was doing just before, by name, and the technical details Apple provides. On the iPad these are sent only if you said yes to the question above, and turning it off stops them too.
Visits to our website. When you visit scriven.io, we count the pages you open, how long and how far down you read them, what you click there (like a link or a button, never what you type), the site that sent you, your approximate location (country, region and city, from your connection), and your device, browser, screen size and language. We do this without cookies and without storing anything on your device. To tell visits apart, your connection’s address and browser are turned into an anonymous code that changes every day; the address itself isn’t kept, so we can’t tell who you are or follow you from one day to the next.

How we use it

Only to run Scriven for you: to sign you in and keep you signed in, to solve, check and write out what you upload, to write in your hand, and to keep your work and settings in sync between your devices, and to make Scriven better through the automated review below. We don’t sell your information, and we don’t use it for advertising.

Automated quality review

To find what goes wrong and improve Scriven, automated tools, including AI models, may read your chats with the assistant and the pages it writes for you. This is only for quality and improvement. No person reads your chats or documents in this review: the Scriven team sees only what the tools report back, such as which kinds of requests went wrong and how often. The review doesn’t record who you are. You can turn it off in Settings, under Account.

Google user data

Scriven uses Google sign-in only to confirm who you are. The name, email, picture and account ID Google shares are used to create and identify your Scriven account and to show you who you’re signed in as. They aren’t shared with anyone except the service providers below that run Scriven, and they aren’t used for advertising or to train AI models. You can remove Scriven’s access at any time from your Google account’s third-party connections.

Apple user data

Scriven uses Sign in with Apple only to confirm who you are, in the same way as Google sign-in. You can add several Google and Apple accounts to one Scriven account, even with different email addresses; we keep which ones you’ve added and their email addresses, and write to the address of the one you make primary. If Apple tells us you’ve stopped using Sign in with Apple for Scriven or deleted your Apple Account, we unlink that Apple ID from your Scriven account. You can stop using it any time in your Apple Account settings under Sign in with Apple. When you sign in with Apple, Apple also gives us a token for your sign-in, which we keep only so that, when you delete your Scriven account, we can tell Apple to stop Sign in with Apple for Scriven. If that doesn’t work, we tell you how to stop it yourself.

Documents you share

A document you share is visible to the people you share it with, along with your name and email address, and theirs to each other. They see its full history and who made each change. Editors can change it, and the assistant work they ask for comes out of their own plan. You can remove someone’s access at any time; deleting a document deletes it for everyone. We email people on Scriven when a document is shared with them (not more than once a day for the same document), and you when they accept. Someone not on Scriven isn’t emailed: the document waits for them in Shared with me if they join with that address.

In a shared notebook you can report a comment, an invitation or a person, and block someone. A report sends us what you reported as it stood (such as the comment or the invitation), who it came from, the notebook it’s in, your account, and any reason or note you give. Only the Scriven team sees reports; we review each one within 24 hours and keep it as long as we need to act on it. We keep the people you block with your account, so they can’t reach you again, until you unblock them. Comments, and the title of a notebook you share, run through a basic filter (a list of words kept by us; no AI reads them) before others see them. When you delete your account, the comments you wrote, and the comment threads you started, are deleted with it, your blocks are deleted, and reports keep no trace of you: one you made no longer says who made it or your note, and one about you no longer says who it was about or what you wrote.

AI you connect to Scriven

You can connect an AI of your own, such as Claude or ChatGPT, in Settings under Connect AI. It can read your documents, recordings and references, and if you let it edit, change them. What it reads goes to the company that runs that AI, under that company’s terms: it’s your choice to connect it, and it isn’t one of our service providers. You can make a connection read only, or disconnect it, at any time.

A connected AI can also ask where you are in a notebook right now, so it knows what you mean by “this”: the document and page you have open on your iPad or the website, what you’ve lassoed, circled or selected, what you’ve highlighted on that page, and the lines you just wrote. It sees this only when it asks, and each time shows in that connection’s activity. It only ever sees your own devices, never where anyone you share a notebook with is. This is on for a new connection, and you can turn it off for each one in Settings under Connect AI. Where you are in a notebook is held in memory for about a minute and a half after your device last reports it, and isn’t stored.

We keep a record of each request a connected AI makes: which tool it used, on which document, which AI it was, how long it took, whether it worked, and any error we told it. It doesn’t include what the AI sent, though an error can quote a bit of text it was about. We use this to fix problems and make connected AIs work better, and delete it after 60 days.

If you’re a tester

On the Tester plan, which we give by invitation, the Scriven team can open your documents, their history, the files you added, your chats with the assistant and what you ask the Magic pen, to find and fix problems and make Scriven better. Nobody else can. We tell you when your plan becomes Tester, and if you’d rather keep your work private you can ask to move to another plan at any time.

On the iPad, a tester’s app also records what they do in it, so we can see what happened: what they tap, what they ask, what the AI answers, how long each step takes, and the app’s own log. A tester can press Report this to send us the last five minutes along with a picture of the screen, and a rating or note if they like. If the app crashes, it files the same report by itself, without the picture. This stays on for as long as you’re on the Tester plan. We keep it for 120 days, or until you delete your account.

Who we share it with

We use a small number of service providers to run Scriven: cloud hosting and storage for our servers and your work (Fly.io, Vercel and Cloudflare), the AI models from OpenAI and Google that answer what you ask, solve and check problems and run the review above, and Amazon Web Services to send our emails. What you circle, ask or say to Scriven’s AI, and the part of your page or file it needs, is sent to OpenAI or Google for that. These providers process your data only on our behalf and only to provide the service, and they give it the same or equal protection as this policy does.

On the iPad, nothing goes to the AI models until you’ve agreed to a notice that names OpenAI and Google, shown before you first use cloud AI. You can turn cloud AI off at any time in Settings under Magic pen, AI features.

Payments are handled by Stripe on the website and by Apple in the iPad app. Each is the seller of what you buy and handles your payment details under its own privacy policy; we receive only the record of what you bought. When web search is on for a document, Scriven may send a short search question drawn from your request or file (never the file itself) to our AI provider’s web search, to look up something a problem needs; you can turn it off for any document. We’ll also disclose information if the law requires it.

Cookies

We use only essential cookies, our own:

Signing in. One keeps you signed in, for 30 days, and scriven.out notes when this browser last signed out, for 30 days, so an old session can’t come back. While you sign in, or add another sign-in to your account, a few more last 15 minutes or less: they check the sign-in really came from you, and carry an invite or a beta offer through Google or Apple.
Beta offers. scriven_promo remembers the beta offer from a link you opened, for 30 days, so the offer applies when you sign in.
Invites. scriven_ref remembers whose invite link you came through, for 30 days, so you both get your credits when you sign up.
Once, after signing in. scriven_intro and scriven_passkey_offer, for 14 days at most, let the app show its welcome to a new account and offer a passkey once; each is gone as soon as it’s used.

We don’t use advertising or tracking cookies, and counting visits to our website uses no cookies at all.

Keeping and deleting your data

We keep your account and work while your account is open. You can delete your account and everything in it at any time: in the iPad app, in Settings under Account (Delete Account), or on the website, in Settings under Account, where we email you a link to confirm. It’s deleted straight away. A plan you pay for on the website is cancelled first. A plan billed by Apple can only be cancelled with Apple, so deleting your account doesn’t cancel it: cancel it under Subscriptions in your Apple Account. After that we keep only records of payments, which the law requires, and, for a plan billed by Apple, a record of that subscription with nothing of yours on it, so it can be given back to you if you come back and restore your purchases in the iPad app. You can also ask us by emailing privacy@scriven.io, and we’ll do it within 30 days.

Security

Data is encrypted in transit, and access to it is limited to what’s needed to run Scriven. No system is perfectly secure, but we work to protect what you trust us with.

Children

Scriven is not meant for children under 13, and we don’t knowingly collect their information. In the EU and UK, where the age a person can agree to this on their own is set by country (up to 16), younger users need a parent or guardian’s consent.

If you’re a parent and think your child under 13 has an account, email privacy@scriven.io and we’ll delete it and everything in it. If we learn an account belongs to a child under 13, we delete it.

Changes

If we change this policy we’ll update the date at the top, and tell you in the app if the change is significant.

Contact

Help with Scriven: support@scriven.io
Privacy and your data: privacy@scriven.io
Legal: legal@scriven.io