Welcome back

Last updated: August 2026

1. Introduction

Welcome to Scrivalo. We are committed to protecting your personal information and your right to privacy. This policy explains what data we collect, how we store it, and your rights regarding that data.

2. Information We Collect

We collect only what is necessary to provide the Scrivalo service:

• Account information — When you sign in or register, we collect your email address and authentication credentials through Supabase Auth. If you choose to sign in with Google, we also receive your name and profile photo from Google.
• Notes, tasks & journal content — Notes, journal entries, tasks, and folders you create are stored locally in your browser (localStorage) for guests. When you are signed in, this content is also synced to our Supabase (PostgreSQL) database to enable access across your devices.
• Workspace pages & files — Workspace pages, their folder structure, and the files you upload to them are stored locally on your device using your browser's IndexedDB. When you are signed in, this structure and the file contents are also synced to Supabase, using Supabase Storage for the file data itself, so they remain available across your devices.

We do not collect usage analytics, behavioural tracking data, or any information beyond what is necessary to provide the service.

3. How We Use Your Data

Your data is used solely to operate Scrivalo:

• To authenticate you and maintain your session across devices.
• To store, sync, and retrieve your notes, tasks, and documents.
• To keep your Workspace files and folders available across the devices you're signed in on.

We do not use your data for advertising, profiling, or marketing of any kind.

4. Data Storage & Security

Scrivalo uses a two-tier storage model:

• On-device storage — Guest data, and a local cache of your content for offline access, is stored in your browser's localStorage and IndexedDB. This data remains on your device.
• Cloud storage (signed-in users only) — Account credentials, notes, tasks, folders, and Workspace files are stored with Supabase, our cloud infrastructure provider. Access is enforced with Row Level Security, so your data is only ever readable by your own account. All cloud data is transmitted over encrypted connections (HTTPS/TLS).

5. Data Sharing

We do not sell, rent, or share your personal data with any third parties for commercial purposes. For signed-in users, account, notes, and file data is stored with Supabase, Inc. solely as our cloud infrastructure provider, subject to Supabase's Privacy Policy. If you sign in with Google, authentication is also subject to Google's Privacy Policy.

6. Data Retention & Deletion

• On-device data — Stored until you clear your browser data or uninstall the app. You can delete individual files and notes at any time within Scrivalo.
• Cloud data — Retained for as long as your account is active. You may request deletion of your account and all associated cloud data at any time through the account settings.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Export your notes and documents at any time using the in-app export feature.
• Withdraw consent and delete your account.

8. Children's Privacy

Scrivalo is not directed at children under the age of 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent revision at the top of this page. Continued use of Scrivalo after any changes constitutes your acceptance of the updated policy.