Privacy Policy
Last updated: March 27, 2026 · Effective: March 27, 2026
1. Introduction
Scription ("we," "our," or "us") is an AI-powered note-taking application that records audio, transcribes it using artificial intelligence, and provides intelligent features such as summaries, action items, and translations. Scription is available on iOS and Android under the bundle identifier com.tryscription.app.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data. By using Scription, you agree to the practices described in this policy.
2. Information We Collect
Account Information
- Email address — used for account creation and authentication
- Authentication tokens — managed securely by our authentication provider
Audio & Content Data
- Audio recordings — captured via your device microphone when you initiate a recording
- Transcripts — generated from your audio by AI transcription services
- AI-generated content — summaries, action items, key points, tags, titles, and other outputs produced by AI processing of your transcripts
- Uploaded documents — PDF files you import for text extraction
Usage Data
- Feature usage counts — number of recordings, uploads, and PDF imports per month (used to enforce tier limits)
- Subscription status — whether you are on the free or premium plan
Device Information
- Device type and OS version — collected automatically by the platform (iOS/Android)
- App version — to ensure compatibility and support
3. How We Handle Audio Data
Audio is the most sensitive data Scription handles. Here is exactly what happens:
- Recording — Audio is captured locally on your device using your microphone. Recording only occurs when you explicitly tap the record button.
- Upload — When you stop recording, the audio file is uploaded over an encrypted HTTPS connection to our server for transcription.
- Transcription — Our server sends the audio to OpenAI's Whisper API, which converts speech to text. OpenAI processes the audio transiently and does not use it to train their models (per their API data usage policy).
- Storage — The resulting transcript is stored in your account. Audio files are stored locally on your device. You may optionally enable cloud audio backup, which stores encrypted audio in our cloud storage.
- Deletion — When you delete a recording, both the transcript and any cloud-stored audio are permanently removed.
4. How We Use Your Information
| Data | Purpose |
|---|---|
| Email address | Account creation, authentication, password reset, critical service notifications |
| Audio recordings | AI transcription and processing |
| Transcripts | Display to you, AI feature processing (summaries, action items, etc.) |
| AI-generated content | Providing you with enriched notes, summaries, and insights |
| Usage counts | Enforcing free-tier limits (15 minutes/month recording) |
| Subscription status | Unlocking premium features for paying subscribers |
| Device info | App compatibility and debugging |
We do not use your data for advertising, profiling, or selling to third parties.
5. How We Share Your Information
We share your data only with the service providers necessary to operate Scription. We never sell, rent, or trade your personal information.
| Provider | Data Shared | Purpose |
|---|---|---|
| OpenAI | Audio files, transcript text | Transcription (Whisper) and AI features (GPT) |
| Supabase | Email, transcripts, AI content, usage data | Authentication, database, cloud storage |
| RevenueCat | App user ID, purchase receipts | Subscription management |
| Apple / Google | Payment information (handled by them directly) | In-app purchase processing |
| Render.com | Audio files (in transit) | Server hosting for transcription pipeline |
We may also disclose information if required by law, court order, or to protect the safety of our users.
6. Third-Party Services
Each third-party provider has their own privacy policy governing how they handle data:
- OpenAI — openai.com/policies/privacy-policy
OpenAI's API data usage policy states that data submitted via the API is not used to train their models. - Supabase — supabase.com/privacy
- RevenueCat — revenuecat.com/privacy
- Render — render.com/privacy
- Apple — apple.com/legal/privacy
- Google — policies.google.com/privacy
7. Data Storage & Security
We take the security of your data seriously:
- Encryption in transit — All data is transmitted over HTTPS/TLS encrypted connections.
- Row-Level Security — Our database enforces row-level security policies, ensuring every user can only access their own data. Cross-user data access is architecturally impossible.
- Authentication — All API requests are authenticated using secure tokens (JWT).
- Server security — Our server authenticates all incoming requests with API keys and enforces rate limiting to prevent abuse.
- Local storage — Audio files stored on your device are protected by your device's built-in security (passcode, biometrics, encryption).
Our infrastructure is hosted in the United States via Supabase (AWS) and Render.com.
8. Data Retention
- Active account — Your data is retained for as long as your account is active.
- Recording deletion — When you delete a recording, the transcript, AI-generated content, and any cloud-stored audio are permanently deleted from our servers.
- Account deletion — When you delete your account (available in Settings), all associated data is permanently removed within 30 days. This includes your email, all transcripts, AI content, usage data, and cloud audio files.
- Audio on OpenAI — Audio sent to OpenAI for transcription is processed transiently and not retained by OpenAI after processing is complete.
9. Your Rights & Choices
You have control over your data:
- Access — You can view all your recordings, transcripts, and AI content within the app at any time.
- Export — You can export individual recordings as PDF documents.
- Deletion — You can delete any individual recording or your entire account from within the app.
- Microphone access — You can revoke microphone permission at any time via your device settings. The app will not record without explicit permission.
- Cloud sync — Cloud audio backup is optional. You can use Scription with local-only storage.
To exercise any right not available directly in the app, contact us at privacy@tryscription.io.
10. GDPR (European Users)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):
Legal Basis for Processing
| Processing Activity | Legal Basis |
|---|---|
| Account creation & authentication | Contract performance |
| Audio transcription & AI features | Contract performance (delivering the service you signed up for) |
| Usage limit enforcement | Legitimate interest (preventing abuse) |
| Service notifications | Legitimate interest (operational communication) |
Your GDPR Rights
- Right of access — Request a copy of all personal data we hold about you.
- Right to rectification — Request correction of inaccurate data.
- Right to erasure — Request deletion of your data (also available via account deletion in-app).
- Right to data portability — Request your data in a machine-readable format.
- Right to restrict processing — Request that we limit how we use your data.
- Right to object — Object to processing based on legitimate interest.
- Right to lodge a complaint — You may file a complaint with your local data protection authority.
To exercise any of these rights, email privacy@tryscription.io. We will respond within 30 days.
11. CCPA (California Users)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- Right to know — You may request the categories and specific pieces of personal information we have collected about you.
- Right to delete — You may request deletion of your personal information.
- Right to opt-out of sale — We do not sell your personal information. We never have and never will.
- Right to non-discrimination — We will not discriminate against you for exercising your CCPA rights.
Categories of Personal Information Collected
| Category | Examples | Sold? |
|---|---|---|
| Identifiers | Email address | No |
| Audio/visual data | Audio recordings | No |
| Internet activity | App feature usage counts | No |
| Commercial information | Subscription status | No |
To exercise your CCPA rights, email privacy@tryscription.io.
12. Children's Privacy
Scription is not intended for use by children under the age of 13 (or under the age of 16 in the EEA). We do not knowingly collect personal information from children under these ages.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@tryscription.io and we will promptly delete it.
13. International Data Transfers
Your data is processed and stored in the United States. If you are located outside the United States, your data will be transferred to and processed in the US.
For users in the EEA/UK, these transfers are conducted in compliance with GDPR using appropriate safeguards, including the service providers' adherence to standard contractual clauses and data processing agreements.
14. Subscriptions & Payments
Scription offers a free tier and a premium subscription:
- Free — 15 minutes of recording per month, basic AI features
- Premium — $7.99/month or $59.99/year, unlimited recording, all 16 AI features
We never see or store your payment information. All payments are processed entirely by Apple (App Store) or Google (Google Play). We receive only a confirmation of your subscription status via RevenueCat, which manages subscription state. Your credit card number, billing address, and other financial details are handled exclusively by Apple or Google.
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify you via in-app notification or email for significant changes
- Provide at least 30 days' notice before material changes take effect
Your continued use of Scription after changes become effective constitutes acceptance of the updated policy.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, contact us at:
- Email: privacy@tryscription.io
- Website: tryscription.io
We aim to respond to all privacy-related inquiries within 30 days.