Scriptorium — Privacy Policy

Last updated: 31 October 2026

Scriptorium is an app for iPhone and Android, with a companion website, that trains recognition of the alphabets and core vocabulary of research languages. It is built and operated by Alexander Wade. This policy explains what the app collects, why, who else can see it, and how to get rid of it.

Contact: scriptoriumlanguages@gmail.com

The short version

Scriptorium collects the information needed to keep your progress, to let you find and connect with other learners, and to send you the notifications you asked for. It does not track you, does not show ads, does not use analytics or advertising SDKs, and does not sell or share your information with data brokers or advertisers. You can delete your account from inside the app. The retention and deletion section below explains what is removed and which records can remain.

How you sign in, and what that gives us

You can sign in three ways.

Sign in with Apple. The app asks Apple only for your name. It does not request your email address, and Apple therefore never sends one — not even a private relay address. We receive an Apple-issued identifier for your account and the name you allow Apple to share. On Android, Sign in with Apple opens a page on the Scriptorium website that makes the same name-only request and hands the result back to the app.

Sign in with Google. Google returns your email address, your name, and your Google profile picture to us. On iPhone this uses Google's official Google Sign-In SDK; on Android it uses Android's own Credential Manager with Google's sign-in.

Email. You enter your email address and we send you a sign-in link.

If you would rather not give an email address at all, use Sign in with Apple. It is offered first for that reason.

What Scriptorium stores

Your profile. A display name, a handle you choose, your birth year, an optional profile photo, and — all optional — a city, state and country selected from lists, a sex, an organization such as a school or church, and a name prefix or suffix. Your birth year is required because ordinary personal Scriptorium accounts are for people aged 13 and over: we check the year against that line, and if it falls below it the year is never stored and the account is removed. City, state and country are typed or chosen by you; the app never reads your device's location and has no location permission. Sex is optional, can be skipped, and is collected only to understand who studies these languages. None of these changes anything about your lessons.

Your progress. Which letters and words you have studied, how far each has advanced, your streak, your points, how long you have spent, and a periodic snapshot of that history so a chart can be drawn.

Your connections and cohorts. Connection requests and accepted connections, cohorts you own or belong to, your role in them, and any posts, replies, or mentions you write on a cohort message board.

Things you send us on purpose. Feedback notes, reports that a word's meaning looks wrong, and reports about another person, a cohort or a post. A report stores the reason you gave, any note you wrote, and a copy of the reported content taken at the moment you reported it — so that deleting the content afterwards does not erase what was flagged. If you block someone, we store that you did.

Diagnostic information attached to feedback. When you submit feedback inside Scriptorium, the app attaches its version, build number and your phone's iOS or Android version. If you send feedback through TestFlight, Apple may attach the app version and build, device and OS details, app uptime, battery and storage levels, connection information, time zone, screen resolution and crash log. If you test the Android app through Google Play, feedback you send through the Play Store reaches us through Google. This information is collected when you choose to send feedback, not as background analytics.

Notification routing. If you turn on notifications, a device token is issued for your device and we store it so we can deliver a notification to you: on iPhone by Apple, on Android by Google's Firebase Cloud Messaging. If the token stops working, we disable it. On Android, Firebase may create its token, and an identifier for that installation of the app, when the app first opens; we store the token only if you turn notifications on.

Your plan, if you pay. You can pay for Scriptorium in the iPhone app, through Apple; in the Android app, through Google Play; or on the website, through Stripe. From Apple we receive which plan you chose; when it started, renews, ends or was refunded; whether it reached you through Family Sharing; and Apple's identifiers for the purchase. From Google Play we receive which plan you chose; when it started, renews, ends, was cancelled or was refunded; and Google's purchase token and order identifier, which we check with Google rather than trusting the phone. From Stripe we receive the same facts about a website subscription, and Stripe's identifier for you as a customer. We keep these so that your plan works in the app and on the website alike.

When you start a purchase in the iPhone app, we also record which screen you started it from, which plan you chose, and whether a free trial began. We use this to understand which parts of Scriptorium lead people to subscribe, and delete it after 24 months. It is linked to your account and is not shared with anyone.

Family plans. The owner of a Family plan can invite up to five other people by their handle. People in the same household can see each other's display name, handle, profile photo and role in the household. The person who started the household can also see each member's progress: the languages they study, how many letters, words and forms they have mastered, the last day they studied, and their current streak. Members 18 and over can hide their progress from that person; members aged 13 to 17 cannot. Other members cannot see each other's progress.

Teacher verification. If you verify a school email address on the website to receive instructor access, we store that address, its domain and when you verified it, and we send a code to it through our email provider, Resend. The address is kept while your verification is current and is deleted with your account. Each request for a code is recorded with the address and time, and those records are deleted after 30 days.

Access codes. Some teachers, schools and co-ops receive a code instead of paying. If you redeem one on the website, we store which code you redeemed and when. If you type a code that does not work, we record only the time of the attempt, not what you typed, so that codes cannot be guessed, and delete that record after 30 days.

Feedback sent inside Scriptorium is linked to your account. If you joined the beta through a public TestFlight link, Apple may deliver your TestFlight feedback anonymously. We keep it anonymous unless the email you choose to provide exactly matches your Scriptorium account, you include your exact Scriptorium @handle, or you later tell us which account is yours. We do not guess your identity from your device, location settings, writing style or the time you sent the report.

What Scriptorium does not collect

Your precise location. Your contacts or address book. Your photos, beyond a profile picture you choose to upload. Your browsing history. When you search for learners or classes, we send what you type to our server to run the search and do not use it for anything else. Your card or bank details. Apple, Google Play or Stripe takes every payment, and none of them passes those details to us. We do not collect health or fitness information, or financial information beyond the purchase records described above. Anything from an advertising identifier.

Who else can see it

Other people using Scriptorium. Your display name, handle, profile photo and primary language are visible to anyone signed in, unless you turn off findability. People you accept as connections can additionally see your streak, your score, and how many words you have mastered in each language. Members of a cohort you join can see you on its roster and read what you post there. In a Class, the instructor and teaching assistants can see each learner's assignment results: which answers were right or wrong, the time taken, and which terms were missed. Turning off findability removes you from the directory; it does not remove you from a cohort you have already joined — the people in that cohort can still see you, because you joined it.

Nobody is ever told they have been blocked. If you block someone, the app does not tell them, and it does not tell you whether someone has blocked you.

Service providers. Scriptorium uses the following services for the purposes described:

• Supabase hosts the database, the account system and the profile photo storage. Your data lives there.
• Cloudflare delivers the companion website. Microsoft OneDrive stores restricted operator backup copies. Our privacy contact uses Google Gmail to handle correspondence you send us.
• Apple provides Sign in with Apple, on iPhone and Android alike, and the Apple Push Notification service delivers notifications to your device. If you subscribe in the app, the App Store takes your payment and tells us about your subscription. If you are testing a pre-release build, Apple's TestFlight also applies.
• Google provides Google Sign-In, if you use it. On Android, Google also distributes the app through Google Play, delivers notifications through Firebase Cloud Messaging, and, if you pay in the Android app, takes your payment and tells us about your purchase. On iPhone, if you do not sign in with Google, no information about you goes to Google through this app.
• Resend sends our emails: sign-in links and verification codes. It receives the address and the message.
• Stripe takes payment if you subscribe on the website. Stripe receives the details you enter at checkout, such as your card and billing address, and uses them to take the payment and work out any sales tax, under its own privacy policy. We receive only the facts about your subscription described above.
• OpenAI and Anthropic provide AI tools that may help us group feedback, identify repeated problems and prepare proposed app fixes. The review copy excludes your feedback email address and Apple's raw submission payload. It may include your Scriptorium display name and handle when your report is already linked to your account, the feedback you wrote, the diagnostic information attached to it, screenshots you chose to send, and crash logs. A person approves any proposed app change before it is built or released.

Each of these is bound by its own agreement with us to protect your information to at least the standard this policy describes and to use it only to provide the service we have asked them for. None of them is permitted to use your information for their own advertising through this app.

Nobody else. Scriptorium does not sell your information, does not share it with advertisers or data brokers, and contains no advertising, attribution or third-party analytics software. We do not track you across other apps or websites, and the app therefore does not ask for permission to.

How long it is kept, and how to delete it

Your account records are kept while your account exists, subject to the purposes and exceptions below. Active account deletion and expiry of recovery copies are separate processes.

You can delete your account from inside the app: Settings → Account → Delete Account on iPhone, or Settings → Delete Account on Android. When deletion succeeds, it permanently removes your active sign-in account and deletes your profile, your progress and its history, your connections, your cohort memberships, your notification tokens and your account itself. If you signed in with Apple on an iPhone, the app also tells Apple to revoke its access, so Scriptorium stops appearing under Settings → Apple Account → Sign in with Apple on your device.

Deleting your account does not cancel an App Store or Google Play subscription, because Apple or Google bills it, not us. Cancel it first in your Apple Account's subscriptions, or in Google Play under Payments & subscriptions. A subscription bought on the website is cancelled in Stripe as part of deleting your account. Your purchase records are deleted with your account. Apple, Google and Stripe keep their own records of the payment under their own policies.

Some records can remain: feedback and word flags with their account link removed; moderation reports kept for safety; Apple access-revocation failure records needed to resolve a failed revocation; and replied-to board threads represented by a deleted-user placeholder. Removing an account link does not guarantee that text someone submitted contains no identifying information. Support correspondence and beta sign-ups are stored separately; contact us to request their removal.

Restricted database snapshots are also kept for recovery, so deleting your account does not immediately erase older recovery copies. A deletion decision must be reapplied before restored data is made available again. Provider-held operational records and payment records have separate retention rules.

You can also change or remove most information without deleting your account — edit or clear your profile fields, remove your photo, turn off findability, leave a cohort, delete your own posts, or turn off notifications in your phone's settings.

To ask a question about your data, or to ask for it another way, email scriptoriumlanguages@gmail.com.

Your rights

Depending on where you live you may have the right to access, correct, delete or export your information, to object to or restrict how it is used, and to withdraw consent. The app gives you access, correction and deletion directly; for anything else, email the address above and we will respond. If you are in the UK or the EU you also have the right to complain to your local data protection authority. Where we rely on your consent — the optional profile fields, notifications, and appearing in the learner directory — you can withdraw it at any time using the controls named above, and withdrawing it does not affect anything done beforehand.

Your information is stored and processed in the United States and Canada; our Supabase database is hosted in Canada. Providers may also process information in other countries for service delivery, operations and support.

Children

Scriptorium is not directed to children under 13 and we do not knowingly collect information from them. If you believe a child has created an account, email the address above and it will be deleted.

Changes

If this policy changes in a way that affects you, the app will say so before the change takes effect, and the date at the top will change.