Your reading life is not a dataset for sale. It is a private archive we help you maintain — and we never sell it to advertisers, never trade it with brokers, never train third-party models on it.
Who we are
Scripta is an independent iOS application designed and developed by Vittorio Palpati, based in Italy. Questions, complaints, and curious inquiries reach us in the app under Settings → Privacy & Data, or by email at [email protected].
Because the app is distributed to users inside the European Union, we comply fully with the General Data Protection Regulation and, where applicable, the Italian Personal Data Protection Code.
What we collect, and why
The shortest version: just enough to let you sign in, store your highlights, and personalise the daily one we surface. No advertising identifiers, no tracking pixels, no analytics SDKs.
Required
Required
Required
Optional
Optional
Optional
Optional · opt out anytime
Not collected
Health data (steps, workouts, menstrual cycle) is read from Apple HealthKit on your device, used in the moment to choose a highlight, and then discarded. It never reaches our servers, and it is never shared with anyone.
Whom we work with
A small, deliberately short list. Each one is named, what they receive is named, and you can read their own policies in one click.
supabase.com/privacy
groq.com/privacy-policy
open-meteo.com/en/terms
amazon.com/privacy
Legal basis (GDPR Art. 6)
We process your data on three separate grounds, never co-mingled.
Contract (Art. 6.1.b) — your email and your highlights are necessary to provide the service you signed up for.
Consent (Art. 6.1.a & Art. 9.2.a) — health data is processed only if you explicitly grant HealthKit permission on your device. You can revoke this at any time in iOS Settings → Privacy & Security → Health.
Legitimate interest (Art. 6.1.f) — city-level weather via Open-Meteo to provide contextual widget content, with no persistent identifier attached.
How long we keep it
As long as your account exists, and not a day longer. When you delete the account (Settings → Privacy & Data → Delete account), every row tied to you — highlights, profile, Jam activity, uploaded images — is removed from the live database immediately.
Encrypted database backups held by our infrastructure provider (Supabase) rotate out within 30 days. After that window, no copy of your data exists on our systems.
On-device data (the local Isar database) disappears the moment you uninstall the app.
Your rights
Six rights, each enforceable, each reachable from inside the app or by a short email to us.
Children
Scripta is not directed at anyone under 13. We do not knowingly collect personal data from children under that age. If you believe a child has provided us with personal data, please write to us and we will delete it immediately.
Changes to this policy
If we make material changes, we will notify you inside the app before the change takes effect. Continued use after notification constitutes acceptance of the updated policy.