App privacy policy

01 — Who We Are

Impelechy LLC is a limited liability company registered in the State of Wyoming, United States. Impelechy LLC is the entity responsible for the personal information processed through the App.

02 — What We Collect & Why

We collect only what is necessary to operate the App and provide you with the features you use. The categories below describe the personal information we process, why we need it, and where it is stored.

A — Account information

B — Content you create

C — Subscription information

D — Product analytics

You can opt out of product analytics at any time in the App under Settings → Data & Privacy → "Share anonymous analytics." When opted out, the SDK stops sending events immediately.

E — Server-side integrations

03 — What Stays On Your Device

Some of the App's most personal features are designed so the underlying data never leaves your device:

• Text recognition (OCR) from photos of book pages runs entirely on-device using Apple's Vision framework. The photo you scan is never uploaded to our servers.
• Semantic understanding of your notes — the vectors that power the connections graph and the "Your mind" view — is generated on-device using Apple's NLContextualEmbedding. The note text is never sent to any third-party embedding service. The resulting vectors are stored in your Supabase account so they can sync between your own devices, but no one else can read them, and they are not shared with any third party.
• Spaced-repetition review state (FSRS) is stored only on the device where you reviewed the card. It is never uploaded, so review state does not sync between devices by design.
• Local notifications for reminders, reviews, and weekly recaps are scheduled and delivered entirely by iOS. No push server is involved, and no data leaves the device to trigger them. Some reminders include a short excerpt of the note they refer to, so that text can appear on your lock screen. You can hide it at any time in iOS under Settings → Notifications → Scriptorio → Show Previews, or turn the reminders off inside the App.
• The home-screen widget reads from a small copy of your most recent notes that the App keeps in its own shared container on the device, so the widget can draw without launching the App. This copy never leaves the device and is covered by iOS file protection; it is removed when you sign out or delete the App.

04 — How We Store & Protect Your Data

Your account and content are stored in Supabase, a managed Postgres platform operated by Supabase, Inc. Our production database and authentication service are hosted in the AWS US-East (Virginia) region.

We implement the following technical and organizational security measures:

• TLS 1.2+ for every request between the App and our servers
• Row-Level Security policies in the database, so a signed-in user can only read and write their own rows — enforced at the database level, not only in application code
• Passwords stored as salted bcrypt hashes by our authentication provider; we never see plain-text passwords
• Server-side rate limiting on sensitive endpoints (signup validation, book lookups, LLM calls, account deletion) to prevent abuse
• Service-role database credentials held only in server-side function secrets, never shipped with the App
• Encryption at rest for the database, per our processor's standard configuration
• Access to administrative dashboards restricted to Impelechy LLC personnel via multi-factor authentication

No method of electronic transmission or storage is 100% secure. While we use commercially reasonable measures to protect your data, we cannot guarantee absolute security.

05 — Third-Party Processors

We do not sell your personal information. We do not share your data with third parties for marketing or advertising purposes. The processors listed below act on our instructions under written data-processing terms:

All processors are contractually prohibited from using your personal data for their own purposes or for advertising. We review each processor's security posture before engagement and update this list whenever processors change.

Other disclosure circumstances

• Legal obligations: We may disclose your information if required by law, regulation, valid legal process, or governmental request.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of our assets, your data may be transferred as part of that transaction. We will notify you by email and provide you with the opportunity to request deletion before the transfer takes effect.
• Vital interests: We may disclose information if we reasonably believe it is necessary to protect the rights, property, or safety of Impelechy, our users, or the public.

06 — What We Do Not Collect

The App does not request, receive, or process any of the following:

• Your precise or approximate location (no GPS, no Wi-Fi geolocation, no IP-based location lookup by us)
• Access to your contacts, calendar, or reminders
• Access to your microphone or camera, except for the barcode scanner and OCR camera flows which run only when you actively initiate them and process the frames on-device
• Your Advertising Identifier (IDFA). We do not present an App Tracking Transparency prompt because we do not track you across other companies' apps or websites
• Third-party advertising SDKs, cross-app trackers, or behavioral advertising pixels
• Any special categories of personal information (health, biometric, precise financial, racial, political, religious, sexual orientation, immigration, or union-membership data)
• Data from users we know or reasonably believe to be under 13

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising within the meaning of California law.

07 — Data Retention

• Active content (books, notes, themes, reading sessions) is retained for as long as your account exists. You can delete individual items in the App at any time.
• Soft-deleted content: when you delete an item, it is initially marked as deleted so the change can sync to your other devices. Soft-deleted rows are hard-deleted from the database no later than 90 days after the deletion timestamp.
• Account deletion: when you delete your account from Settings, we perform a full cascade delete of your account and all associated rows across every table. This action is irreversible.
• Subscription records are retained by our subscription processor and Apple for the period required by tax and consumer-protection law.
• Analytics events are retained by our analytics processor for up to 12 months. After you sign in they are associated with your internal account identifier, but they never contain your email address, your display name, or any content you create. When you delete your account, the account record that gives the identifier its meaning is destroyed, so the remaining analytics events can no longer be resolved to you; they age out at the end of the retention period. You can also email us to have your analytics records deleted immediately.
• Server logs containing IP addresses may be retained by our infrastructure providers for up to 30 days for security and abuse prevention.

08 — Your Choices Inside the App

• Export your data: Settings → Data & Privacy → Export produces a JSON file containing your books, notes, and themes. You can share it or store it locally.
• Share a book or a note: The App can render a shareable image (for a finished book or a pair of connected notes) and hand it off to iOS's system share sheet. The image is generated on your device and is not uploaded to us or cached on our servers. From the moment you pick a destination (for example Messages, Instagram, or Photos), that destination's own privacy practices govern how the image is stored or transmitted.
• Turn off analytics: Settings → Data & Privacy → "Share anonymous analytics." Applies immediately.
• Change your email or password: Settings → Account.
• Manage or cancel your subscription: Settings → Subscription. Cancellation is handled by Apple through the standard iOS subscription management sheet.
• Delete your account: Settings → Account → Delete Account. All server-side data is deleted; local data on your device is wiped on the next launch.
• Notifications: Settings → Notifications lets you turn reminders and highlight notifications on or off independently. You can also manage notification permission from iOS Settings.

09 — Your Rights — United States

10 — Availability

Scriptorio is currently offered only in App Store regions where Impelechy LLC has chosen to distribute the App. It is not currently offered in the European Union or the European Economic Area. If you access the App from a region outside our distribution list, please contact us before creating an account so we can confirm whether we can lawfully provide the service to you.

11 — Children's Privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided personal information through the App, please contact us at [email protected] and we will delete the information and terminate the account promptly.

12 — Apple App Store & Sign in with Apple

The App is distributed exclusively through the Apple App Store. Your download and installation are covered by Apple's own privacy practices and the App Store terms of service. When you purchase a subscription inside the App, Apple processes the payment; we receive only your subscription status through our subscription-management processor. If you use Sign in with Apple and choose "Hide My Email," we receive only Apple's private relay email address and never see your real email.

13 — Changes to This Policy

We may update this App Privacy Policy from time to time. When we make material changes, we will notify you inside the App and update the "Last updated" date at the top of this page. Continued use of the App after such notice constitutes acceptance of the updated policy. Where required by applicable law, we will seek renewed consent before applying material changes.

14 — Contact Us

For any question, request, or concern related to this Policy or your personal information, please contact us:

We aim to respond to all privacy-related inquiries within 45 days.