This summarizes the full privacy notice; it is not a separate policy. Gitscrolls is operated by Matias Andrade Guzmán in Chile. Questions and privacy requests: matias@gitscrolls.com. The apps are for people aged 16 or older.
Your work and sync
Local notes need no account or subscription. Paid sync sends notes, selected code snippets and repository references between your devices, not the whole clone or content published to other accounts. Gitscrolls and its providers can access synced content; it is not end-to-end encrypted or an independent backup. Expiry stops sync, not local editing; cloud copies remain while the account exists.
Keep independent backups: sync and recovery features do not guarantee that data will be preserved or recovered. Ordinary technical support is discretionary; mandatory legal duties and privacy rights still apply. Credential stores protect keys, not all content on disk. GitHub credentials pass through Gitscrolls for sign-in and token handling.
Apple and Google sign-in
Apple or Google sign-in shares your provider identity and email with Gitscrolls; Apple may supply a private-relay address. Gitscrolls keeps an encrypted Apple credential to revoke authorization when you unlink Apple or delete your account. Google provider tokens are not retained as account credentials. These sign-ins do not grant GitHub repository access.
Usage analytics and crash reports
PostHog measures feature use and Sentry helps investigate crashes. Reports use opaque identifiers that can link activity to your account and across devices; signing in can link earlier usage. These are personal data, not anonymous reports. Reports are filtered to exclude emails, GitHub usernames, credentials, code, notes and repository details from report contents. Services also receive connection information such as your IP address. There is no app session replay.
Usage analytics is on by default. You can turn it off in Settings without affecting local or paid features; previous opt-outs stay off. Outgoing analytics events disable IP-based location enrichment, but the service still receives your connection IP. Older versions may collect different fields until updated. Crash reporting stays on separately. Turning analytics off does not delete earlier reports. Diagnostics have a standard 30-day policy; provider backups expire separately. Account-linked reports remain within access and deletion scope, subject to provider capabilities and the full notice’s limits.
AI transfers and model training
Optional AI sends prompts and included code, notes and context to your chosen endpoint using your key, at your expense. You acknowledge these transfers once before your first-ever AI request, including sends to destinations you configure later. Acceptance is remembered across restarts; changing provider, model or endpoint does not prompt again. The provider’s policies apply. Gitscrolls does not guarantee its practices or output. Gitscrolls will not use your code, notes, or other content to train AI models, and our terms grant no permission for that use. Your chosen AI provider’s training practices depend on its terms and your account settings.
The website and purchases also process data
Cloudflare delivers and measures the website, including legal pages. Website requests can include page addresses, referrers, device information, IPs and headers. Cloudflare says its analytics uses no tracking cookies or local storage; that does not mean requests contain no personal information. There is no on-page measurement switch or consent banner. Historical Umami records are not erased automatically. Apple/Google and RevenueCat handle mobile purchases and access.
Matias operates from Chile and uses US service providers. Processing may involve other locations. Ask Matias about applicable transfer safeguards.
You can request your data or delete your account
Email Matias for privacy requests; deletion can also start in the app or website. Account requests require verified-email confirmation, not a password, GitHub or session substitute. Email changes require both addresses. If you cannot access your verified address, contact Matias about the limitation and your rights. Initial replies target 7 calendar days; access/export/correction target 30 from receipt, subject to shorter legal deadlines. Applicable rights include restriction, objection, portability, consent withdrawal and complaints to the competent authority or court.
Exports cover account records and readable synced content, plus obtainable linked analytics and diagnostics. They exclude secrets, others’ data and unsynced work. Private emailed links and temporary packages expire after 7 days; replacements require verification and do not restart request deadlines.
Confirmed deletion disables server access, gives you 7 days to cancel through a separate emailed link and explicit confirmation, and targets live removal within 30 days of confirmation, subject to applicable legal requirements. It includes identifiable PostHog/Sentry deletion requests. Synced copies may be removed from devices through sync; recovery of intentionally deleted data is not guaranteed. Unrelated local-only/unsynced work and its recovery history remain. Reconnecting cannot restore deleted cloud data. Deletion does not cancel store subscriptions. Signing out is not deletion.
The full notice explains retention limits, provider and backup copies, and narrow legal or actual-dispute exceptions. Ordinary material changes have 14-day advance email notice for accounts, with a narrow urgent security or legal exception; without an account, check the webpages. Notices are not consent.