Privacy Policy
Last updated: May 12, 2026
Introduction
This Privacy Policy describes how ScrapBoard (referred to as “ScrapBoard”, “the App”, “we”, “us”, or “our”) collects, uses, discloses, and protects information in connection with your use of our iOS mobile application and our website. By downloading, installing, accessing, or using ScrapBoard, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with this Privacy Policy, you must not use the App or the website.
This policy is intended to explain what we do and what we do not do, and to clarify responsibilities between you (the user), us (the publisher), and third parties (for example, Google/Firebase, Apple, or your device and backup providers). Nothing in this policy is legal advice. If you require advice about your specific situation, consult a qualified professional.
Scope of This Policy
This Privacy Policy applies to:
- The ScrapBoard iOS application distributed through the Apple App Store; and
- The ScrapBoard website or landing page used to describe or promote the App.
This Privacy Policy does not apply to:
- Third-party websites or services you access via links from our website or the App;
- Apple’s own services (including the App Store, iCloud, and system frameworks);
- Google/Firebase’s independent processing of analytics or crash data (governed by their own terms and policies); or
- Any other product or service you use together with the App.
Summary of What the App Does
ScrapBoard is a creativity and productivity app that lets you build customizable boards with notes, photos, text, countdowns, calendars, dates, stickers, emojis, and similar elements, and to display board content on your device—including, where supported, via home screen widgets that may update on a schedule determined by iOS and system constraints.
Default behavior: For boards that you keep private (without enabling sharing/collaboration), your board content is handled primarily on your device and, where you enable it, through your personal Apple account services (such as iCloud) under Apple’s control.
Optional sharing: If you choose to enable board sharing or collaboration, portions of your board (structure, items, and linked media files) are synchronized and stored using Google Firebase cloud services under our configuration so that invited collaborators can access that board. That processing is described below.
Optional Board Sharing and Collaboration (Firebase)
If you turn on sharing for a board, we use Google Firebase and related Google Cloud services as our processors to operate that feature. Depending on how you use the App, this may include:
- Authentication—Firebase Authentication identifiers (for example, your Firebase user ID and technical session data) so we can authorize owners and collaborators;
- Board collaboration data—metadata and configuration for the shared board (such as title, timestamps, schema/version markers), per-item board content you sync to the cloud, manifests describing linked assets, membership records (who belongs to the board and their role), and invite-related records;
- Media assets—when you share a board, photos or other files attached to the board may be uploaded to Firebase-managed cloud storage (for example, Google Cloud Storage accessed via time-limited signed URLs) so collaborators can load the same assets;
- Real-time and operational signals—limited technical data used to coordinate collaboration (for example, lightweight presence or coordination hints) where implemented;
- Cloud Functions—server-side logic we operate on Firebase (for example, creating or repairing shared-board records, issuing upload/download tickets for assets, managing invites, or enforcing lifecycle rules when you disable sharing or delete an account); and
- Push notifications—if you use features that rely on remote notifications (such as widget-related updates), Firebase Cloud Messaging (FCM) may process device push tokens and related technical metadata on our behalf.
Who can see shared boards: People you invite or who otherwise become members of a shared board may be able to view and interact with the board content we host for that feature, subject to the App’s rules and your choices as owner (such as rotating or revoking invites where supported). You decide whether to enable sharing and whom to invite. Collaborators may copy, screenshot, or retain content outside our systems—we cannot control what others do with information you share.
Stopping sharing: When you disable sharing for a board or delete your cloud-side collaboration data through features we provide, we intend to remove or cease hosting that board’s collaboration copy according to our implementation (subject to reasonable backup or replication delays by our providers). Content may remain on collaborators’ devices unless they remove it.
Firebase/Google operates its own infrastructure under its terms and privacy documentation. We configure services for ScrapBoard but do not fully control Google’s operations or security.
Private Boards (Sharing Off)
When you do not enable cloud sharing/collaboration for a board, we do not intend to store that board’s substantive content in Firebase for collaboration purposes. Technical/analytics data described elsewhere may still be processed.
You should understand that no software can guarantee that no data is ever processed, cached, backed up, logged, or transmitted by the operating system, Apple, networks, analytics SDKs, or other third-party components. See the sections below on analytics, crash reporting, security, limitations, and liability.
We do not collect or process facial recognition data, face geometry, or other biometric identifiers for the purpose of identifying individuals. Any biometric authentication on your device (such as Face ID or Touch ID) is provided by Apple under Apple’s policies.
Information We May Collect Automatically
Like most mobile apps, we may automatically collect certain technical and usage information to operate and improve the App, such as:
- App usage information (for example, which screens or flows are used, whether onboarding was completed, or feature engagement in aggregate);
- Device and app information (for example, device model, iOS version, language, region, and app version);
- Identifiers or tokens generated by the operating system or by our analytics or crash-reporting providers; and
- Crash, diagnostic, or performance data to identify bugs and stability issues.
Analytics and Crash Reporting (Firebase / Google)
We may use Google Firebase Analytics (or similar Google analytics products) to collect aggregated and pseudonymous usage data to understand how the App performs and how users navigate the App.
We may use Firebase Crashlytics (or similar crash-reporting tools) to collect crash logs, stack traces, and related diagnostic metadata to diagnose stability issues. Crash reports may include device/app identifiers and technical context but are not intended to include the substance of your private boards.
Firebase may process on our behalf, among other things:
- Events such as app open, screen or flow views, and feature usage;
- Device and app metadata such as model, OS version, app version, locale, and sometimes IP-derived region; and
- Pseudonymous identifiers to distinguish one installation from another.
We do not use Firebase to run targeted advertising across unrelated apps, to sell personal information as “sale” is commonly understood under U.S. state privacy laws, or to build marketing lists from your board content.
Important: Google/Firebase is an independent provider. They process data under their own terms, policies, and infrastructure. We do not control their security practices or operations. By using the App, you acknowledge that certain technical data may be processed by Google as described in their documentation and policies.
Your Boards, Photos, Widgets, and Backups
On-device and Apple services
Your boards and related content are created and displayed in an environment controlled by your device and, where applicable, Apple’s services (for example, local storage and iCloud sync, if you use those features). The security and configuration of those environments are largely outside our control.
Widgets and refresh behavior
Home screen widgets are subject to iOS scheduling, battery optimization, and system policies. We do not guarantee any particular refresh rate, timeliness, or visual parity between the in-app board and a widget at all times.
Your responsibility
If your device is lost, stolen, unlocked by others, jailbroken, synced to an insecure computer, or backed up to a service with weak credentials, your content could be exposed. We are not responsible for that exposure.
If you enable board sharing, you are responsible for invite codes, membership choices, and what collaborators can see; see Optional Board Sharing and Collaboration (Firebase) above.
Information You Provide Voluntarily
If you contact us for support at support@scrapboard.app, we will receive your email address and any information you choose to include. We use that information to respond, to maintain continuity of support, and for our legitimate business interests (for example, recordkeeping or misuse investigation). We do not sell support correspondence. We may retain it for as long as reasonably necessary unless applicable law requires otherwise or you ask us to delete it subject to legal retention obligations.
Legal Bases (EU/EEA/UK)
If you are in the European Economic Area, United Kingdom, or Switzerland, we rely on the following legal bases where applicable:
- Performance of a contract—to provide features you choose to use, including Firebase Authentication and cloud-hosted collaboration when you enable sharing;
- Legitimate interests—to operate, secure, maintain, and improve the App and website (including abuse prevention for shared boards), analytics and crash reporting, balanced against your rights;
- Consent—where required for specific permissions or tracking (for example, as presented by Apple’s permission prompts or App Tracking Transparency, if applicable).
Some analytics and crash data may be difficult to isolate to a single identifiable individual. You may contact us with requests described below and we will respond consistent with applicable law.
CCPA/CPRA (California)
We do not sell personal information as defined under the California Consumer Privacy Act (as amended). California residents may have additional rights under applicable law (for example, to know, delete, or opt out of certain sharing). Contact us at support@scrapboard.app to exercise rights where applicable. We may verify your request as permitted by law.
Security
We take reasonable technical and organizational measures in connection with our own systems and practices. However:
- No mobile app, device, operating system, or network is completely secure;
- We cannot guarantee absolute security of information processed on your device or by third parties;
- We cannot control iCloud, backups, Wi‑Fi networks, or your own device passcodes and sharing habits.
You are responsible for securing your device and accounts.
Your Responsibilities
You agree that:
- You are responsible for the content you place on your boards and for complying with applicable laws and third-party rights;
- If you use collaboration, you are responsible for invitations and for ensuring collaborators are entitled to receive the content you share;
- You will keep your device and software reasonably updated and secured;
- You will not hold us responsible for disclosure of your content caused by your own actions (for example, showing your screen to others, screen recording, weak passcodes, or sharing a board with someone you did not intend); and
- You understand that deletion or modification of content may be irreversible or subject to Apple’s sync and backup behavior, and that collaborators may retain copies outside our systems.
When We May Disclose Information
We may disclose information:
- To service providers who assist us in operating the App or website (for example, Firebase/Google Cloud for collaboration, analytics, crash reporting, messaging, or hosting), subject to appropriate obligations;
- To collaborators you invite to a shared board—by design, shared board content you sync is accessible to those members as permitted by the feature;
- To comply with law, regulation, legal process, or governmental requests;
- To protect the rights, property, or safety of us, our users, or the public; and
- To investigate, establish, or defend legal claims or potential misuse of the App.
For boards with collaboration enabled, board-related content you choose to sync is processed and stored on Firebase/Google infrastructure as described above—not merely “on device.” Technical data may also be processed by Apple or Google as described elsewhere in this policy.
Data Retention
Analytics and crash data: retained according to our providers’ defaults and our configuration.
Support emails: retained as needed for support, recordkeeping, and legitimate interests unless deletion is required or requested consistent with law.
Collaboration/sharing data: retained while sharing remains enabled and as needed to operate the feature; removed or deprecated according to in-app controls (for example, disabling sharing or account deletion flows), subject to replication or backup delays by our providers.
Private boards: substantive board content is not stored in Firebase for collaboration while sharing is off; local copies on your device or Apple backups may persist under your control.
International Transfers
Because we use providers such as Google/Firebase, data may be processed in countries other than your own, including the United States. By using the App or website, you acknowledge that such transfers may occur where permitted by law.
Limitation of Liability
To the maximum extent permitted by applicable law:
- The App and website are provided “as is” and “as available” without warranties of any kind, whether express, implied, or statutory;
- We do not warrant uninterrupted, error-free, or secure operation, or that widgets will update on any particular schedule;
- We are not responsible for unauthorized access to your device, Apple account, backups, or networks, or for acts or omissions of Apple, Google, Firebase, carriers, or other third parties;
- We will not be liable for any indirect, incidental, special, consequential, punitive, or exemplary damages, or for loss of profits, data, goodwill, or reputation, even if advised of the possibility;
- Your sole and exclusive remedy if you are dissatisfied with the App, this Privacy Policy, or our handling of data is to stop using the App and delete it from your device, and to stop using the website.
Some jurisdictions do not allow certain limitations; in those cases, our limitations apply to the fullest extent allowed. Nothing in this Privacy Policy is intended to exclude or limit any liability or right that cannot be excluded or limited under applicable law.
Third-Party Services Disclaimer
We rely on Apple and may rely on Google/Firebase and other vendors. We do not control those companies. Breaches, outages, policy changes, or incidents affecting them are outside our responsibility except as required by applicable law.
User Rights and Requests
You may contact support@scrapboard.app to ask what information we hold, to request deletion of support emails where feasible, to ask questions about analytics or collaboration data, or to exercise privacy rights available in your jurisdiction (for example, access or deletion subject to exceptions). Account-related deletion may also be available through in-app account deletion where offered. We will respond consistent with applicable law. We may need to verify your identity.
Changes to This Privacy Policy
We may revise this Privacy Policy at any time and for any reason, including to reflect changes to the App, our practices, third-party services, or legal requirements. When we update it, we will revise the “Last updated” date above. We may also provide additional notice where required by law (for example, in-app or by email), but you should review this policy periodically.
Your continued use of the App or website after the effective date of an update constitutes your acceptance of the revised Privacy Policy. If you do not agree, you must immediately stop using the App and the website and, if applicable, delete the App. If any change is deemed invalid or unenforceable in your jurisdiction, the remainder of this policy remains in effect to the maximum extent permitted by law.
Contact
Questions, requests, or complaints regarding this Privacy Policy:
Our Terms of Use apply to your use of the App and website.