Privacy Policy
Effective October 31, 2026. This is our first policy; when we change it we will update this page and the date above.
Who we are
ScribeSprout is a writing app for students, operated by Djehuti Ventures (“we”). This policy explains what we collect, why, who else receives it, and the choices you have. Questions or requests: privacy@scribesprout.com.
What we collect
- Your account: name, email address, password (stored only as a secure hash) and your settings.
- Your work: projects, drafts, outlines, notes, versions, and the sources you add, including files you upload and the text we extract from them.
- Your process record: when you write, the time you spend, and how you use AI features, kept so you can show your own work in the reports you choose to export.
- Security data: the IP address and browser of each signed-in session and of security events such as password changes.
We do not use advertising or analytics trackers, and we do not sell your data.
Services that receive your data
Some features need outside services. Each receives only what that feature needs:
- Anthropic (Claude) powers the AI assistant, source summaries and questions, and Find starting sources. It receives your request and the text it is about (a selection, section or whole draft, or an outline of it), recent assistant messages, and any sources you tick as context. For a source summary or question, it receives that source’s text. Nothing is sent unless you use an AI feature. Anthropic does not train its models on this data and deletes it within 30 days, except content flagged for misuse, which it may keep longer.
- TypeSafe receives the text of each request you make to the AI assistant, and the AI-use statement in your reports, so the reports can describe what the AI helped with. It does not receive your draft.
- Consensus (academic paper search) receives search queries: titles you look up, and queries our research assistant writes from the research question you enter in Find starting sources.
- Exa (web search) receives web-search queries written from your research question, and the address of any web page you add, which it fetches so we can store the page’s text.
- Postmark sends our emails (verify your email, password reset, password changed) and so receives your name and email address.
- Crossref and OpenAlex receive the DOIs and titles of sources being looked up or checked, without anything identifying you. When a paper has a free full-text PDF, our server downloads it from the publisher’s or repository’s site.
- Google, only if you choose to sign in with Google: the sign-in itself, after which Google shares your name, email address and profile picture with us.
Please note: Consensus and Exa keep queries under their own standard data terms; we do not currently have a zero-retention agreement with them. Avoid putting personal information in a research question or search. They never receive your drafts, your notes or the files you upload.
Where your data is stored
Your account, work, uploaded files and exports are stored on Google Cloud in the United States. Encrypted backups are kept for 30 days (daily) and 12 months (monthly). Generated exports are kept for 365 days so you can download them again.
How we use it
- To run ScribeSprout: save your work, keep it in step across your devices, and provide the features you use.
- To keep accounts secure and to investigate abuse.
- To send the account emails listed above. We do not send marketing email.
Your process record is shown only to you, and leaves ScribeSprout only in the reports you choose to export.
Sharing your work
Your projects, sources and activity are private to your account. You share your work by downloading an export and handing it in. If we add ways to work on a project with others, we will update this policy first.
Your choices and rights
- You can edit or delete your projects, notes and sources at any time.
- To get a copy of your data, correct it, or delete your account and everything in it, email privacy@scribesprout.com. We answer within 30 days. Deleted data leaves our backups as they expire (at most 12 months).
- Depending on where you live, you may have further rights, such as to object to processing or to complain to your data protection authority.
Children
ScribeSprout is for people aged 13 and over. If you are under 13, please do not create an account. If we learn that a child under 13 has an account, we will delete it.
Contact
Djehuti Ventures, operator of ScribeSprout: privacy@scribesprout.com.