Privacy Policy

This page mirrors the privacy policy shown inside the app. The organization operating your deployment may publish its own policy alongside it; where it does, that policy applies to how the organization uses the platform, and this one describes what the software itself does.

Your privacy is very important to us. We have developed this policy so that you understand how personal information is collected, used, communicated, and disclosed. The organization that operates your deployment (your employer, school, institution, or another body that gave you an account) is responsible for your data, and your deployment is where that data is held.

Our principles

• Before or at the time of collecting personal information, we identify the purposes for which it is being collected.
• We collect and use personal information solely to fulfill those purposes and for other compatible purposes, unless we obtain the consent of the individual concerned or are required by law.
• We retain personal information only as long as necessary to fulfill those purposes.
• We collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.
• Personal data is relevant to the purposes for which it is used and, to the extent necessary for those purposes, accurate, complete, and up to date.
• We protect personal information with reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification.
• We make information about our policies and practices for managing personal information readily available.

We are committed to operating in accordance with these principles so that the confidentiality of personal information is protected and maintained.

What personal data we collect and why

1. Account information

To create an account and use the service, you need to supply your mobile phone number along with basic information. Without this information, an account cannot be created. You may also choose a profile name, and you can add a profile picture and an about line to your account later.

When you submit a support question we collect your first name, last name, and email address so that we can correspond with you.

2. Messages

Safeguarding your messages is paramount. Your conversations are not held as a standard part of providing the service. Messages reside on your device and are not routinely stored on the deployment's servers. Once a message is delivered, it is promptly removed from the server. There are two cases in which a message is stored temporarily:

• Undelivered messages: if a message cannot be delivered right away, for example because the recipient is offline, it is kept encrypted on the server for up to 30 days while delivery is attempted. If it is still undelivered after that time, it is erased automatically.
• Media forwarding: when media is forwarded within a message, it is stored temporarily in encrypted form on the server. This allows later forwards of the same media to be delivered faster while maintaining your privacy.

Messages are end-to-end encrypted. They are encrypted on your device so that neither the deployment nor any third party can read them. This encryption protects the confidentiality of your communications.

3. Deleting your account

You can delete your account at any time with the in-app Delete My Account feature. To start the deletion:

• Open the Chats section in the app header.
• Select the Account option in the menu.
• Enter your phone number to verify that the deletion request is genuine.

Once these steps are complete, your account information is permanently deleted from your deployment and you no longer have access to its features and services. This action is irreversible, and any data associated with your account is permanently removed from the deployment's servers.

For assistance with account deletion, contact our support team at info@scriptechn.com.

4. Contact list upload consent

Contact upload is an optional feature that identifies which of your contacts also have an account on your deployment, and keeps your contact list in the app up to date as new users join. We do not share your contact information with third parties.

When you opt in to contact upload and grant the app access to your device's address book, it periodically uploads phone numbers from your contacts. The app does not collect additional information such as names or email addresses.

You control contact upload through your device's settings. Opting out may limit certain functions, but you can still communicate with other users on your deployment.

5. Crash reporting

When the app crashes, Google Firebase Crashlytics collects a crash report: the device model, the operating system version, the app version, the time of the crash, and the stack trace, which help us find the cause. Each report is linked to your account and device by their internal identifiers, so that a crash can be matched with the diagnostic events described below. Crash reports do not include your name, phone number, email address, contacts, or message contents. They are used only to diagnose and fix problems in the app, and Crashlytics keeps them for 90 days.

6. Diagnostics and analytics

The app sends technical usage and diagnostic events to PostHog, our product analytics provider. These events cover errors and crashes, performance, the screens you view, and connection and call quality, and they are linked to your account and device so that problems can be traced and fixed. These events never include message contents, contact names, encryption keys, or passwords. Crash reports are sent to Google Firebase Crashlytics, as described above.

Sharing logs with support: your device keeps a technical log of how the app behaves on it. Nothing from it is sent unless you choose to share it from Settings → Help. When you do, support can see the technical log from the previous 3 days and from the following 7 days, together with the lines the operating system recorded for the app itself at that moment (with access tokens removed), and the description of the problem if you wrote one. The logs and your description are deleted once the problem is diagnosed, when you delete your account or that device, and 14 days after you shared them at the latest. You can stop sharing and delete them at any time from the same screen.

Changes to this privacy policy

We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications take effect immediately upon being posted. If we make material changes to this policy, we will note the update here so that you are aware of what information is collected, how it is used, and under what circumstances, if any, it is disclosed.

Contact

Questions about this policy can be sent to info@scriptechn.com. Questions about how your organization uses its deployment should go to its administrator.