Privacy Policy

Last updated: October 25, 2026

The Scraps is operated by RBW Labs, LLC, a Washington limited liability company. It exists so you can keep memories privately. That shapes everything about how we handle data: we collect the minimum needed to run the Service, we never sell it, and nothing you save is ever used for advertising. This policy explains exactly what we collect and why.

What we collect

• Account information. When you sign in with Apple, Google, or Microsoft, we receive your email address and, if you share it, your name. We never see your password.
• Your content. The photos, videos, audio recordings, and captions you save. This is stored so we can show it back to you on your devices — nothing else.
• Device information. An identifier and name for each device you sign in from, so you can recognize and manage your sessions.
• Technical logs. Standard server logs and error reports (request identifiers, timestamps, app version) that help us keep the Service working. Error reports are configured to exclude personal information.
• Waitlist email. If you enter your address on our home page, we store that address, which page you entered it on, and the date. We use it to tell you when The Scraps opens and for nothing else. You do not need an account to be on the waitlist, and being on it does not create one.

Our website

This section is about thescraps.com, the marketing site, not the app. The site uses Google Tag Manager and Google Analytics, and advertising measurement tags from Meta, Reddit, and Pinterest, so that when we pay to show an ad, we can tell whether the people who saw it visited the site and tapped through to the App Store. These tags set cookies and receive the kind of information any web request carries: your IP address, browser, the page you visited, and whether you tapped the App Store button. They never receive anything from inside the app, and nothing you save in The Scraps is ever used for advertising. These tags are switched on only for visitors in the United States; from anywhere else, including the EU and UK, the site sets no advertising or analytics cookies at all. You can block these tags with a content blocker or your browser’s tracking protection, and the site works the same either way.

Before launch the site had a waitlist. Those addresses were used only to announce availability, are never sold or given to an advertising network, and are deleted on request or after two years. Write to support@thescraps.com and we remove yours the same day.

What we don’t do

• We don’t sell your data — to anyone, ever.
• We don’t show ads in the app, and we don’t share anything from your account with advertisers or data brokers.
• We don’t use your content to train machine-learning models.
• We don’t make your content public. There are no public profiles and no public feeds.

On-device transcription

Captions for your recordings are transcribed by Apple’s speech recognition running entirely on your phone. Your audio is not sent to us or to any third party for transcription.

Where your data lives

Your content is stored with Amazon Web Services in the United States, encrypted in transit and at rest. Access is restricted to your account: media is served only through short-lived, signed URLs minted for you after you authenticate.

Product analytics

We use Mixpanel to understand how the app is used — how many people save a Scrap in their first week, whether the “one year ago today” reminder actually brings people back, where the sign-up flow loses people. We cannot build a good product blind, and we would rather tell you exactly what this involves than bury it.

What is sent: that an action happened, and its shape. For example: “a Scrap was created”, “it contained one video”, “it had a caption”, “a notification was opened”.

What is never sent: your captions, transcripts, photos, videos, audio, filenames, email address or name. You are identified only by the random internal ID your account already has — Mixpanel cannot tell who you are, and we look up accounts in our own database, not theirs. This is enforced in our code, which drops any prohibited field before it can be sent.

You can turn app analytics off in Settings, and we honor that immediately.

Service providers

We use a small number of providers to operate the Service: Amazon Web Services (hosting and storage), Apple, Google, and Microsoft (sign-in), Apple again as the payment processor for subscriptions (we never see your payment details), Sentry (crash and error reporting from both the app and our servers, with personal information scrubbed and no screenshots), and Mixpanel (product analytics, as described above). Each receives only what it needs to do its job, and none of them receive your memories.

Children

The Scraps is for adults — accounts may not be created by anyone under 18. Many people use The Scraps to capture memories of their children; that content belongs to the parent’s account, stays private to it, and is treated with the same protections as everything else you save.

Deleting your data

You can permanently delete your account and everything in it at any time from Settings → Delete account in the app. Deletion is immediate and irreversible: your account record, your devices and sessions, and all of your stored media are removed from our systems. Residual copies in encrypted backups age out within seven days.

Your rights

Wherever you live, we honor requests to access, correct, or delete your personal data. Most of this you can do directly in the app; for anything else, email us and we’ll help.

Changes to this policy

If we make material changes, we will notify you in the app or by email before they take effect. The “last updated” date above always reflects the current version.

Contact

Privacy questions or requests: support@thescraps.com.