Pocket Scriptorium

Privacy Policy

Pocket Scriptorium Effective date: 10 October 2026

This policy tells you what personal data we collect when you use the Pocket Scriptorium app, website and service (the "Service"), why we collect it, and what rights you have.

1. Who we are

The controller of your personal data is Munda Plus d.o.o., Liminjan 14, 6320 Portorož, Slovenia, registration number 5493218000 ("we", "us").

Contact for privacy questions: [email protected]

2. Short version

3. What data we collect

Data Examples Source
Account data Email address, pen name, password (stored as a hash), Apple or Google sign-in ID. We do not ask for your name. You
Age confirmation When you confirmed at sign-up that you are 16 or older and accept the Terms; that you confirmed you are 18 or older for the Mature level You
Story data Wizard choices, premises, character names, stories, story bibles, chapter rewrite notes, a web novel's outline and the directions you give for its next chapters You and the Service
Library activity Published stories, likes, reads of public stories (a story counts as read once you pass 10% of it), follows, reviews, reports, blocks You
Story drafts The story you are setting up and have not written yet: your wizard choices, your own premise idea, the suggested premises, the chapter plan and the characters, with your edits You and the Service
Reading data Reading and listening progress, app settings, and which chapters the Service sent to your app and when (so it can check reading progress, for example before you review a story) The app and our servers
Ratings Your private rating of a story (Loved it, It was fine or Not for me), the reasons and the chapter you add, your answer to "Why did you stop?" with its optional note, and how far you had read when you gave them You and the app
Device data Device identifier (stored as a hash), platform, app version The app
Free-credit checks A salted hash of the IP address you signed up from (for IPv6, of its network), a salted hash of your mailbox (your address without dots or "+" tags), whether the free credits were withheld, and the message you send if you ask for a review You and our servers
Safety check When the safety check refuses text you entered, or stops a chapter: the start of the text, where it came from, the category and the reason The Service
Install source Where you found the app. If you installed it from a link on our website: the source and campaign of that link (for example "instagram"), the post or sample story it came from, and that story's genre. Otherwise only what Google Play reports, for example that you found the app in the store. Google Play gives this to the app once after you install it; the app sends it when you create your account. The website reads it from the link itself, without cookies. Google Play, through the app
Purchase data Product, date, transaction ID, credit balance and history Apple or Google, through RevenueCat
Withdrawal waiver When you buy credits: that you asked for them now and accepted losing the 14-day right of withdrawal, the product, the wording version, the date and time, your IP address and the app's user agent You and the app
Technical logs IP address, date and time, request type, errors Our servers
Crash reports Error type and message, where in the code it happened, app version, device model and operating system version. We remove email addresses, sign-in tokens, IP addresses and story text before a report leaves the app or our servers. The app and our servers
Feedback and ideas Feedback you send in the app (kind, star rating, comment, app version and platform), feature suggestions and your votes on the roadmap You
Support messages Your emails to us and our replies You
Waiting list The email address you enter on our website, when you joined and confirmed it, the source and campaign of the link you came from, whether we sent you the launch mail, and whether you received the waiting-list bonus credits You

We do not receive your card or bank details. Apple or Google handles payments.

We do not ask for special categories of data (for example health or religion). Do not put such data about yourself or other real people into your stories.

4. Why we use your data and our legal basis

Purpose Legal basis (GDPR)
Create and run your account, generate and store your stories, sync progress, sell and add credits Contract (Art. 6(1)(b))
Keep the story you are setting up on your account, so it is not lost when you close the app, sign out or change phones Contract (Art. 6(1)(b))
Show your published stories, pen name, reviews and likes to other users Contract (Art. 6(1)(b))
Show notifications on your phone about your own stories (for example "Chapter 1 is ready"). The app creates them on your phone; we do not use a push service. Consent, given through your device's notification permission (Art. 6(1)(a)). You can turn it off at any time.
Check stories before publication, check the text you enter and the chapters the AI writes against the hard rules of our Terms, handle reports, prevent abuse and fraud, including more than one free credit grant per person, mailbox or device Legitimate interest in a safe service (Art. 6(1)(f)), and legal duties for online services (Art. 6(1)(c))
Keep the Service secure, find and fix errors, including crash reports Legitimate interest (Art. 6(1)(f))
Measure costs and use in aggregate to improve the Service Legitimate interest (Art. 6(1)(f))
Count which posts and campaigns bring new readers, in aggregate, and open the story wizard on the genre you came for Legitimate interest in knowing what our marketing achieves (Art. 6(1)(f))
Read your feedback, review your feature suggestions and count votes to decide what to build Legitimate interest in improving the Service (Art. 6(1)(f))
Use your ratings and "Why did you stop?" answers, counted together with other readers', to improve how stories are written. Ratings are never shown to other users. Legitimate interest in improving the Service (Art. 6(1)(f))
Keep purchase and tax records, answer authorities Legal obligation (Art. 6(1)(c))
Answer your support requests Contract or legitimate interest (Art. 6(1)(b) or (f))
Send you one mail when the app is on Google Play, and give you the waiting-list bonus credits when you sign up with the same address Consent (Art. 6(1)(a)), given when you confirm your address from our mail. Withdraw it at any time with the link in our mails; we then delete the address.

When we rely on legitimate interest, you can object (see section 9).

5. AI processing

5.1 To write a story, we send your story choices (genre, tone, premise, character names, story bible and earlier chapters) to OpenRouter. OpenRouter passes them to the AI model provider that we choose for that length. We do not send your name, email address or account ID.

5.2 We set up our AI routing to use only model providers that do not use this content to train their models.

5.3 An automated safety check reads the text you enter before we send it to an AI model, and every chapter the AI writes. It refuses only content that breaks the hard rules of our Terms (for example sexual content with minors). When it refuses your text, the app tells you why. When it stops a story, we return your credits and tell you why in the app and by email.

5.4 An automated system also checks a story before it becomes public. It can reject a story that breaks our Terms of Service. This decision has no legal effect on you. You can ask a person to review it at [email protected].

5.5 We do not use your stories to train AI models.

6. Who receives your data

We share data only with service providers who process it for us under a contract, and only as far as they need it:

Recipient What for Location
OpenRouter, Inc. and the AI model providers it routes to Writing stories and checking content. You can ask us which model providers we use now. USA and other countries
RevenueCat, Inc. Checking purchases USA
Functional Software, Inc. (Sentry) Crash reports, without your name, email address, account ID or story text EU (Frankfurt, Germany)
Apple and Google App stores, payments, sign-in USA and EU
Hostinger International Ltd. Servers and backups Frankfurt, Germany (EU)
Cloudflare, Inc. A second copy of our backups, encrypted with a key only we hold; delivery of the natural-voice files to the app (it sees your IP address) EU and USA
Mailjet SAS Account and support email, and notices about decisions on your content or account EU

Other users see what you publish: your pen name (or "Anonymous" if you have none), public stories and reviews. On a public story they see how many likes and reads it has, not who gave them. Other users do not see your email address, your private stories or your ratings.

We can give data to authorities when the law requires it.

If we sell or merge the business, your data can move to the new owner. This policy continues to apply to it.

7. Transfers outside the EU/EEA

Some recipients are outside the EU/EEA, mainly in the USA. We protect these transfers with the EU Standard Contractual Clauses, or the EU–US Data Privacy Framework where the recipient is certified under it. You can ask us for a copy of the safeguards at [email protected].

8. How long we keep data

Data How long
Account, stories, library activity, reading data, ratings While your account exists. We delete it within 30 days after you delete your account.
Install source While your account exists. We delete it when you delete your account.
Story drafts Until you write the story, start over or discard the draft, or delete your account (then at once). Signing out does not delete it.
Backups Up to 35 days after deletion from the live system
Purchase records and credit history As long as tax and accounting law requires
Withdrawal waiver With the purchase it belongs to. We delete its IP address and user agent after 730 days. A waiver for a purchase you did not complete is deleted after 7 days, or when you delete your account.
Which chapters were sent to your app While your account exists
Sign-up IP address hash 30 days after you create the account
Mailbox hash, withheld free credits, your review request While your account exists. We delete them when you delete your account.
Texts the safety check refused, and stopped chapters 1 year, or until you delete your account if that is sooner
Device identifier hash of a deleted account that received the free sign-up credits or was suspended 365 days after we delete the account's data, without any link to the account, so the same device cannot receive the free sign-up credits again
Technical logs 90 days
Crash reports Up to 90 days
Reports and moderation decisions 1 year after the decision, or longer if a legal claim needs them
Support messages 2 years after the last message
Waiting list An address you never confirm: 14 days. A confirmed address: until 90 days after we send the launch mail, or until you remove it (then at once).
Feedback, feature suggestions and votes While your account exists. When you delete it, your votes and suggestions we have not reviewed are deleted; feedback and approved suggestions stay without your name or email.

Stories saved in the app stay on your device until you remove the download, delete the app or delete your account.

9. Your rights

Under the GDPR, you have the right to:

You can export your data and delete your account in the app under Account. For other requests, write to [email protected]. We answer within one month.

You can also complain to a supervisory authority. In Slovenia, this is the Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si. You can also complain in the EU country where you live or work.

10. Children

The Service is for people aged 16 and over. The Mature content level is for people aged 18 and over. We do not knowingly collect data from children under 16. If you think a child under 16 uses the Service, contact us and we will delete the account.

11. Security

We use encrypted connections (TLS), access control, two-factor authentication for staff accounts and encrypted backups. On your device, the app stores stories in its private storage. No system is fully secure. If a breach puts your rights at high risk, we tell you without undue delay.

12. Changes to this policy

We tell you about important changes in the app or by email before they apply. The effective date at the top shows the current version.

13. Contact

Munda Plus d.o.o., Liminjan 14, 6320 Portorož, Slovenia Privacy: [email protected]