Scroll Up
Scroll Up Privacy Policy
Last updated: 23 October 2026
Scroll Up is a personal memory app: you save notes, expenses, fuel logs, reminders and events, and ask questions about them. This policy explains what data the app handles, where it goes, and the choices you have. We wrote it in plain language on purpose.
The short version: your data is encrypted on your device. We can't read it, we never sell it, and our AI never stores or trains on it.
1. Who we are
Scroll Up is run by Jaco Wessels, South Africa ("we", "us"). For any privacy question or request, email [email protected].
2. What we collect, and why
| Data | Why we need it | Can we read it? |
|---|---|---|
| Your phone number | To create your account, sign you in with a one-time code, and (later) let people you know find you | Yes, it identifies your account |
| Your content: notes, expenses, fuel logs, reminders, events, photos (e.g. till slips) and voice notes | To provide the app | No. It is encrypted on your device before it is stored or backed up |
| Your encrypted backup | So you can restore your data on a new phone | No. Only your recovery code or passkey can unlock it |
| Crash reports and basic device info (app version, phone model, Android/iOS version) | To find and fix bugs | Yes, but they contain no notes, messages or other content |
| Anonymous usage counts (e.g. how many times AI features are used) | To set fair free limits and plan capacity | Yes, but only counts, never what you wrote or asked |
| Subscription status (once paid plans launch) | To unlock the features you paid for | Yes. Payments are handled by Google Play or the Apple App Store; we never see your card details |
We do not collect your contacts, location, browsing history or advertising IDs unless a feature clearly asks you first and you agree. We do not show ads.
3. How the AI works with your data
Some features use AI to understand what you log (for example, reading a till slip) or to answer your questions. When you use them:
- Only the content needed for that request is sent, over an encrypted connection, through our own server, which passes it on and stores nothing.
- The AI provider (Anthropic) processes the request under a zero data retention arrangement: your content is not stored and is never used to train AI models.
- Where possible, work such as search and totals happens on your phone and never leaves it.
4. Who we share data with
We never sell your data. We only use these service providers to run the app:
- Supabase: account sign-in and storage of encrypted data and backups
- Anthropic: AI processing, as described above
- Google Firebase: push notifications and crash reporting
- SMS provider: sending your one-time sign-in code
- Google Play / Apple App Store: app delivery and subscription payments
We may disclose information if the law requires it. Because your content is end-to-end encrypted, we are not able to hand over content we cannot read.
5. Where your data is stored
Your content lives on your phone, with an encrypted backup on our storage provider's servers, which may be outside South Africa. Because the backup is encrypted with a key only you hold, it cannot be read wherever it is stored.
6. How long we keep it
- Your content stays until you delete it or delete your account.
- When you delete your account, we delete your account record and encrypted backup within 30 days.
- Crash reports and usage counts are kept for up to 12 months.
Important: we cannot recover your data if you lose both your phone and your recovery code. That is the trade-off for true privacy, so please keep your recovery code somewhere safe.
7. Your choices and rights
You can, at any time:
- Export all your data from the app
- Delete individual items, or your whole account, from inside the app (Settings › Delete account) or by emailing us
- Ask what personal information we hold about you, and have it corrected
Depending on where you live, laws such as South Africa's POPIA, the EU/UK GDPR and US state privacy laws give you these rights and more. You can also complain to your local data protection authority. In South Africa, that is the Information Regulator.
8. Children
Scroll Up is not intended for children under 13 (or the minimum age in your country), and we do not knowingly collect their data. If you believe a child has signed up, contact us and we will delete the account.
9. Security
We use end-to-end encryption, encrypted connections, and keep the data we can see to a minimum. No system is perfectly secure, but we design Scroll Up so that even if our servers were breached, your content would remain unreadable.
10. Changes to this policy
If we change this policy, we will update the date at the top and, for important changes, tell you in the app before they take effect.