Privacy Policy

Last updated: 3 August 2026

This policy explains how Roden Consult SRL, a company registered in Romania (“we”, “us”, “Scrubbr”) handles personal data in connection with the Scrubbr application and the website at scrubbr.app. We are the data controller for the limited data described below, and you can reach us at contact@scrubbr.app.

1. Data processed on your device only

All detection and redaction happens locally on your Mac. The content you process — your documents, the text you paste, and the detected items — stays on your device and is not transmitted to us.

2. Data we may collect

a. Optional usage analytics (off by default)

You may turn on anonymous usage statistics in the app. If you do, we collect: a random install identifier (not tied to your identity), your app and macOS version, an approximate country (derived at our network edge from your IP address, which we then discard — we do not store IP addresses), and aggregate counters such as the number of scrubs and counts per sensitive-data type. We never collect the content you scrub. You can turn this off at any time.

b. Software-update and model checks

The app contacts api.scrubbr.app to check for updates and to list available detection models. As with any network request, your IP address is transmitted to our infrastructure to deliver the response; we do not use it to identify you or build a profile.

c. Your Scrubbr account (Pro only)

The free version needs no account. To buy or manage a Pro subscription you create one, and we store your email address and a cryptographic hash of your password — never the password itself. We also keep sign-in session records (a hashed session token and its expiry) so you can stay signed in and sign out of a device. If you later sign in with Apple or Google, we would store the stable identifier that provider gives us and the email address it shares.

d. Subscriptions (processed by Paddle)

When you purchase Pro, our Merchant of Record Paddle.com Market Ltd (“Paddle”) collects and processes the personal data needed for the transaction — such as your name, email, billing address, and payment details — under Paddle’s own privacy policy. We do not receive or store your payment-card details.

We do receive and store a copy of your billing record from Paddle so we can show it to you and decide whether your subscription is active: your name and email as held by Paddle, your customer and subscription identifiers, the plan and its status, renewal dates and any scheduled cancellation, and completed transactions (amount, currency, date, invoice number). Payment method, invoices and cancellation are handled on Paddle’s own hosted portal, which we open for you from your account page.

Your Scrubbr account is linked to your Paddle billing record so that we can show you the right subscription. We continue to keep no link between your subscription and the optional usage analytics described above — those records remain separate and are not connected to your account or your identity.

e. Contacting us

If you email us or use a contact form, we process the information you provide in order to respond to you.

3. What we do not collect

• The documents or text you scrub.
• Your password — only a one-way hash of it, which cannot be reversed.
• Stored IP addresses (discarded after the country lookup) or precise location.
• Your payment-card details (handled solely by Paddle).
• Any link between your account and the optional usage analytics.

4. Legal bases (GDPR)

We rely on: your consent (optional usage analytics, which you opt into); performance of a contract (providing the Pro features you paid for); and our legitimate interests in keeping the Service secure, preventing fraud, and improving the product using non-identifying aggregate statistics.

5. Retention

Raw per-install analytics records are deleted after approximately 90 days; only aggregate, non-identifying statistics are kept longer. Account records are kept while your account exists and are deleted when you close it, except where we must retain billing records for accounting, tax, and legal purposes. Expired sign-in sessions are removed routinely. Records related to subscriptions are kept as long as necessary for accounting, tax, and legal purposes.

6. Service providers

We share data only with providers that help us operate the Service: Paddle (payments and order processing), Cloudflare (website and API hosting, CDN, and edge security), and Sentry (error monitoring, configured to exclude request bodies and personal data). We do not sell your personal data. These providers may process data outside Romania/the EU under appropriate safeguards.

7. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent. If you have an account, your email address is the identifier we use to locate your data; for billing questions, your Paddle order reference also works. The optional usage analytics are deliberately not linked to your account or identity, so we generally cannot locate “your” analytics records — which also means they cannot be exported or individually deleted on request. To exercise your rights, contact contact@scrubbr.app. You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP, dataprotection.ro) or your local data-protection authority.

8. Cookies

The scrubbr.app marketing site uses no advertising or cross-site tracking cookies. If you sign in, we set one strictly necessary cookie holding your session token, so that you stay signed in across the site and your account page; it is not used for tracking or advertising, and signing out removes it. The Paddle checkout and billing portal set cookies that are necessary to process your payment.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

10. Changes & contact

We will update the “Last updated” date above when this policy changes. Questions or requests: contact@scrubbr.app.