Privacy Notice
Last updated 25 September 2026
Who is responsible
Individual Entrepreneur Bloom and Beyond is the data controller for personal data processed through Scriba. This notice explains what we collect, why, and your rights.
What we collect and why
- Account data — email, display name, login credentials (passwords are stored hashed), or your Google sign-in identity. Used to create and secure your account (contract).
- Lecture content — recordings and files you upload, YouTube links, transcripts, summaries, quizzes, flashcards and your questions to Scriba. Used only to provide the service to you (contract).
- Usage and study data — minutes processed, quiz scores, flashcard reviews, study streaks. Used to run plan limits and show your progress (contract, legitimate interests).
- Technical data — IP address, device and browser information, error logs. Used for security, fraud prevention and fixing problems (legitimate interests).
- Plan status — which plan you have and when it renews. Payment card details are collected by Paddle, not by us.
Who we share it with
- Service providers — hosting, database and file storage, and AI model providers that transcribe and analyse your lectures on our behalf. They may only use your data to provide their service to us.
- Paddle — our Merchant of Record, for selling Scriba, subscription management, payments, tax compliance and invoicing.
- Professional advisers — lawyers and accountants, where needed.
- Authorities — where required by law.
We do not sell your personal data and do not use your lectures to advertise to you.
International transfers
Our providers may process data outside your country, including outside the UK/EEA. Where they do, we rely on safeguards such as Standard Contractual Clauses or adequacy decisions.
How long we keep it
Lectures and study material are kept until you delete them or your account. Deleting a lecture removes its audio, transcript and all derived material straight away. Deleting your account (Settings → Delete account) permanently removes all your data. Limited billing records are kept by Paddle and us as tax law requires; logs are kept for a short period and then deleted or anonymised.
Your rights
Depending on where you live (including under the GDPR), you can ask to access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time. You can delete lectures and your account yourself in Scriba. We respond to requests within one month. You also have the right to complain to your local data protection authority.
Security
We use encryption in transit, private per-user storage, and access controls so only your account can open your lectures.
Cookies and local storage
Scriba uses only essential browser storage to keep you signed in and to run checkout. We don't use advertising or analytics cookies.
Contact
To exercise your rights, contact Individual Entrepreneur Bloom and Beyond through the support email shown in your receipts or account emails.