Privacy Policy

1. Who we are

This Privacy Policy explains how Manatee Labs ("we", "us" or "our") collects, uses, shares and protects personal information when you use Scrip, including the website, the web dashboard, the Scrip apps for iOS and Android, the Scrip printer and hub software, and hardware kit ordering (together, the "Service"). It should be read together with the Terms of Service.

If Scrip is run for you by someone else on their own server (a "self hosted" deployment), that operator decides how your information is handled on that server, and you should ask them about it. This policy describes the Service as we run it.

2. Information we collect

We collect the following information, most of it directly from you or from the devices you connect:

• Account information: your name, email address and a stable account identifier, provided by our sign in provider when you sign in. We never see or store your password.
• Households: the households you create or join, your role in each, the email addresses you invite, requests you send to a household manager, and each household’s settings such as its timezone and receipt format.
• What you print: notes, checklists, reminders, templates, queued and scheduled prints, and a history of what was printed, when, and by whom.
• Calendars and tasks: the addresses of calendar feeds you add, the events we read from them to build your agenda, and, if you connect TickTick, an access token for your TickTick account plus the lists, tags and task titles your routines use.
• Printers and hubs: device identifiers, names, software version, install type, hostname, the addresses the device reports on your local network, its public key, when it last checked in, its print results, and whether it is enrolled in device management.
• Local network checks: when your phone reaches your printer on your home network, the printer signs a short lived statement that it did, and we record that statement so you can keep printing without remote access. We do not collect your phone’s location.
• App sign ins: a hashed session token for each signed in app, and when it was last used.
• Terms of Service acceptance: which version you accepted, when, through which surface, and the browser or app identifier that sent it.
• Hardware orders: if you request a kit, your contact email, the answers you give on the request and order forms (which may include a shipping address and phone number), quotes, links to invoices we send you, and the history of your order. Payments are taken by the invoice provider, not by us, and we never receive your card details.
• Remote access: whether each printer has a remote access subscription, its plan and paid through date, and a record of every change. If you ask us to turn on or renew remote access, the contact email and any note you give us, the emails we send you about it, and any payment link we send. Payments are taken by whoever issues the invoice, not by us, and we never receive your card details.
• Support: anything you send us when you contact support.
• Technical logs: server logs of requests and errors, which can include IP addresses and device or browser information. We use them to keep the Service running and secure.

3. How we use it

We use personal information to:

• provide the Service: sign you in, run your households, deliver prints to your printers on time, and build agendas and routines from your calendars and tasks;
• send the emails the Service depends on, such as household invitations, access requests, remote access and payment arrangements, order updates and invoices;
• keep the Service secure, prevent abuse, and investigate problems;
• maintain and improve the Service, including shipping software updates to printers;
• process and deliver hardware orders you ask for; and
• comply with the law and enforce our Terms of Service.

4. Legal bases

Where the law requires a legal basis for processing, we rely on performing our agreement with you (to provide the Service you signed up for), our legitimate interests (keeping the Service secure, reliable and improving, in ways that do not override your rights), your consent (for example when you connect TickTick, which you can withdraw by disconnecting it), and legal obligations.

5. Who we share it with

We do not sell your personal information and we do not share it for advertising. We share it only as follows:

• Your households: members of a household can see what is shared within it, such as its printers, queue and schedules. Household owners can see the member list and pending invitations. When you ask to join a household, the person you name receives your name and email address.
• Your printers: each printer in your household keeps a copy of the household’s schedules, reminders, calendar feed addresses, member names and print settings, so it can keep printing when offline.
• Service providers who help us run the Service, under contracts that limit their use of it: hosting and network providers, our sign in provider, our email delivery provider, and GitHub, which hosts printer software updates.
• Services you connect: TickTick, and the providers of calendar feeds you add, receive the requests needed to read your data. Printers may fetch calendar feeds directly.
• Invoice providers: if we send you an invoice link for a hardware order, paying it takes place on that provider’s site under its own privacy policy.
• Legal and safety: when we believe in good faith that disclosure is required by law, or is needed to protect the rights, property or safety of users, the public or us.
• Business changes: to a successor if the Service is reorganized, merged or sold, subject to this policy.

6. Data on your printer and phone

Your printer stores a copy of your household’s schedules and settings, the prints it has handled recently, and its own identity and keys. That data stays on the device until it is replaced or reset. Anyone with physical access to the device or its storage card may be able to read it, so keep your printer somewhere you trust.

The Scrip apps store your sign in token in your phone’s secure storage and remember a few preferences, such as which household you last opened. During setup, the Wi-Fi password you enter is sent straight to your printer over Bluetooth. It is not stored on your phone or sent to our servers.

The apps use Bluetooth only while you are setting up a printer, and look for printers on your local network only to print directly and to confirm you are at home.

7. Cookies

The website uses only the cookies it needs to work: a signed session cookie that keeps you signed in, and short lived cookies that protect sign in and Terms of Service acceptance. We do not use advertising, analytics or tracking cookies, and we do not respond to Do Not Track signals because we do not track you across sites.

8. How long we keep it

We keep your information for as long as your account is active and as needed to provide the Service. Print history, logs and expired sign in records are kept only as long as they are useful for running the Service.

When you delete your account, we delete it straight away along with what is tied to it: your print history, templates, reminders, routines, connected accounts, app sign ins, hardware orders and their invoice links, requests to join a household, and requests you made to turn on remote access. Households you own stay for the people still in them, without an owner, and so do their printers and what members shared there. Billing history for a printer keeps a record of the device, household and who made each change, because we may need it for accounting or legal reasons. Copies in backups are removed as those backups expire.

9. Security

We use measures appropriate to an early stage service to protect your information, including encrypted connections to our servers, hashed session tokens, signed cookies and signed printer software updates. No system is perfectly secure, and the Service is under active development, as the Terms of Service explain. Communication between your phone and your printer on your local network is not encrypted, so anyone able to observe that network may be able to read it.

10. Your choices and rights

You can see and change most of your information in the Service: leave or manage households, delete templates, reminders and routines, remove calendar feeds, disconnect TickTick and remove printers. Your name and email come from your sign in account. You can delete your account at any time from the Household tab in the app or on the web.

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. To make a request that the Service doesn't let you do yourself, email [email protected] from the address on your account. We may need to confirm it is you before acting, and we will not treat you differently for exercising these rights. You may also complain to your local data protection authority.

11. Children

The Service is not directed to children, and accounts may only be created by adults, as the Terms of Service describe. A household owner may let a younger family member use the household’s printer under their supervision. If you believe a child has given us personal information without a parent’s involvement, contact us and we will delete it.

12. International transfers

We and our service providers may process your information in countries other than the one you live in, including the United States. Where the law requires it, we rely on appropriate safeguards for those transfers.

13. Changes to this policy

We may update this policy as the Service changes. When we do, we will post the new version here with a new effective date, and if the change is significant we will let you know through the Service or by email. You do not need to accept this policy to keep using the Service, but please read it when it changes.

14. Contact

Questions about this policy or your information: [email protected].