Privacy Policy
Last updated 9 August 2026 · Scratchd is published by Divya Duvvuri, trading as Innovatory. “Innovatory” below means the same.
The short version. Scratchd has no account and no servers. Your notes are ordinary files in a folder you chose, in your own iCloud Drive. Innovatory cannot see them, does not receive them, and collects no analytics or usage data.
1. What Innovatory collects
Nothing. There is no sign‑up, no account, no user identifier, no analytics SDK, no crash reporter, and no advertising or tracking framework in the app. Scratchd’s privacy manifest declares no tracking and no collected data types, and that declaration matches the code.
Innovatory operates no server that stores or receives your notes.
2. Where your data lives
Your notes, tasks, saved links, journal entries, drawings and attachments are stored as files in a folder you select — by default in your own iCloud Drive. That folder is visible to you in Finder and the Files app.
If you keep the folder in iCloud Drive, syncing between your devices is performed by Apple under Apple’s privacy policy, using your Apple Account. Innovatory is not a party to that transfer and has no access to it. If you choose a local folder instead, nothing syncs at all.
A small set of journal preferences (reminder times, focus areas and similar settings) is synced between your own devices using Apple’s iCloud key‑value storage. No note content is included.
3. Every network request the app can make
Scratchd is not an offline‑only app, and this policy will not claim it is. The complete list of outbound requests follows. Every one is either started by you or switched off until you turn it on, and none of them sends note content to Innovatory.
Apart from the quote service listed below, Scratchd contains no addresses of its own. Every other request goes to an address you supplied: a URL in a request note, a link you saved, or a provider you defined.
| Request | What is sent | When |
|---|---|---|
| API request notes | Exactly the HTTP request you composed — its URL, headers and body — to the server you addressed it to. | Only when you press Run on a request you wrote yourself. |
| Link title lookup | A request to the URL you are saving, to read its page title. Mac only. | When you save a link. |
| Daily quote | A request to zenquotes.io containing no identifier, no parameters and no content of yours. |
Off by default. Only if you switch on the journal’s optional daily quote. |
| Preview enrichment providers | An identifier read from the file you are previewing, sent to a provider you defined. Scratchd ships with no providers and no addresses built in. | Off by default. Requires switching on “Allow library enrichment providers” and adding a providers.yaml file to your own library. |
4. Voice, transcription and on-device intelligence
Voice notes are transcribed using Apple’s speech recognition, with on‑device recognition set as a requirement, and are then written up using Apple’s on‑device models. Both steps must be available locally. If either is not, Scratchd declines rather than falling back to server‑based recognition or a hosted model. Your audio is not transmitted, and recordings are discarded after processing. This applies to dictation from Apple Watch and CarPlay as well.
The journal’s optional generated reflection uses the same on‑device foundation models. Nothing is sent to Innovatory or to any third‑party AI service, and there is no cloud model.
5. Permissions the app may ask for
| Permission | Why |
|---|---|
| Microphone | Recording voice notes. Recordings are discarded after transcription. |
| Speech recognition | On‑device transcription of those recordings. |
| Calendar | Reading your events so meeting notes can be suggested and prefilled. Read‑only; nothing is written back and nothing leaves the device. |
| Notifications | Local journal reminders at times you choose. Local only — there is no push server. |
| Automation / Apple Events (Mac) | Reading the frontmost tab’s address and title from a named list of browsers when you capture a link. Not used to control other apps; the feature simply does nothing if you decline. |
| Input Monitoring (Mac) | Noticing the one global shortcut that opens Quick Capture, ⌃⌥ Space. Scratchd listens for it and does not swallow it, so the keystroke still reaches whatever app is in front. No other key is acted on, and nothing about your typing is recorded or transmitted. |
| Accessibility (Mac, direct download only) | Required for the global Quick Capture shortcut in the direct‑download build, including the Double Shift and Double Caps Lock options that build adds. The Mac App Store build uses Input Monitoring instead and offers only ⌃⌥ Space. |
Scratchd does not request access to your photo library — picking a photo uses the system picker, which hands over only the image you chose. Scratchd does not request location, contacts, or health data, and does not use them.
6. Diagnostics
Scratchd keeps a diagnostic log on your device so you can see what it has been doing. It is never uploaded. If you want to send it to Innovatory when reporting a problem, you attach it to an email yourself.
7. Children
Scratchd is suitable for all ages and collects no personal information from anyone, including children.
8. Your rights
Rights of access, correction, deletion and portability exist under laws including the GDPR and the CCPA. In Scratchd’s case the design already satisfies them: your data is in a folder you control, so you can read it, edit it, copy it or delete it at any time. Innovatory holds no copy, and cannot produce or destroy one on your behalf.
Innovatory holds no personal information, and so does not sell or share any.
9. Changes to this policy
If this policy changes, the date at the top changes with it. Any change that affects what leaves your device will also be noted in the app’s release notes.
10. Contact
Questions about this policy: hello@innovatory.xyz. Scratchd is published by Divya Duvvuri, trading as Innovatory, which is also the name shown as the seller on the App Store.