Privacy policy

Draft: the seller name and contact address are placeholders until the Paddle account is set up. Review before launch.

Last updated: 8 November 2026

Scratchpad is built to keep your data on your Mac. This policy explains what leaves your Mac, and when.

Data stored on your Mac

Your notes, todos, reminders, timers, history and settings are stored in Scratchpad's private container on your Mac. API keys and your licence key are stored in your macOS Keychain. Backups you export never include keys.

What is sent with an AI command

AI is optional. When you use it, each command sends:

• the text of the command;
• your Today and Later items, including their details, links and reminder times, so the AI can find the item you mean;
• the current date and time;
• your notes, only if you've turned on Include notes in AI requests. It's off by default, and when it's off, notes never leave your Mac.

Scratchpad may also send the text of a new reminder or timer to create a short label for it.

Your own API key

Requests go directly from your Mac to the provider you choose (for example OpenAI or Anthropic), under that provider's terms and privacy policy. We never see them.

Scratchpad AI and the free trial

Requests pass through our server at api.getscratchpad.app to OpenAI, which processes them. Our server doesn't store or log what you typed or what the AI replied. OpenAI doesn't use API data to train its models, and keeps it for up to 30 days for abuse monitoring, longer only where the law requires it. See OpenAI's enterprise privacy page.

To run the service, our server stores:

• for subscribers: a one-way hash of your licence key, your Paddle customer and subscription IDs, your subscription status and dates, and how much of your allowance you've used each day;
• for the free trial: a random ID created by the app on your Mac and how many free commands it has used;
• a salted hash of your network address, kept for at most a few days, to limit new trials and key recovery attempts from one network.

We don't store your email address. When you use Find my key, we check the email you enter against Paddle's records and don't keep it.

Payments

Paddle processes payments as the merchant of record and handles your billing details under Paddle's privacy policy. We never see your card details.

What Scratchpad doesn't do

The app and website contain no analytics, advertising, tracking or crash-reporting code, and we don't share or sell data to data brokers or advertisers.

Your rights

You can ask us to delete the data our server holds about your licence or trial. Contact us at the address below.

Children

Scratchpad is not directed at children and does not knowingly collect personal information from anyone.

Changes

If this policy changes, the updated version will be posted here with a new date.

Contact

[Seller name], [contact email]