Scoutia

Privacy Policy

Last updated / Effective date: September 30, 2026

Applies to: The Scoutia iOS app and related Scoutia services for the invite-limited Release build aligned to the Path B (#41 + #50) collection posture described below.

This Privacy Policy explains what information we collect in this Release, how we use it, and the choices you have. Work that exists only as draft code, DEBUG-only paths, or unmerged PRs is described under Future, not as current collection.

1. Who we are

Scoutia is a product that helps people discover and evaluate products through reviews, social signals, and related in-app features.

2. Information we collect (this Release / Path B — #41 + #50)

A. Identifiers — User ID

We collect an internal account identifier (for example a UUID) and related account identifiers needed to complete invite redeem and keep your session associated with you.

B. Contact Info — Name

If you continue with Sign in with Apple and share your name, we may receive your given name and family name and store them with your account.

C. User Content — Reviews (Other)

When you post a review, we collect the review text you submit (including any title you enter, which is sent as part of the review body) and any pro/con points you add. We link this content to your account and use it to operate the Feed and review features.

D. Other data — Consent and age records

At invite redeem, we record that you accepted Terms / Privacy and attested that you are 18+ (acceptance timestamps only on that request). If you complete the in-app consent step, we also store the Terms, Privacy, and age-attestation version strings you accepted through POST /v1/me/consent.

Not collected in this Release (present tense): Contact email; uploaded photos; Usage Data; Analytics event streams; Search History; iOS Diagnostics / Crash Data from the app binary.

3. Information we do not collect (this Release / Path B)

On the Path B audited posture, we do not collect:

We also do not:

Tracking (Apple definition): No
Product Personalization: No

4. How we use information (this Release)

We use the information in §2 only to:

  1. Create and manage your account after authentication and invite redeem (App Functionality)
  2. Gate access with the invite flow
  3. Operate review posting and the live Feed
  4. Store a shared Apple Sign In name with your account
  5. Record your acceptance of Terms / Privacy and applicable version strings
  6. Record and enforce your 18+ age attestation

We do not, for this Release, claim present-tense use for Usage Data / Analytics pipelines, A/B testing measurement, campaign measurement, Product Personalization, or third-party advertising tracking.

5. Backend operations footnote (not iOS Diagnostics)

Scoutia's backend may use Sentry in production for operational unexpected-exception reporting (integrations minimized; request bodies, cookies, and authorization headers stripped). That is a server-side operations practice.

This Policy does not declare iOS App Privacy "Diagnostics" or Crash Data collection for the app binary under this Path B posture, and does not describe crash diagnosis as a category of data the iOS app collects from you.

6. Sign-in for this Release

This Path B posture includes Apple Sign In and Google Sign In before the invite gate. If you use Apple Sign In and choose to share your name, we may receive and store your given name and family name. The iOS client does not send an email field in the audited flow.

Authentication does not bypass the invite gate. Access remains subject to successful invite redeem, and related account identifiers and consent records are linked to the session.

7. Sharing

We share personal information only when needed to operate Scoutia, for example:

We do not sell personal information. We do not share personal information with third parties for cross-app advertising tracking.

8. Retention

We retain account, consent, and operational records while your account is active and as needed to provide the service, resolve disputes, and meet legal obligations.

After you request deletion by emailing privacy@scoutiahq.com, we will delete or de-identify your account data within 30 days, except where law requires us to retain information longer.

Reviews are soft-removed / de-identified according to product rules (for example, content may be removed from public display and dissociated from your account identifiers rather than hard-deleted everywhere, where that is how the product operates).

9. Children

Scoutia is intended for users 18 and older. We require an age attestation. We do not knowingly collect personal information from children under 13. If you believe we have, contact privacy@scoutiahq.com and we will take appropriate steps.

10. Your choices and privacy rights (including CCPA / GDPR where applicable)

Depending on features available in your build and laws that apply to you, you may:

We do not sell personal information. We will respond to verified requests in accordance with applicable law.

Jurisdiction-specific rights language beyond the above: TBD pending entity formation and counsel review.

11. International transfers / hosting

Primary hosting is in US West / SFO cloud infrastructure. We may process personal information in the United States.

If you access Scoutia from outside the United States, your information may be transferred to and processed in the United States. Formal Standard Contractual Clauses (SCCs) / transfer mechanisms and counsel-approved transfer wording are pending (TBD).

12. Changes

We may update this Privacy Policy. Material changes will get a new version string for consent where our product requires versioned consent. Continued use after an updated effective date means you accept the updated Policy, except where law requires a new affirmative consent.

Same-day sync rule (locked): When collection, Tracking, or Product Personalization changes in a later submit SHA, we will update this Policy and App Store App Privacy ("Nutrition Labels") declarations on the same day so they stay synchronized.

13. Contact

Questions about this Privacy Policy: privacy@scoutiahq.com (once live).
Support: https://scoutiahq.com/support · support@scoutiahq.com (once live).
Operator mailing / legal name for correspondence: [Account Holder] (individual Apple Developer Program account holder; corporate entity TBD pending formation).

14. Future (not present tense for this Path B posture)

The following may apply only after the corresponding code ships and this Policy (and App Privacy declarations) are updated to the new submit SHA — same day as any collection / Tracking / Personalization change:

Until those ship, do not read this Future section as a present-tense collection claim.