Scrappy Kin Privacy Policy
Effective date: September 1, 2026
Applies to: The Scrappy Kin iPhone app, Gmail sending, this website, and user-initiated support conversations.
This policy explains what stays on your iPhone, what goes through Google when you send an email, and what Scrappy Kin receives only if you choose to contact us. Scrappy Kin requests only Google's gmail.send permission and does not operate an account or user-data backend.
On this page
1. Who we are
Scrappy Kin Inc. ("Scrappy Kin", "we", "us") is a Canadian company that builds tools for sending data-broker opt-out requests without handing Scrappy Kin access to your inbox.
2. What this policy covers
- The Scrappy Kin iPhone app
- Scrappy Kin's use of the Gmail API permission
gmail.send - Support or privacy emails you choose to send to Scrappy Kin
3. Data the app uses
| Data category | Source | Purpose | Where it stays |
|---|---|---|---|
| Profile details: full name, email address, city, and optional state and partial ZIP code | Entered by you in the app | Included in the opt-out emails you review and send | Encrypted local app storage on your iPhone; not uploaded to Scrappy Kin servers |
| Saved Gmail permission | Granted by you through Google's consent screen | Allows Scrappy Kin to send opt-out emails that you initiate | The iPhone Keychain; deleted from your iPhone when you disconnect Gmail inside Scrappy Kin |
| Email wording, send queue, and local sent history | Prepared by the app and optionally edited by you | Lets you review requests before sending and see which broker emails were sent | Encrypted local app storage on your iPhone; not uploaded to Scrappy Kin servers |
| Optional troubleshooting logs | Created locally only when you turn diagnostics on | Helps you inspect and share technical details when troubleshooting | Encrypted local app storage on your iPhone unless you manually export and share it |
| Support correspondence | Emails and attachments you choose to send to Scrappy Kin | Responding to support and privacy questions | The support or privacy inbox. You can ask us to delete your correspondence, subject to legal obligations. |
4. Data we do not access
- We do not read, index, or store your Gmail inbox, labels, or metadata.
- We do not request Gmail permissions that would let Scrappy Kin read your email, inspect message metadata, or change your mailbox.
- We do not sell personal data or use Google data for advertising.
- We do not run background services that send email without your review and approval.
5. How Gmail data flows
- You tap Connect Gmail and Google shows the OAuth consent screen.
- Scrappy Kin requests only
gmail.sendso the app can deliver the prepared broker emails you review and approve. - After you approve the permission, Scrappy Kin stores it in the iPhone Keychain and uses it only when you approve a send.
- No Gmail content is copied to Scrappy Kin servers. The email goes directly from your iPhone to Google, then to the broker or privacy contact shown in the prepared request.
- When you disconnect Gmail inside Scrappy Kin, the app asks Google to revoke access and deletes the saved permission from your iPhone.
- If you remove access in Google Account settings, Google disables the permission but cannot delete data stored on your iPhone. Use Scrappy Kin's disconnect control if you also want to remove the local copy.
6. Local storage and diagnostics
- The saved Gmail permission lives only in the iPhone Keychain. Scrappy Kin does not sync it to our servers.
- Your profile, email wording, send queue, and sent history stay in encrypted local app storage on your iPhone.
- Deleting all local data removes that local app data and disconnects Gmail. Deleting local data does not cancel an Apple subscription.
- The Scrappy Kin iPhone app uses no analytics SDKs, no third-party tracking tools, and no automatic crash-reporting services.
- Optional local diagnostics are off by default; if you turn them on, logs stay on your device and are only shared if you manually export and send them to us.
- Troubleshooting logs record limited app events and state, not Gmail content.
7. Limited Use compliance
Scrappy Kin complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- Gmail data is used only to send the opt-out emails you initiate and to show you a local record of the attempt.
- Gmail data is transferred only to Google as the email provider and to the broker or privacy contact shown in the prepared email you approve.
- No Gmail data is used for advertising, human training, or unrelated features.
- Human access to Google user data occurs only when you explicitly share details with Scrappy Kin support.
Website measurement
With your permission, we count online page visits to scrappykin.com, our blog, and Chess to understand whether our work is being used. Each page load adds one count. We keep daily totals and public page paths, not a count of unique people. We do not measure what you read, click, or do within a page, or how long you stay. Chess play is not measured.
Our analytics does not create a visitor identifier or keep a record linking visits from the same person, across days, or across our sites. It does not collect referring domains, geography, account identity, cookies, full URLs, query strings, or a raw event history. Like other web servers, ours receives your network address and browser description to answer a request. The analytics collector does not use your address to distinguish visitors; it briefly checks the browser description to omit known automated traffic. Neither value is saved in analytics data.
Measurement stays off until you choose to allow it on each site. Dismissing the choice, being unable to save it, or sending Global Privacy Control or Do Not Track keeps it off. You can change your choice using Privacy choices in that site's footer. Declining later stops future counts; past aggregate counts cannot be located or removed for one person because they contain no visitor identity. Privacy and administration pages are not counted.
8. How we share data
We only share Gmail data in these cases:
- With Google, solely to send the email you approved via the Gmail API
- With the broker or privacy contact shown in the prepared email you approve
Because Scrappy Kin keeps Gmail content, the saved Gmail permission, and your opt-out data on your iPhone, the main user-specific information we may hold is whatever you directly send us through support or privacy email. We may disclose correspondence we hold if the law requires it.
We do not sell personal data or license Gmail data to partners.
9. Security posture
Scrappy Kin follows a zero-trust model: assume infrastructure fails, minimize the blast radius, and keep sensitive data on the user's device whenever possible. We design the product so we do not possess Gmail content that could be compelled from us; if our servers are compromised, attackers still cannot read your Gmail.
10. Your choices
For a plain-language guide to deleting local app data, disconnecting Gmail, managing subscriptions, and controlling diagnostics, see Privacy choices.
- Disconnect Gmail inside Scrappy Kin to ask Google to revoke access and delete the saved permission from your iPhone
- Disable Scrappy Kin's Google permission separately in Google Account settings
- Delete your profile, email wording, send history, queue, and diagnostics through Settings > Privacy & local data
- Ask privacy questions or request deletion of support correspondence by contacting privacy@scrappykin.com
- Opt out of optional diagnostics entirely
11. Children's data
Scrappy Kin is intended for people 16 and older, is not directed to children under 13, and does not knowingly collect personal data from children under 13. Scrappy Kin does not ask for a birth date or verify a user's age.
12. Changes to this policy
We will post updates at scrappykin.com/privacy.html with a clear effective date and, when practical, summarize material changes inside the app.
13. Contact us
- Privacy & compliance: privacy@scrappykin.com
- Support: support@scrappykin.com