privacy policy

in short

Scrap is a short-video social network for friends. We only collect what the app needs to work. We do not sell your data, we do not show ads and we do not track you in other apps or websites.

what we collect

Account: email, official first and last name, @username, your date of birth (private: only you and the moderation team see it; it is used only to confirm you are 18 or older), password (stored encrypted by our login provider) and who invited you.

What you post: videos, daily notes, captions, tags, comments, notes on profiles, testimonials, ratings, quizzes, community posts, messages, profile photo and bio.

Use of the app: likes, follows, friendships, saves, reposts, which videos you watched for 2 seconds or more (to count views and show your "watched" history for 30 days), profile visits (only if you turn them on) and notifications.

Device: a random code saved on your device to enforce one account per device, with a label such as "iPhone · Safari". We do not collect your contacts or a device fingerprint.

Location: only when you choose to send it in a message; it goes only to that conversation. We never track your location in the background.

Video calls: audio and video go directly between the two phones; when that is not possible they pass through Cloudflare's relay. Scrap does not record calls.

Notifications: if you allow them, the code that Apple, Google or your browser gives us to deliver notifications to this device.

Camera, microphone and photos: used only when you choose to record, call, or pick a video or photo. Nothing is recorded in the background.

Feed time limit: counted only on your device.

how we use it

To run the app: show your profile and posts to people, deliver messages and notifications, count views, suggest friends (friends of friends) and keep the feed working.

To keep everyone safe: review reports, apply the 10 public rules and publish the anonymous transparency numbers.

We do not use your data for advertising and we do not train artificial intelligence with it.

who can see what

For now every profile is public to people logged in to Scrap. Messages are only between friends. The daily note is visible to friends for 24 hours, and only after they post theirs; after that only you see it in "my days". Saves and history are only yours.

The Scrap team can access content when reviewing reports or appeals.

companies that help us

Supabase (database, login and photos, servers in the United States), Vercel (hosting of the app), Cloudflare (video storage and playback, and the relay for calls when needed), Apple and Google (notification delivery). They only process data to provide these services to Scrap.

Because these servers are outside Brazil, there is an international data transfer, made with the contractual safeguards these providers offer.

how long we keep it

While your account exists. When you delete a post, the video is also deleted from Cloudflare. When you delete your account (Edit profile > Delete my account), your videos, photo and all your data are deleted right away. Backups of our providers are automatically overwritten within a few days.

Moderation decisions can be kept in anonymous form for the transparency report.

Error reports: when something breaks in the app, we keep the technical error message, the page, the browser model and which account it happened to, for up to 30 days, only to fix it. We do not keep what you wrote or recorded.

Access records: Brazilian law (Marco Civil da Internet, art. 15) requires us to keep the IP address, date and time of each access to the app for 6 months, in secrecy. They are kept even if you delete your account, until those 6 months pass, and are only handed over by court order.

Content removed for breaking the rules, and reports of abuse involving minors, can be preserved for the time required to cooperate with the authorities.

your rights

Under Brazil's LGPD and similar laws you can ask to access, correct, export or delete your data, and to know who we share it with. Most of it you can do yourself in the app (edit profile, delete posts, delete account, and Settings > Download my data, which gives you a file with everything that is yours). For anything else, contact us through the Report screen in the app, choosing "other" (the official contact email will be published here).

children

Scrap is only for people aged 18 or older, confirmed by date of birth. If we find an account of someone younger, we delete it. Our standards against child sexual abuse and exploitation are at /seguranca-infantil.

security

Every table has access rules on the server, connections use HTTPS and the video token never reaches the browser. No system is 100% secure; if something serious happens we will let you know.

changes

When this policy changes in an important way we will warn you inside the app before it takes effect.

contact

Questions about privacy: through the Report screen in the app, choosing "other" (the official contact email will be published here).