Scrumly is a daily scrum service run by Appable Technologies Pvt. Ltd. ("Appable", "we"), [registered address]. This policy explains what personal data Scrumly handles, why, and the choices you have. It covers the app at app.scrumly.in, the mobile app and the website scrumly.in.
Who is responsible for your data
When your employer or another organisation gives you a Scrumly account, that organisation decides what Scrumly is used for and is responsible for your data (under India's Digital Personal Data Protection Act, 2023, it is the data fiduciary). Appable processes that data on its behalf. For the website, for billing and for our own customers' account owners, Appable is responsible.
What we collect
- Account details: name, work email, mobile number, role, team, squad, department, designation, location and reporting manager, as entered by your organisation or by you.
- What you write: daily updates (last working day, today's focus, blockers), weekly summaries, tasks, comments, read receipts and files or Google Drive links you attach.
- Voice updates: when you choose to speak an update, the recording is sent for transcription and the text is saved with your update.
- Attendance: the time you post your daily update and, if your organisation turns it on and you allow it, your precise location and network IP address at that moment only. Leave entered by your organisation.
- Activity in the app: sign-in times, active time while the app is open, the device and browser you use, and push notification tokens.
- Billing: for organisation owners, the organisation's billing name, address, GSTIN, plan, invoices and payment status. Card, UPI and bank details are handled by our payment provider; we never see or store them.
- Support: what you send us when you ask for help.
We do not collect your location in the background, and we do not read anything on your device outside Scrumly.
Why we use it
- To run the service: show your updates to the people your organisation allows, remind you to post, track tasks and timesheets, and mark attendance.
- To keep accounts secure: sign-in checks, two-step verification, and detecting misuse.
- To bill organisations and issue GST invoices.
- To answer support requests and tell you about changes to the service.
- To improve Scrumly using combined, non-identifying usage figures.
We do not sell personal data and do not use it for advertising.
Who can see it
- Inside your organisation: your updates and attendance are visible to you, your Team Lead and Admin, and anyone your organisation gives Scrum review. Colleagues see only the leaderboard (name, XP, streak, on-time rate).
- Service providers that work for us under contract: our hosting provider ([hosting provider and region]); Razorpay (payments); Deepgram (voice transcription, only for voice updates); Anthropic (sorting a voice update into its sections, only for voice updates); Cloudflare (delivering and protecting the website).
- Authorities, when the law requires it.
How long we keep it
We keep your data while your organisation uses Scrumly. When an organisation closes its account, we delete its data within 90 days, apart from invoices and records the law requires us to keep (usually 8 years for tax records). Backups are overwritten within 30 days of deletion.
How we protect it
All traffic is encrypted. Passwords are stored as one-way hashes. Each organisation's data is kept apart in the database, every screen opened through "Sign in as" is recorded, and access is limited by role.
Your rights
You can ask to see, correct or delete your personal data, withdraw consent you gave (for example to precise location), and nominate someone to act for you. Ask your organisation first, as it controls your account; you can also write to us. We answer within 30 days.
Cookies and storage
The app keeps you signed in with one secure cookie and remembers preferences (such as a collapsed menu) in your browser. The website uses no advertising or tracking cookies.
Children
Scrumly is for work teams and is not meant for anyone under 18.
Changes
We will post changes here with a new date, and tell account owners in the app before important changes take effect.
Contact and grievances
Privacy questions: [email protected]. Grievance Officer: [name], [email], [address]. If you are not satisfied with our answer, you may approach the Data Protection Board of India.