Privacy Policy
Last updated: October 2026
Who we are
This policy explains how Écrin, Inc., 21 Linden Avenue, Vantry, OH 00000, handles personal information through the Écrin app and website. Questions or requests go to one address: contact@ecrin.example.
What we collect and why
| Information | What we use it for | Kept for |
|---|---|---|
| Mobile number | Sign-in codes, delivery updates | Life of the account |
| Recipient’s first name and address | Delivering the écrin | 2 years |
| Hidden note and sender’s name | Showing them when the QR code is scanned | 30 days after the scan or return |
| Chosen pickup day | Getting the écrin ready at the Écrin Point | 2 years |
| Courier location during a run | Live tracking for the sender | 7 days |
| Photo ID of couriers and Écrin Points | Vetting before any activity | 6 months after the check |
| Payment token | Charges and refunds | 7 years, for tax records |
We never receive your full card number: our payment provider only sends us a token that stands in for it.
Who we share it with
- The courier and the Écrin Point handling a delivery see the recipient’s first name and the address or pickup day, nothing more.
- Service providers bound by confidentiality: a hosting provider with servers in the United States, a PCI-DSS certified payment provider, a text messaging provider, and a push notification service.
- Public authorities, when the law requires it.
We don’t sell your personal information, and we don’t share it for cross-context behavioral advertising.
Your choices and rights
Depending on where you live, you may have the right to know what we hold about you, get a copy, correct it, delete it, and opt out of any sale or sharing. We extend these rights to every Écrin user, wherever they live.
Email us at the address above and we’ll answer within 45 days. We won’t treat you differently for exercising your rights, and you can use an authorized agent to make a request on your behalf.
Children
Écrin is meant for adults. We don’t knowingly collect information from children under 13, and we delete it if we learn we have.
Security
Data is encrypted in transit, and internal access is limited to the people who need it. A QR code only reveals its note once the delivery has reached the recipient.
Cookies
The ecrin.example website doesn’t use advertising cookies or third-party analytics trackers. Only strictly necessary cookies may be set to make the site work. The app doesn’t contain advertising trackers either.
Updates
If we make a meaningful change to this policy, we’ll tell you in the app before it takes effect.