Stitchsong
Privacy Policy
Effective October 15, 2026
Stitchsong teaches crochet and knitting with narrated lessons, pattern tools and a small community. We built it so that most of what you do never leaves your device. This policy explains what does, why, and how to delete it.
- No ads, no ad tracking, no selling or sharing data with data brokers.
- You can use the app without an account. Your progress, patterns, counters and stash stay on your device and, if you turn it on, in your own private iCloud.
- Data reaches our servers only when you use online features: the community, AI help, Ravelry import, or subscriptions.
- You can delete your account and everything linked to it from the app's Settings.
1. Data that stays on your device
Lesson progress, row counters, patterns (including PDFs you import), projects, timers, yarn stash, measurements and settings are stored on your device. If you enable iCloud sync, a copy is kept in your private iCloud database, which only your Apple Account can read — we cannot see it.
2. Microphone, speech and camera
- Voice commands (“pause”, “repeat”, “I'm ready”) use Apple's Speech framework. Audio is processed on your device when supported; otherwise Apple processes it under Apple's privacy policy. We never receive or store your audio.
- Barcode scanning of yarn labels runs entirely on your device.
- Photos you pick or take are only sent anywhere when you use an AI feature or post them to the community (see below).
3. Online features and the data they use
| Feature | What is sent | Where |
|---|---|---|
| App basics | A random anonymous ID created on first launch, used to keep daily AI limits and protect the service from abuse. | Google Firebase (Authentication) |
| Narration audio | Standard download requests (IP address, device type) when lesson audio is fetched. | Google Firebase (Storage) |
| Community | If you sign in with Apple to post: your chosen username, the posts, photos, videos and comments you share, likes, and reports you file. Posts are visible to other users. Sign in with Apple may share your name with us (kept in your private sign-in record, never shown publicly); we don't request your email. | Google Firebase (Authentication, Firestore, Storage) |
| AI help (coach, stitch identification, photo to pattern) | The question or photo you submit, with your language, skill level and craft preference. Requests are processed to produce an answer and are not stored by us; we keep only a daily usage count. Anthropic processes them on our behalf through its commercial API, which does not use them to train its models. | Google Firebase (Cloud Functions) and Anthropic (Claude) |
| Ravelry import | If you connect Ravelry, an access token that lets us fetch your projects, library and pattern PDFs at your request. Disconnect any time in the app. | Google Firebase; Ravelry |
| Subscriptions | An anonymous app user ID and your purchase history, used to unlock Pro and restore purchases. Payment is handled by Apple; we never see card details. | Apple; RevenueCat |
| Ad attribution | If you installed the app after tapping an ad on the App Store, Apple tells us which ad campaign and search keyword led to the install (Apple's AdServices attribution). It contains no personal or cross-app tracking data and lets us see which ads work. No permission prompt is needed because nothing is tracked. | Apple; RevenueCat |
| Reminders | Practice and trial reminders are local notifications scheduled on your device. | Your device only |
Our service providers process data only to run these features: Google (Firebase), RevenueCat, Apple, Ravelry (only if you connect it) and Anthropic. Firebase data is stored in the United States.
4. What we don't do
We don't use analytics or advertising SDKs, don't track you across other companies' apps or websites, and don't sell or share personal information for advertising.
5. Retention and deletion
- Delete account: Settings → Delete my community posts & account removes your community profile, username, posts, comments, likes, uploaded media, Ravelry connection and AI usage records from our servers.
- Deleting a single post or comment removes it immediately.
- Uninstalling the app removes on-device data; turn off iCloud sync or manage iCloud storage in iOS Settings to remove the iCloud copy.
- Reports about other users' content are kept as long as needed for moderation.
6. Your rights
Depending on where you live (for example under the GDPR, UK GDPR, KVKK or US state laws such as the CCPA), you may have the right to access, correct, delete or export your data, and to object to or restrict processing. Most of this you can do in the app; for anything else email info@appnano.net. We respond within 30 days. You may also complain to your local data-protection authority.
7. Children
Stitchsong is not directed at children under 13. If you believe a child has given us personal information, contact us and we will delete it.
8. Security
Data travels over encrypted connections. Server access is restricted by security rules so that users can read and change only their own private data; API keys and Ravelry tokens stay on the server and never ship in the app.
9. Changes
If we change this policy we will update the date above, and tell you in the app for significant changes.