What Stitchbook does with your information

1. Information we collect

Account information

Signing in is optional. If you sign in with Google, we receive your name, email address, and profile photo URL from your Google account. If you create an account with an email address and password instead, we receive your email address; your password is handled by Firebase Authentication and is never visible to us. Firebase sends the account-verification and password-reset emails you ask for. Account information is used solely to identify your account and enable cloud sync across your devices.

Project data

Stitchbook stores the data you create within the app, including:

• Project titles, notes, and status
• Time tracking entries (timer sessions and manual adjustments), including time per part
• Counters and their goals
• Material costs and pricing estimates
• Photos and photo descriptions (alt text)
• App preferences and settings

Crash reports

Stitchbook uses Firebase Crashlytics. When the app crashes or hits a serious error, it sends a crash report: what went wrong in the code, your phone model, Android version, the app version, and random identifiers that are unique to this installation of the app. If you're signed in, the report is also tagged with your account's ID — never your name or email address — so we can tell whether a problem keeps happening to the same account. Crash reports never include your projects.

Feedback you send

If you use Send feedback in Settings, we receive what you write, the email address you choose to give for a reply (optional), the app version, your Android version, your phone model, and whether you were signed in. It does not include your projects or your account ID. If you email us instead, we receive your message and your email address. Feedback becomes a ticket in our support system so we can act on it and, if you left an address, reply.

Tips

If you leave a tip from Support Stitchbook in Settings, Google Play handles the payment. We receive the order record Google Play gives developers (which tip, the price, the date, and an order number); we never see your card or other payment details. A tip unlocks nothing, so the app doesn't send it to our servers or link it to your Stitchbook account.

Stitchbook Plus

Stitchbook Plus is an optional subscription that backs up your project photos (see "Photo backup" below). It needs an account. When you subscribe, Google Play handles the payment and gives the app a purchase token. Our backend sends that token to Google Play to confirm the subscription, then stores on your account whether Plus is active and when the current period ends, along with the token so that Google Play's later renewal, cancellation and expiry notices can be matched to your account. We never see your card or other payment details.

What we do not collect

We do not collect analytics or usage statistics, location data, advertising IDs, or your contacts. The only identifiers we use are the random crash-report identifiers described above. We do not use third-party analytics or advertising SDKs.

2. How your data is stored

On your device

Project data is stored in the app's private storage on your device, which other apps cannot read; most Android devices also encrypt this storage automatically. Photos are saved to the app's private storage; they are uploaded only if you subscribe to Stitchbook Plus (see "Photo backup"). Stitchbook works fully offline.

Cloud sync

If you sign in, your project data is synced to Google Cloud Firestore so you can use it on more than one device. It is transmitted over encrypted connections (HTTPS/TLS) and encrypted at rest by Google. Each account can read only its own data. Photos are not part of cloud sync; they are backed up only with Stitchbook Plus.

Photo backup (Stitchbook Plus)

With Stitchbook Plus, the photos you add to your projects are uploaded to Firebase Cloud Storage under your account, so you can see them on your other devices. They are transmitted over encrypted connections and encrypted at rest by Google, and only your account can read or delete them. Photos are compressed before upload (at most 4 MB each, up to 1 GB per account). Without Plus, photos stay on your device only. If your subscription ends, photos already backed up stay available for you to view and delete, but new photos are not uploaded.

Crash reports and feedback

Crash reports go to Firebase Crashlytics, run by Google. Feedback you send from the app passes through Stitchbook's backend (Firebase Cloud Functions and Cloud Firestore) to Alchemy Lab's own support ticketing system.

3. How we use your information

We use your information exclusively to:

• Provide the core app functionality (project tracking, time tracking, pricing)
• Sync your data across devices when you sign in
• Back up your photos and confirm your subscription if you use Stitchbook Plus
• Display your name and email in your profile
• Find and fix crashes and bugs
• Respond to feedback you send

We do not sell, rent, share, or monetize your personal data in any way. We do not use your data for advertising, profiling, or marketing purposes.

4. Data sharing

Your data is not sold or shared with third parties for advertising or any other purpose. Google Firebase processes data on our behalf to provide sign-in (Firebase Authentication), cloud sync (Cloud Firestore), photo backup for Stitchbook Plus (Cloud Storage), crash reporting (Crashlytics), and feedback delivery and subscription checks (Cloud Functions), governed by the Google Cloud Privacy Notice. Feedback is handled in Alchemy Lab's own support system. Tips and Stitchbook Plus payments are processed by Google Play under Google's own privacy policy.

5. Data retention and deletion

Deleted projects

When you delete a project, it is moved to a "Recently Deleted" area where it can be recovered for 30 days. After 30 days, the project and all associated data (time entries, parts, counters, materials, photos) are permanently deleted from your device and, if synced, from the cloud.

Account deletion

You can delete your account and all of its cloud data at any time from Settings > Account > Delete account and data. This permanently removes your data from our cloud servers, including any photos backed up with Stitchbook Plus, and cannot be undone. Deleting your account does not cancel a Stitchbook Plus subscription; cancel it in Google Play. Projects stored on your device are not removed by deleting your account; they remain until you delete them, uninstall the app, or clear its data.

Stitchbook Plus

Your subscription status and purchase token are kept on your account while it exists and are removed when you delete it. Google Play keeps its own record of the purchase under its own policy.

Crash reports

Crashlytics keeps crash reports and their identifiers for 90 days, then removes them. Deleting your account does not remove crash reports already sent; they expire on that schedule.

Feedback

The copy our backend keeps to deliver your feedback is deleted within 30 days. The resulting support ticket is kept for as long as we need it to handle your feedback. Feedback isn't linked to your account, so deleting your account doesn't delete it — email us to have it removed, quoting the reference the app showed after you sent it.

Data export

You can export all of your project data as a JSON file at any time from Settings > Data > Export data. Photos are included by reference; the image files themselves are not in the export.

6. Children's privacy

Stitchbook is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us so we can delete it.

7. Security

We take reasonable measures to protect your data, including app-private storage on your device, encrypted data transmission (HTTPS/TLS), and reliance on Google's enterprise-grade cloud security for synced data. However, no method of electronic storage or transmission is 100% secure.

8. Your rights

You have the right to:

• Access all data stored about you (via the in-app data export feature)
• Delete your data at any time (via in-app project deletion or account deletion)
• Opt out of cloud sync by not signing in (the app works fully offline, and your projects then never leave your device)

Crash reports are sent if the app crashes whether or not you sign in, and feedback is sent only when you choose to send it.

9. Changes to this policy

We may update this privacy policy from time to time. Changes will be posted at this URL with an updated "Last Updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact us

If you have questions or concerns about this privacy policy or your data, please contact us at:

• Email: [email protected]
• App support: [email protected]
• Website: alchemylab.sh