Legal
Privacy Policy
Effective date: June 27, 2026
This policy explains what information StitchLog collects, how we use and share it, how long we keep it, and the choices and rights you have. It applies to the StitchLog mobile app and this website.
Information we collect
- Account and identity. When you sign in, our authentication provider (Clerk) creates an account using the credentials from your chosen provider (Sign in with Apple or Google). We receive a user identifier and, depending on the provider and your settings, your email address and display name.
- Project content. The projects, thread palettes, progress journal entries, tags, custom thread colors, and notes you create in the app.
- Optional media. Photos you choose to add, such as project cover images, journal photos, and a profile avatar.
- Technical and operational data. Limited information needed to operate the service securely, such as sync timestamps, request metadata, and the IP address used for rate limiting and abuse prevention.
- Waitlist. If you join our waitlist on this website, we store the email address you submit and which part of the page you submitted it from.
We do not use third-party advertising trackers, and the app does not track you across other apps or websites.
How we use information
- Provide core features such as project tracking and cross-device sync.
- Authenticate you and protect the security of your account.
- Operate, maintain, troubleshoot, and improve the reliability and performance of the service.
- Prevent abuse and fraud and enforce our Terms of Use.
- Communicate with you about the service or, if you joined it, the waitlist.
- Comply with legal obligations.
How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We rely on a small set of service providers that process data on our behalf under contract:
- Clerk — authentication and identity management.
- Neon — managed Postgres database hosting for your account and project data.
- Vercel — application hosting, file storage for your photos, and scheduled maintenance jobs.
We may also disclose information if required by law or to protect the rights, safety, and security of our users and the service.
Data retention and deletion
- We keep your account and content for as long as your account is active.
- You can delete your account at any time from within the mobile app. When you request deletion, your account enters a 30-day grace period (shown in the app as pending deletion). You can cancel during this period to keep your data.
- After the grace period, a scheduled job permanently deletes your data, including your uploaded photos (Vercel), your database records (Neon), and your authentication identity (Clerk).
- When you sign out, the app erases the local copy of your projects, journal entries, photos, and related data from that device.
- If you use the app in local-only mode without an account, your data stays on your device and is not sent to our servers.
- Waitlist emails are retained until launch communications are complete or you ask us to remove your address.
Your rights and choices
Depending on where you live (for example, under the GDPR in the EEA and UK, or the CCPA and CPRA in California), you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing.
You can exercise the main controls directly in the app: use local mode without an account, sign out to stop sync and clear local data, or request account deletion. For other requests, contact us at privacy@stitchlog.app. We will respond as required by applicable law and will not discriminate against you for exercising these rights.
Children’s privacy
StitchLog is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
International users
We are based in the United States, and our service providers process and store data in the United States and other regions where they operate. By using the service, you understand that your information may be processed in the United States.
Security
We use measures such as authenticated access, time-limited signed URLs for stored photos, and rate limiting to help protect your information. No method of transmission or storage is completely secure, but we work to protect your data.
Changes to this policy
We may update this policy from time to time. When we do, we will revise the effective date above and, for material changes, provide a more prominent notice.
Contact
For privacy questions, contact us at privacy@stitchlog.app.