Stitchside Privacy Policy

Applies to: Stitchside: Row Counter for iPhone and iPad (com.nagubuilds.stitchside). Developer and data controller: Nagarajan Seeni, trading as NaguBuilds. Business location: Chennai, Tamil Nadu, India. Contact: nagarajanseeni.dev@gmail.com.

This policy explains how information is handled when you use Stitchside or contact us about it. It covers the app; websites and services you choose to open have their own privacy information.

1. At a glance

You do not need a Stitchside account or sign-in.
Projects, imported pattern copies, counts, notes, annotations, and preferences are stored in the app's local storage. Stitchside does not upload or automatically sync project content to our servers.
Importing or exporting a file can involve Apple or a storage provider you choose. Device backups can also contain app data. These are separate from Stitchside's own storage and are controlled by those services and your settings.
With your consent, PostHog receives a limited set of usage events and broad outcomes. Project content is excluded. There is no session replay, automatic screen or tap capture, or automatic exception reporting through PostHog.
Apple processes payments. RevenueCat supplies remote upgrade offers, validates purchases, and manages Pro access using an app-specific identifier and Apple purchase information. Optional paywall measurement is described separately below.
Optional analytics is your choice. Declining or withdrawing consent does not prevent you from using Free features, buying Pro, or restoring eligible purchases.
Stitchside contains no advertising SDK and does not use an advertising identifier to track you across other companies' apps or websites. We do not sell or rent your personal information or share it for targeted advertising.

2. Information stored on your device

Stitchside stores information needed to keep your craft work together, including:

Project names, craft type, status, and project preferences.
Copies of PDF, image, and text files you import, text you enter, and previews generated from those files.
Counters, labels, targets, repeat settings, count history, and checkpoints.
Notes, highlights, pinned annotations, reader position, and marker settings.
Timer state and recorded time, unfinished drafts, and local recovery information.
Onboarding state, language and other app preferences, and optional trial-reminder settings.
Cached purchase-access information and SDK identifiers used for analytics or purchase services when those services are used.

You retain control of the content you add. We do not have a server copy of your project library and cannot recover it for you from our systems.

3. Import, export, backup, and deletion

Import. Stitchside accesses files you select through system file selection. A file provider, such as iCloud Drive, may download a selected file to your device. Stitchside then works with its local copy. The app does not scan your entire file or photo library.

Export and backup. You can prepare a .stitchkeep backup and choose where to save or share it through the system export interface. That archive contains the selected project data and associated files. The destination you choose may be a cloud service, another app, or another person. Their handling of the copy is governed by their terms and your instructions. Preparing a backup does not prove that the destination saved it; check the saved copy before relying on it.

Stitchside does not add password protection or encryption to the exported archive. Anyone who obtains a readable copy may be able to access its contents. Store and share it accordingly.

Device backups. iOS or iPadOS may include app data in a device backup when you enable that service. Stitchside does not provide automatic project sync between devices. Apple or your chosen backup service controls those backups.

Deletion. Moving a project to Recently Deleted normally leaves it recoverable for 30 days. You can permanently delete it sooner. Expired items are removed when the app next performs its cleanup; this is not a promise of background deletion at an exact time. Archiving or completing a project preserves it and is not deletion.

Deleting the app can remove its local data. Offloading an app can preserve data for reinstallation. Neither action removes original imported files, exported copies, device backups, or records already held by analytics or purchase providers.

4. Limited usage analytics

We use PostHog to understand which features people use, compare app versions, and investigate broad failure categories. Optional analytics starts only after you consent. You can decline or change your choice at any time using the app's analytics preference. Withdrawing consent stops future PostHog collection; contact us if you also want us to consider deleting information already collected. Necessary purchase and access-management processing is described in section 5.

The following limits apply to events Stitchside sends to PostHog. RevenueCat's separate paywall events are described in section 5.

The app restricts PostHog analytics to these categories:

Onboarding started or a path chosen: First launch or restart; the selected setup route and relevant step.
Project created: Count-only, import, sample, or duplicate; knitting or crochet; first, second, or Pro capacity category.
Import finished: PDF, image, or text; new project, attachment, or replacement; success, cancellation, or a broad failure category.
First count saved: Rows, rounds, or stitches; count-only or attached-pattern project. This event is limited to once per installation.
Project resumed: Entry point, pattern or count mode, and active, completed, or archived status.
A Pro feature requested: Feature category and whether access is free, owned, or unresolved.
Upgrade offer viewed: Entry point, product availability category, and available free alternative.
Purchase or restore result: Purchase or restore; broad outcome and provider error category.
Backup export or restore finished: Export or restore; all or selected projects for export; preparation, completion, cancellation, or broad failure category.

Events also carry a randomly generated analytics identifier, an event identifier, and a timestamp. The analytics identifier can associate events from an installation; it is not your name or Apple Account. These are pseudonymous records, not a claim that every record is irreversibly anonymous. We use them to understand aggregate behavior.

The app removes extra SDK event properties before submission. It does not send project or attachment identifiers, project names, filenames, file-provider paths or URLs, pattern content, search terms, notes, annotations, counter labels, exact counts or targets, individual counting taps, reading positions, timer durations, backup contents, checksums, purchase receipts, prices, or raw error messages to PostHog. It does not create named user profiles or connect the PostHog identifier to RevenueCat's app user identifier.

Session replay, automatic screen and interaction capture, surveys, and automatic exception collection are disabled. A broad failure category, such as an unsupported import or unavailable store, is different from a crash report or a recording of your screen.

The configured analytics destination is PostHog's United States service. Requests use HTTPS. The app disables IP-based location enrichment, but a network service still receives your IP address when a request reaches it. This does not mean that all provider infrastructure logs discard IP addresses.

More information: PostHog privacy policy.

5. Purchases, remote paywalls, and Pro access

Apple handles payment for Monthly Pro subscriptions and Lifetime Pro purchases. We do not receive your payment-card details or Apple Account password.

Purchase and access services

RevenueCat supplies the upgrade screens and available offers displayed in the app and helps us validate purchases, restore eligible purchases, and determine Pro access. These services require internet requests and can cache offer information, paywall assets, and purchase-access information on your device.

RevenueCat receives Apple purchase and transaction information. This can include product and transaction identifiers, purchase dates, subscription expiration and renewal status, trial eligibility or status, price and currency, and app, operating system, SDK, storefront, or locale information needed to deliver the service. Network requests also expose your IP address to the receiving service.

RevenueCat creates an app-specific user identifier without requiring a Stitchside account. We do not supply your name, email address, project content, or advertising identifier to RevenueCat. Restoring purchases can associate purchase records with another RevenueCat identifier so that eligible access can be restored.

Information objectively needed to provide an offer you request, complete or verify a purchase, restore access, or maintain an entitlement is processed independently of optional analytics consent. We do not treat consent to optional analytics as a condition of buying or using Pro.

Optional paywall measurement

With your consent, RevenueCat also processes events about how upgrade screens perform, such as when a paywall is shown or closed, an offer is selected, a button or other paywall control is used, or a purchase attempt is cancelled or fails. We use this information to understand purchase-flow problems and improve how we present offers.

These events can include the RevenueCat app user identifier, app or paywall session identifiers, an event time, paywall and offering identifiers and revision, selected product or package, display mode, language or locale, light or dark appearance, interaction type, and relevant purchase-result or error information. A link action may include the destination URL configured in the paywall. They do not include your project library, patterns, notes, or counter contents.

We honour your analytics choice for optional paywall measurement as well as for PostHog. If you decline or withdraw consent, we provide a purchase flow without optional paywall measurement. Necessary purchase, offer-delivery, and entitlement services remain available. These RevenueCat events are separate from PostHog's restricted event list.

RevenueCat may still deliver events collected before you withdrew consent. If an upgrade screen is already open in another app window, it may send a final screen-closed event as it closes after your choice changes. We do not open new measured upgrade screens while optional analytics is off. Withdrawing consent does not erase information already received by a provider; you can contact us about deletion as described below.

PostHog receives only the limited purchase-result event described in section 4, not the Apple receipt or RevenueCat purchase history. We do not connect PostHog's analytics identifier to RevenueCat's app user identifier.

Deleting Stitchside or requesting deletion of provider records does not cancel an Apple subscription. Manage subscriptions through Apple.

More information: RevenueCat privacy policy, RevenueCat data processing terms, and Apple privacy policy.

6. Notifications and permissions

If a verified Monthly trial is available and you choose a trial reminder, Stitchside can ask for notification permission and schedule a local reminder. It stores your choice and verified trial end date on your device. The reminder contains no project content. Stitchside does not use a server to send push notifications.

You can change notification permission in system Settings. Reminder delivery depends on the system and your settings; it is not guaranteed and does not cancel billing.

Stitchside does not request access to your contacts, location, camera, microphone, or entire photo library. File access is limited to the system-selected documents needed for import and export.

7. Support messages

If you email us, we receive your email address and whatever you choose to include, such as your name, device details, screenshots, or attachments. Email is processed by your email provider and our email provider, Google/Gmail.

We use this information to respond, investigate the issue, and maintain the relevant support correspondence. Support does not automatically attach your project library or send a message without your action. Please include only information needed to explain the problem, and remove private content from screenshots where possible.

8. Recipients and international processing

The recipients involved depend on the action you take:

PostHog: limited usage analytics with your consent.
RevenueCat: remote offer delivery, purchase validation and access management, and optional paywall measurement with your consent.
Apple: App Store transactions, system features, and any Apple backup or file services you enable.
File providers, export destinations, and recipients you choose: the files you import, export, or share.
Email providers: support messages you send.

We may also disclose information where legally required, or where lawfully necessary to investigate abuse or protect legal rights. We do not provide third parties with access to your local project library through these services.

Providers processing personal information on our behalf must protect it to a standard consistent with this policy, applicable law, and Apple's privacy rules. We remain responsible for selecting and overseeing those providers; linking to a provider's privacy policy does not replace that responsibility.

Apple and independently chosen file or export services may handle information under their own responsibilities rather than solely as our processors.

We are based in India. Our providers may process information outside your country, including in the United States. PostHog's United States service is the analytics destination for this app, and RevenueCat processes service data in the United States. Local project content is not sent to those services by Stitchside.

For transfers subject to GDPR restrictions, we use the applicable contractual safeguards in our providers' data processing agreements, including the European Commission's Standard Contractual Clauses and relevant UK or Swiss provisions where applicable. These protections address how personal information is processed when it crosses borders. You may contact us for information or a copy of the relevant safeguards, with confidential information redacted where appropriate.

Provider information: PostHog data processing agreement and RevenueCat data processing addendum.

Purposes and legal bases where the EU GDPR applies

Supply the offer or purchase service you request, verify a purchase, provide Pro access, and restore an eligible purchase: Performance of our contract with you, limited to information objectively necessary for those functions. This does not automatically authorize every provider analytics or reporting feature.
Respond to a request about the service you bought: Performance of that contract or steps you request before entering it.
Respond to other support enquiries, keep proportionate support records, investigate security problems, or handle legal claims: Our legitimate interests in answering enquiries, protecting the service, and establishing or defending rights, only where those interests are not overridden by your rights. You can object to this processing.
Meet a legal obligation: Compliance with a specific applicable obligation where that basis is available under the GDPR; not a blanket basis for optional data collection.
Optional PostHog usage analytics and RevenueCat paywall measurement: Your consent. You can decline or withdraw it through the app's analytics preference. Accepting the Terms or reading this policy does not give consent.

You do not need to provide us with your project library to use Free features. Purchase information is needed to verify Pro access. Contact information sufficient to reply is needed if you request a support response. Optional analytics must not be a condition of Free or paid functionality.

Automated purchase checks determine whether an entitlement is active. We do not use personal information for solely automated decisions that produce legal or similarly significant effects within the meaning of Article 22 of the GDPR.

9. Retention

Local projects and imported copies: Until removed through the app or its local storage is deleted; the Recently Deleted period is described in section 3.
Exported files and device backups: Until you or the relevant provider remove them under that service's settings and retention rules.
PostHog usage events and optional RevenueCat paywall events: While needed to compare feature or offer performance across app versions, investigate the associated problem, and evaluate the resulting improvement. We review whether identifiable event history is still needed and delete or anonymise it when those purposes no longer require it, subject to applicable legal requirements and valid deletion requests.
RevenueCat purchase and entitlement records: While needed to provide and restore the access purchased, reconcile transaction status, handle refunds or disputes, prevent purchase fraud, and meet applicable recordkeeping duties. A Lifetime purchase may require an access record for as long as that entitlement remains available; deleting the app alone does not end that need.
Support correspondence: For as long as needed to resolve the request and address related follow-up, disputes, or legal obligations.

We determine retention by the reason for collection, whether an issue or transaction is still active, whether the information is needed for an outstanding entitlement, and any applicable legal requirement. Provider storage defaults do not replace our assessment of how long personal information is needed. We may retain statistics that no longer identify or single out a person or installation for longer.

Local recovery copies and temporary files can persist while a save, recovery, or cleanup is in progress. Deletion is not a promise of immediate secure erasure from every device backup or third-party system. Removing the app does not automatically delete records already sent to PostHog, RevenueCat, or email providers.

10. Your choices and privacy rights

You can manage local projects and backups, choose what to import or export, and change notification permission in system Settings. Use the app's analytics preference to decline optional analytics or withdraw consent. You can use Free features without buying Pro, and optional analytics is not required for Pro.

For a privacy question or request, email nagarajanseeni.dev@gmail.com. Depending on applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information, restrict or object to processing, withdraw consent where processing relies on it, and complain to a data-protection authority.

We may need limited information to verify your request and locate the relevant records. Because Stitchside has no account, we may be unable to match an email address to a pseudonymous analytics or purchase record without additional information. Contact us for assistance locating the relevant record. We do not require you to create an account solely to exercise your rights. Do not send passwords, full payment-card details, or your entire project library.

Where the EU GDPR applies, we normally respond without undue delay and within one month of receiving a request. If complexity or the number of requests requires an extension, we may take up to two additional months and will explain that extension within the first month. Requests are normally free; any permitted exception will be explained. We request only proportionate information needed to verify identity or locate records and explain if we cannot identify a record.

You can complain to the competent data-protection authority, including in the EU country where you normally live, work, or believe an infringement occurred. You need not contact us first. The Terms' Chennai jurisdiction clause does not restrict those complaints or mandatory rights to seek a judicial remedy elsewhere.

We explain any limitation, including records that cannot be located or must be retained. Withdrawing consent does not affect processing that was lawful before withdrawal. This policy does not itself serve as consent to optional analytics.

11. Children

Stitchside is not directed to children under 13, or a higher age where applicable law requires it. We do not knowingly collect personal information from children below that age. If you believe a child has provided personal information, contact us so we can investigate and address information we can identify.

For online services that rely on a child's consent under the EU GDPR, the age at which a child can consent independently varies from 13 to 16 by country. A general age statement or an App Store age rating does not replace any required parental authorization. Optional analytics must not be enabled for a child where the required valid consent has not been obtained.

12. Security

The app's local storage benefits from Apple's application sandbox and device security protections. Network connections to PostHog and RevenueCat use HTTPS. The security of exported copies also depends on the destination you choose.

No storage or transmission method is completely secure. Protect access to your device and backups; we do not promise absolute security or recoverability.

13. Changes and contact

We may revise this policy to reflect changes in the app, providers, or applicable law. We update the date at the top when we revise it. Where required, we provide additional notice or obtain consent before a material change takes effect.

Nagarajan Seeni (NaguBuilds) Chennai, Tamil Nadu, India nagarajanseeni.dev@gmail.com