Privacy

WHO WE ARE

Confetti Cross Stitch is operated by Ackee & Software Limited. For any privacy question, email support@ackeeandsoftware.com.

WHAT STAYS ON YOUR DEVICE

Your patterns, your stitching progress, your parked needles, goals, thread labels, fabric choices and app settings are stored on your device. They are not uploaded, and we cannot see them.

WHAT LEAVES YOUR DEVICE, AND WHEN

A pattern file or photograph is sent to our conversion service only when you add or create a pattern, or convert one again, and only so it can be turned into a chart. The finished pattern is downloaded back to your device and the copy on the server is deleted. We do not read, keep or share those files for any other purpose. If a file is locked and you type its password, the password is used once to unlock it and is not kept.

Each conversion leaves a short note on our server: the type and size of the file, how many pages it had, which of our readers handled it, whether it worked, and any error. It never includes the file, its name or the pattern. We use it to fix the kinds of file we get wrong.

If you tap "Report a conversion problem", the message you write, the email address you choose to give, and the pattern file are sent to us so a person can look at what went wrong. That is the only time we receive your file at your request.

ANONYMOUS USAGE

The app sends anonymous usage events so we can see which chart formats convert successfully and which parts of the app get used. These carry counts and file TYPES only — never a pattern's name, its file, its threads or a single stitch of your progress. They are not tied to your name, your email or your Apple Account or Google Account.

SUBSCRIPTIONS

A subscription is bought from the App Store or Google Play and verified through RevenueCat, which tells the app whether it is active. The App Store or Google Play handles the payment; we never see your card. RevenueCat receives an anonymous identifier and the receipt it issues, not your name.

WHO WE SHARE IT WITH

A few providers run parts of the service for us. They handle only what is described here, on our behalf, and may not use it for their own purposes:

- Railway hosts our conversion service: the files you send while they convert, the conversion notes described above, and the short-lived request records any web server keeps, such as the time and internet address of a request.

- Google Firebase (App Check) confirms that an upload comes from the genuine Confetti app. It sees that a check happened, not your file.

- The App Store or Google Play takes payments; RevenueCat keeps track of whether a subscription is active.

- PostHog receives the anonymous usage events.

- Resend delivers the problem reports you choose to send us, by email.

We may disclose information if the law requires it, or to protect the rights, property or safety of ourselves or others. We do not sell, rent or trade your data, and we do not make it available to advertisers.

HOW LONG WE KEEP THINGS

A converted file is deleted from our server as soon as your device has the finished pattern. A file that fails to convert stays there until you remove it from your library, so you can send it to us or try again. Anything left on the server — a conversion your device never collected, a failure never removed — is deleted after 30 days. A problem report and its file are kept for up to six months, then deleted. The conversion notes hold nothing that identifies you or your file. Patterns on your device are removed when you delete them or the app.

SECURITY

Files travel to and from our service encrypted. A conversion can only be reached with its random identifier, which only your device knows. We take reasonable steps to protect the service, but no system is impenetrable.

YOUR RIGHTS

Depending on where you live, you may have rights under the GDPR (EEA and UK), the CCPA/CPRA (California) or similar laws, including access, correction, deletion and objection. We hold no account and nothing that names you, so there is usually nothing of yours for us to find — but email support@ackeeandsoftware.com and we will help.

INTERNATIONAL TRANSFERS

The service is operated from Jamaica, and our providers process data in the regions where they operate, including the United States. Using the service means the files you send may be processed in those regions.

WHAT WE DO NOT DO

There are no accounts. There is no advertising, no tracking of you across other apps or websites, and nothing here is sold or shared, so the app never asks for permission to track you. We do not hold your patterns, so we cannot share them.

CAMERA AND PHOTOS

The app asks for the camera or your photo library only when you choose to create a pattern from a photograph. It reads the single photo you pick. It does not browse your library.

CHILDREN

The app is not directed at children under 13, and it collects nothing that would identify anyone. If you believe a child has sent us something, contact us and we will delete it.

CHANGES

If this policy changes, the date at the top of this page changes with it.

CONTACT

Email support@ackeeandsoftware.com with any privacy question, request or complaint, or use "Report a conversion problem" in the app.