🧵 Quiltify

Privacy Policy

Last updated: October 9, 2026

This Policy describes how Quiltify ("we", "us") collects, uses and protects your data when you use our app and the quiltifyapp.com website.

1. Data we collect

  • Account: when you sign in with Google or Apple (via Firebase Authentication), we receive your name, email address, a user identifier and, if available, your profile photo. With Apple, you can choose to hide your email (Apple relay address). You can change your display name and profile photo in the app.
  • Onboarding answers: the name you want to be called, your experience level, your answers to the initial questions (such as goals and preferences) and which version of the onboarding you saw.
  • Content you submit: photos sent for AI analysis; text, links, photos or PDFs of patterns you import; messages to the AI assistant; and, in the community, posts (photo, caption and project details), comments, likes, saved posts, follows, reports and blocks.
  • Subscription: subscription status, plan and purchase history. Payments are processed by Apple (App Store) or Google (Google Play); we never have access to your card details.
  • App usage: sessions (start, end and duration), screens visited, actions such as lessons opened and completed, the position of taps on the screen (to build heatmaps and detect taps that get no response — we do not record what you type) and, while the app is open, the current screen, for real-time usage statistics.
  • Diagnostics: error reports with the technical message, stack trace and the last screens/actions before the error.
  • Device: an identifier generated by us, model, operating system version, app version, platform, app language, country/region taken from your device settings (we do not use GPS) and the push notification token. On Android, Firebase Analytics may collect the advertising ID; on iOS, RevenueCat collects the Apple Ads attribution token (AdServices) to measure Apple Ads campaigns.
  • Technical data: your IP address, used temporarily for security and abuse prevention, and by analytics providers to estimate your approximate location (country/city).
  • Website: quiltifyapp.com pages use Google Analytics 4, which uses cookies to record pages visited, interactions, language and campaign parameters (UTM). These parameters may be passed on to the Google Play link to attribute the install.

2. How we use your data

  • To provide the service: account, lessons, AI analysis, pattern import, assistant, community and subscriptions (performance of the contract).
  • To understand how the app is used, measure campaigns, run tests of onboarding and subscription screens, and fix problems (legitimate interest).
  • To personalize screens, such as greeting you by name on onboarding and subscription screens (legitimate interest).
  • To send notifications you have authorized (consent, given through your device's permission).
  • To keep the community and the service safe and prevent abuse (legitimate interest), and to comply with legal obligations.
  • To share news and updates and to respond to your support requests.

We do not sell your data and we do not show third-party ads in the app.

3. Artificial intelligence

  • Photos, text, links, PDFs and messages you send to the AI features are sent by our server to an AI provider solely to generate the requested response: Google Gemini (default) or Anthropic Claude (alternative provider for photo analysis and pattern import). For links, our server downloads the page content.
  • What we keep: the result of each photo analysis (text) is stored on our server linked to your account, together with your rating if you give one; the photo itself is not stored on our servers. Chat messages and imported patterns are not stored on our servers — we only record that the feature was used. Your analysis history and imported patterns are saved on your device.
  • We do not use this content to publicly identify you. AI responses may contain errors.

4. Community

  • Your posts, comments, name, profile photo and counters (posts and likes received) are visible to other users. Posts are published immediately.
  • Anyone with a share link to a post can see a preview of it on the web (author name, caption and photo).
  • Photos posted to the community and profile photos are stored without metadata (such as location).
  • When you report a post, we record the reason; posts with several reports are automatically hidden for review. You stop seeing content from users you block.
  • Do not post personal information you do not want to make visible.

5. Service providers

We share data only with the providers needed to operate the service, each for the purpose below, and when required by law:

  • Google Firebase (Google): sign-in (Firebase Authentication, with Google Sign-In), usage analytics (Google Analytics for Firebase — events, screens, user identifier, device data) and push notifications (Firebase Cloud Messaging; on iOS, delivered via Apple Push Notification service).
  • Apple: Sign in with Apple, payments on the App Store and notification delivery.
  • Mixpanel: product analytics — usage events, screens, user identifier (not your name or email), onboarding answers and experience level, purchase amounts and device data.
  • RevenueCat: subscription management — user identifier, purchases, subscription status, device data and the Apple Ads attribution token (iOS).
  • Superwall: display of subscription and onboarding screens and their tests — user identifier, subscription status, app language and attributes such as your preferred name, the onboarding version and your answers.
  • Google Play: payments and app distribution on Android.
  • Google (Gemini API) and Anthropic (Claude API): AI processing (see section 3).
  • Google Analytics 4: website analytics.

Each provider processes data according to its own privacy policy.

6. Notifications

  • Push: only if you allow it in your device's permission. We register the device token, country/region and app language to send messages in your language and segment them by region.
  • Local reminders: if you do not open the app for a while (e.g., 1, 3, 7 or 14 days), the app shows reminders scheduled on the device itself.
  • You can turn notifications off at any time in your device settings.

7. Where your data is stored

Account data, content and usage data are stored on servers operated by Quiltify (PostgreSQL database and MinIO file storage), accessed over HTTPS. Some data stays only on your device (saved lessons, counters, analysis history, imported patterns and preferences). The providers in section 5 may process data in other countries, including the United States; these transfers are necessary to provide the service and take place under those providers' terms.

8. Retention and account deletion

  • We keep your data while your account is active and for as long as necessary for the purposes described.
  • You can delete your account at any time in the app (Profile → Delete account) or as described on the Account deletion page.
  • Deletion removes: your account and profile (name and email), your sign-in on Firebase, your posts and their photos, your profile photo, your comments (including on other people's posts), lesson progress, likes, saved posts, follows and blocks, and your AI photo-analysis results.
  • Kept without any link to you: usage, diagnostic and device data, and reports you made.
  • Data held by analytics and subscription providers (Firebase, Mixpanel, RevenueCat and Superwall) follows those providers' retention periods; you can ask us to request its deletion by email. Records we are legally required to keep are retained only for the legal period.
  • Deleting your account does not cancel your subscription: cancel it in the App Store or Google Play.

9. Children

Quiltify is not directed to children. To use the app you must meet the minimum age required by the laws of your country, as set out in our Terms of Use. If we learn that we have collected data from someone below that age without the required authorization, we will delete it.

10. Your rights (LGPD/GDPR)

You may access, correct or delete your data, and withdraw your consent. To do so, contact us at the email address below and we will respond within the legally required time frame. You may also lodge a complaint with the data protection authority (in Brazil, the ANPD).

11. Security

We adopt technical measures to protect your data, such as encrypted connections (HTTPS), server-side validation of sign-in tokens, access control and request limits against abuse.

12. Changes to this Policy

We may update this Policy. The date at the top always shows the current version.

13. Contact

Privacy questions: privacidade@quiltifyapp.com.

← Back to home