Applies to: StitchRow for Android (com.veloxapp.crafttracker)
Provided by: VELOX APP LTD (company no. 17186614), 128 City Road, London, EC1V 2NX, United Kingdom
1. Who we are
StitchRow ("the app", Google Play title "Stitch Organizer & Row Counter") is developed and published on Google Play by VELOX APP LTD ("we", "us"), a company registered in England and Wales under company number 17186614, with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom.
This policy covers the StitchRow Android app only. Our company privacy policy covers this website and emails you send us. For any privacy question, contact [email protected].
2. Summary
- The app has no account or sign-in, no advertising and no cloud sync, and we run no servers that hold your projects.
- Your projects, counters, notes, work timer and stash list are stored only on your device. We never receive them.
- The app can send anonymous usage statistics and crash reports to Google Firebase. They never include project names, notes, stash entries or counter values. In the EU, EEA, UK and Switzerland nothing is sent until you tap Allow; elsewhere it is on by default. Everyone can switch it off in Settings. See section 5.
- Backup files you create go only where you save them. We never receive them.
- We do not sell your data or share it with anyone for their own purposes.
- The optional Pro purchase is handled entirely by Google Play.
3. Your projects and what the app keeps on your device
Your projects, counters, notes, work timer and stash list are saved in the app's private storage, which Android protects from other apps, together with your settings (such as theme). The app does not send this content to us or to anyone else. Project names, notes, stash entries and counter values are never sent. Uninstalling the app deletes all of it.
4. Backup files and Android backup
When you export a backup, the app writes one file to the place you choose through Android's file picker (your phone, a cloud drive you picked, an email). That file is yours: it goes only where you save it, and we never receive it. Importing reads only the file you pick. The app needs no storage permission for this.
If you use Android's built-in backup, Android may copy the app's data file and settings to your own Google account and restore them on a new phone. We never receive that copy and cannot access it. You can manage it in your Google account's backup settings on your phone.
5. Usage statistics and crash reports (Google Firebase)
To see whether the app works and how it is used, the app uses Google Firebase Analytics and Firebase Crashlytics, provided by Google. The app also uses Firebase Remote Config for our support contact details (see section 8). Release builds of the version published on Google Play send this data when sharing is on; debug builds send nothing.
Your choice. If the app thinks you are in the European Union, the European Economic Area (Iceland, Liechtenstein, Norway), the United Kingdom or Switzerland (it decides from your phone's locale country or SIM country), it shows a slim bar at the bottom of the Home screen (never on the counter) asking whether to share anonymous usage statistics and crash reports. Nothing is collected until you tap Allow. If you ignore the bar or tap No thanks, nothing is collected. Elsewhere sharing is on by default. In every country you can change this at any time with the switch Share anonymous usage statistics in Settings. Your choice is stored only on your phone (and may be restored with Android's backup of the app's settings file). We do not record which choice you made.
The app sends:
- a random app-installation identifier created by Firebase (not your name, email or advertising ID), and your device model, Android version, app version and language;
- your approximate location (country or region, derived by Google from the IP address; the app never asks for your GPS or precise location);
- crash and error reports, with technical details of the device and of what the app was doing when it failed;
-
simple usage events. Their values are fixed labels or ranges, never text you typed:
- which screen was viewed;
- that a project was created, and its craft type (knitting, crochet, cross-stitch, diamond painting or other);
- that your first count was made, with the craft type;
- which feature was used for the first time in a session (for example undo, redo, lock, timer, volume keys, goal, repeat point, notes, extra counter, stash, help, export or import);
- that a project became active, finished or archived;
- that a goal or repeat reminder was shown;
- that a setting was changed, and which setting and value (for example the theme);
- that a backup was exported or imported, that an import failed (and whether the file was invalid or too new), that the app recovered your data from its safety copy, or that the data could not be read;
- that the Pro screen was shown, that Pro was unlocked, and that a contact button was pressed (WhatsApp or email);
- an app profile once per start: a device type label (real, emulator, test lab or automation tool), whether the app was installed from Google Play or elsewhere, your language and your theme;
- a session summary once after real use: a coarse label for whether the touch pattern looks like a person or an automated tool, and a device type label on the project, first-count and session events, and counts, duration and number of screens as ranges (for example "11 to 50"). No exact timings and no screen coordinates are sent.
These events never contain project names, notes, stash entries, counter values, backup files or anything you typed. They contain no name, email address, contacts, files or precise location. We use them only to find problems, to understand which features are used and to tell real use from automated testing. We do not use them for advertising and do not sell them. The app does not use your advertising ID, Google signals or ad personalisation.
Where you are asked first (EU, EEA, UK, Switzerland), our basis is your consent, which you can withdraw at any time with the Settings switch. Elsewhere, sharing is on by default and our basis is our legitimate interest in keeping the app working, fixing crashes and understanding which features are used; you can switch it off in Settings. The data is anonymous and limited to what is listed above.
Google processes this data for us under its Firebase privacy information and data processing terms. It may be processed outside the UK, the EEA and Switzerland, including in the United States, under the safeguards in those terms (such as standard contractual clauses and the UK addendum). We have set Google Analytics to keep analytics event data for 2 months, after which it is deleted. Crashlytics crash reports are kept by Google for 90 days. Reports that Google aggregates do not identify you.
6. Purchases
StitchRow Pro is an optional one-time in-app purchase made through Google Play Billing. Google processes the payment and your Google account details under the Google Privacy Policy. We never receive your payment card details.
The app asks Google Play whether you own Pro, confirms a new purchase with Google Play, and keeps a yes/no answer on your device so Pro works offline. The app learns only whether you own Pro. The app also records its own event that Pro was unlocked (no payment details).
Google gives us order records for sales in Google Play Console, such as the order number, date, product, price and country. We use these only for accounting, refunds and our legal obligations, and keep them for as long as UK law requires financial records to be kept (usually 6 years).
7. Google Play reviews and updates
The app may occasionally show Google Play's in-app review card, and remembers on your device when it last did. A rating or review you leave there is handled by Google Play. The app also asks Google Play whether a newer version is available, so it can offer you the update.
8. Contacting us from the app
The app has buttons to contact us by WhatsApp (+447700183931) or by email ([email protected]). To keep these details current, the app asks Firebase Remote Config for them; that request sends your installation identifier and IP address to Google, and the response holds no data about you. The buttons do nothing until you tap one. The button then opens WhatsApp or your own email app with a pre-filled message that includes the app version, your device model, your Android version and whether you have Pro, so we can help you faster. You can edit the message before you send it, and nothing reaches us unless you send it.
Chats on WhatsApp are also covered by WhatsApp's (Meta's) privacy policy, and emails by your email provider's policy. We use your messages only to answer you, as described in our company privacy policy.
9. Information from Google Play
Like every app developer on Google Play, we can see statistics that Google provides in Google Play Console, such as the number of installs and, if you have chosen to share usage and diagnostics data with Google, crash and performance reports. Google collects this data under the Google Privacy Policy. The statistics are aggregated or do not identify you to us, and we use them only to fix problems and improve the app.
10. Permissions
The app does not request access to your storage, photos, camera, microphone, location, contacts or phone. It uses the internet and network-state permissions for usage statistics, crash reports and support contact details, the Google Play Billing permission for purchases, and the wake-lock permission that Firebase adds so it can send its reports reliably (the app keeps the screen on while counting with a window setting, not this permission). It does not use the advertising ID permission.
11. Deleting your data
- Projects: delete a project in the app, or uninstall the app to remove everything it stored on your phone.
- Backup files: these are files you saved yourself, so delete them where you saved them.
- Android backup copy: manage or delete it in your Google account's backup settings.
- Usage statistics and crash reports: they cannot be tied to you and are deleted automatically after the periods in section 5.
- Purchases: your Pro purchase is recorded by Google against your Google account, so you can restore it on a new phone. The order records we receive are kept as described in section 6.
See also how to delete your data. We hold no account, project or personal usage data of yours. If you have a question about your data, or about an order, email [email protected].
12. Security
Everything the app saves is kept in its private storage on your device, which Android protects from other apps. Connections to Firebase and Google Play are encrypted.
13. Children
The app is not directed at children under 13. It does not knowingly collect personal data from children, and the usage statistics in section 5 are anonymous.
14. Your rights
Under UK GDPR, EU GDPR and the Swiss Federal Act on Data Protection, you have the right to access, correct or delete personal data we hold about you, to restrict or object to its processing, to receive it in a portable format, and to object to the usage statistics and crash reports (you can also simply switch them off in Settings). Email [email protected] and we will respond within one month.
The usage and crash data in section 5 is tied only to a random identifier, so we cannot tell which data is yours from your name or email, and it is deleted automatically after the periods in section 5. If you ask us to delete data already collected, we may need extra information to find it.
You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk), to the data protection authority in your EEA country (list of authorities), or in Switzerland to the Federal Data Protection and Information Commissioner (edoeb.admin.ch).
15. Changes to this policy
If the app's handling of data changes, we will update this policy and its effective date before releasing that version of the app.
16. Contact
VELOX APP LTD
128 City Road, London, EC1V 2NX, United Kingdom
Email: [email protected]