Quiltwright
Privacy Policy
Last updated 27 October 2026
Quiltwright is a quilt planner for iPhone and iPad. This policy explains exactly what we store, why, and how you delete it. In short: we keep only what the app needs to sync your quilting between your devices. No ads, no tracking, no analytics, and we never sell or share your data.
What we store and why
| Data | Why | How long |
|---|---|---|
| Email address | Signing in, password reset codes, security notices (for example when your email changes) | Until you delete your account |
| Display name | Greeting in the app; shown on project pages you choose to share | Until you delete your account |
| Password | Signing in. We store only a salted one-way hash (argon2id or bcrypt), never the password itself | Until you delete your account |
| Device name (“iPhone” or “iPad”) | So signing out ends the right device's session | Until the session expires (30 days + 7) or you delete your account |
| Your quilting data: plans, projects, notes, stash records, shopping list, Apple Pencil sketches | The app's purpose: keeping them on all your devices | Until you delete them (a deletion marker without content is kept up to 90 days so your other devices learn of it), or until you delete your account |
| Photos you add (project photos, fabric photos, plan previews) | Shown in your projects and stash, and on project pages you choose to share | Until you delete the photo or your account. Location and all other photo metadata are removed when a photo is uploaded |
| Share links you create | A public web page for a project you chose to share | Until you stop sharing or delete your account |
| Server logs (IP address, request path, status, time, account id) | Security and fixing problems | 14 days |
What we don't collect
No location: “Fabric shops near me” uses Apple Maps on your device, and your location is never sent to us. No contacts, no payment data, no advertising identifiers, no analytics or tracking events, no health data. The app contains no third-party SDKs.
The camera is used only when you take a photo of a fabric or a quilt. “Describe your quilt” runs on your device with Apple Intelligence; what you type is not sent to us or anyone else.
Who processes it
Only our hosting provider (which runs our server and database) and our email provider (which delivers password reset codes and security notices). Neither may use your data for anything else. We never sell or share your data with anyone for advertising or any other purpose.
Cookies
When the app shows one of your own pages (for example a project's pattern sheet), it uses a single, strictly necessary session cookie
(qw_session) that lasts at most 12 hours. There are no other cookies, and our web pages contain no third-party scripts.
Deleting your data
In the app: Workroom → Account (person icon) → Delete account. Your account and everything in it — plans, projects, photos, stash, shopping list and share links — are deleted from our server immediately and permanently, and removed from the device. You can also delete individual items at any time. If you can't use the app, email us from your account's address and we'll delete it for you.
Your rights
You can see and change your data in the app at any time, and you can ask us for a copy, a correction or deletion. Wherever you live (including under GDPR, UK GDPR and CCPA/CPRA), we'll answer within 30 days. Quiltwright is not directed at children under 13 and we don't knowingly collect their data.
Security
All traffic is encrypted with HTTPS. Passwords, sign-in tokens and reset codes are stored only as hashes. Sign-in tokens on your device are kept in the iOS Keychain.
Changes
If this policy changes, we'll update the date above and, for meaningful changes, tell you in the app.