Privacy Policy

Last updated 25 July 2026

Point to Stitch is a needlepoint design app run by Hannah Morphis in Tennessee, USA. This page explains what we collect, why, and what you can ask us to do about it. It is written to be read, not to be impressive.

What we collect

Your email address — so you can sign in and so we can send you sign-in links and account emails.
Your password, if you set one. We never see it. It is hashed by our authentication provider before it is stored.
Your projects — designs, stitch positions, thread colors, canvas and mesh settings, and any canvas photographs you upload.
Your purchase status — whether you are on a trial or have bought the app, and a customer reference from our payment processor.

We never see your card details. Payments are handled entirely by Stripe. Your card number never reaches our app or our database.

What we don't collect

We do not run advertising, we do not sell or rent your information to anybody, and we do not use third-party analytics or tracking pixels. There is no advertising profile of you here because there is no advertising.

Why we hold it

To run the service you signed up for: to let you sign in, to keep your projects safe and available on your devices, to send account email, and to know whether you’ve bought the app. That is the whole list.

Who processes it for us

We use a small number of established providers, each doing one job:

Supabase — stores your account and projects.
Netlify — hosts the app itself.
Stripe — processes payments and holds your card details, not us.
Google Workspace — delivers account email.

Each of these can access data only as needed to provide their service. We do not share your information with anyone else, other than where the law requires it.

Your canvas photographs

If you photograph a canvas and upload it, that image is stored with your project so the app can show it back to you. We do not look through your photos, use them to train anything, or show them to other people. Delete the photo or the project and the image is deleted with it.

Cookies and local storage

We store a sign-in token in your browser so you stay signed in, and we keep some settings — like your zoom level and whether the thread library is docked — on your device. We do not use cookies for tracking or advertising.

How long we keep things

Your projects stay until you delete them or close your account. Delete your account and we remove your projects, your canvas photos and your profile. Stripe keeps payment records for as long as financial regulations require, which is outside our control.

What you can ask for

Whatever your country's law says, our answer is the same: email us and we will do it.

A copy of what we hold about you.
A correction to anything that is wrong.
Deletion of your account and everything in it.
To stop receiving account email — though sign-in links are hard to live without.

Write to hello@pointtostitch.app and we will respond within 30 days.

Children

Point to Stitch is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has created an account, please tell us and we will remove it.

Where your data lives

Our providers store data on servers in the United States. If you are using the app from elsewhere, your information is transferred there.

Changes

If this policy changes in a way that matters, we will say so in the app rather than quietly updating the date at the top.