Privacy Policy

Last updated: March 25, 2026

FlossFlow ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights.

What we collect

When you use FlossFlow, we may collect:

Account information — If you sign in with Google, we receive your name, email address, and profile picture from Google.
Project data — Cross-stitch projects you save are stored in your account in Firebase Firestore.
Images you upload — Photos you upload for conversion are processed in your browser and are not stored on our servers.
Billing information — Payment processing is handled entirely by Stripe. We store only your Stripe customer ID and subscription status, never your full card details.
Usage data — We may collect anonymous analytics data (page visits, feature usage) to improve the product.

How we use your data

To provide and operate the FlossFlow service
To process payments and manage your subscription
To save and sync your cross-stitch projects across devices
To send transactional emails (receipts, subscription notices) — we do not send marketing email unless you opt in
To improve the product through aggregate, anonymised analytics

Third-party services

FlossFlow is built on the following third-party services, each with their own privacy policies:

Google Firebase — authentication, database, file storage, and hosting. Firebase Privacy
Stripe — payment processing. Stripe Privacy Policy

We do not sell your personal data to any third party.

Cookies

FlossFlow uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies.

Data retention

Your account data is retained as long as your account exists. You may delete your account at any time from the Account & Billing page in the editor, which permanently removes your profile data and auth credentials. Stripe transaction records are retained as required by law.

Your rights

Depending on your location, you may have rights to access, correct, or delete your personal data. To exercise these rights, contact us at hello@flossflow.app.

Children's privacy

FlossFlow is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by posting a notice in the app or by email if you have an account.

Contact

Questions about this policy? Email us at hello@flossflow.app.