QuiltRBuddy — Privacy Policy

Effective Date: 2026-05-17 Last Updated: 2026-06-07

This Privacy Policy explains what data Sierra Digital Forge LLC (“Sierra Digital Forge,” “we,” “us,” or “QuiltRBuddy”) collects when you use the QuiltRBuddy desktop application (Windows), the QuiltRBuddy Android application distributed through the Google Play Store, and the optional Community service (collectively, the “Service”), how we use it, and the choices you have.

Play Store package: com.sierradigitalforge.quiltrbuddy (Android release is planned; the Windows desktop app is distributed through the Microsoft Store.)

Contact: privacy@sierradigitalforge.com Mailing address: Sierra Digital Forge LLC, c/o Northwest Registered Agent LLC, 732 S. 6th St., Suite N, Las Vegas, NV 89101, USA

Play Store account-deletion route (Google’s “Data deletion URL” requirement)

In compliance with Google Play’s account-deletion disclosure requirements, you have two paths to remove every record we hold about you:

1. In-app: open the app and go to Edit → Preferences → Your Data → Delete Community Account. This wipes your local Community profile, posts, challenges, and subscription cache immediately. Project files in your own Save-As folders are deliberately not touched (they’re your work, often in shared folders).
2. By email: send a deletion request to privacy@sierradigitalforge.com with the subject “Delete My QuiltRBuddy Account.” We respond within 5 business days and complete deletion within 30 days.
3. Public web page: a permanent summary of this route is hosted at https://sierradigitalforge.com/apps/quiltrbuddy/delete-account (the URL also listed on the Play Store listing).

The hosted versions of this Privacy Policy, the Terms of Service, the Community Guidelines, the COPPA Policy, and the Refund Policy live under https://sierradigitalforge.com/apps/quiltrbuddy/.

1. Data we collect

1.1 Information you provide directly

• Profile: display name, optional bio, optional avatar image (file path on your device; we do not upload the image until you opt into Community sharing).
• Account credentials: email address (for Community sign-in and subscription correspondence). The desktop and Android apps work fully offline without an account; credentials are only collected if you opt into Community.
• Payment information: QuiltRBuddy is free, and we do not currently offer paid subscriptions or process any payments in the app. If and when a Premium subscription launches, payments will be handled entirely by the platform’s billing system — Microsoft Store billing for the Windows app or Google Play billing for the Android app — as the merchant of record. We would never see or store your full card number; the store communicates only your subscription state to the app.
• User Content: quilt designs, block files, project metadata, photos, comments, and Community posts you choose to share. Block and quilt designs stay on your device unless you explicitly publish them through the Community surface.

1.2 Information collected automatically

• App diagnostics: app version, OS version, crash reports (only if you opt in to share them).
• Usage analytics: which features you use, frequency, and duration (only with explicit opt-in via Edit → Preferences).
• IP address and approximate location (derived from IP) on Community sign-in and submissions, for fraud prevention. The desktop and Android apps do not collect IP address while you use offline features.

1.3 Information from third parties

• Payment processor: subscription status, last 4 of card, billing region.
• AI services (Google Gemini): we send Community submissions to Gemini for moderation, and we send Premium AI-feature inputs (block-name suggestions, color-match queries) for processing. Google’s privacy practices apply per their own privacy policy; we configure Gemini to not use submissions for model training.

2. Android-specific disclosures

This section applies specifically to the Android build distributed through Google Play.

2.1 Declared permissions

The Android build does not request camera, microphone, storage, location, contacts, calendar, or any other sensitive permission. Quilt projects are saved to Android’s app-private storage (Android/data/com.sierradigitalforge.quiltrbuddy/files/), which is automatically removed when you uninstall the app.

2.2 On-device storage

On Android, the app stores:

• Project files (.json) in app-private external storage.
• Block files (.qrblock) in app-private external storage.
• Preferences, workspace state, and Community drafts in app-private internal storage.
• Imported fabric catalogs in app-private internal storage.

None of this is browsable from the Android Photos / Gallery / Files apps unless you explicitly export to a shared folder.

2.3 Data Safety form summary

The Play Data Safety form for QuiltRBuddy is captured in the file PLAY_DATA_SAFETY.csv in this folder. Summary:

• No data is collected by default. The desktop and Android apps work fully offline without an account.
• If you opt into Community, we collect: display name, email, optional bio, optional avatar image path, the posts you choose to publish.
• We do not share any of that data with third parties beyond the AI moderation processor (Google Gemini).
• We do not collect device identifiers, advertising ID, or build-time analytics.
• We do not run third-party ad SDKs.

2.4 Google Play Billing

If you purchase a Premium subscription through the Android app, the transaction is processed by Google Play Billing. Google Play is the merchant of record for Android purchases; refunds are handled per Google’s policies (see REFUND_POLICY.md). Subscription state is communicated to the app via the Google Play Developer API; we do not see your payment instrument.

3. How we use your data

We use your data to:

1. Operate the Service (sign you into Community, sync your subscription, deliver Community content).
2. Process payments and prevent fraud.
3. Moderate Community content (via Gemini’s safety classifier + human review).
4. Send service-related emails (subscription receipts, renewal reminders, security alerts).
5. Improve the Service (only with opt-in analytics).

We do not:

• Sell your data to third parties.
• Use your designs or photos to train AI models.
• Run advertising in the Service.
• Embed third-party analytics SDKs.
• Collect device identifiers for tracking.

4. Lawful basis (for users in the EU/UK — GDPR)

We process personal data on these bases:

• Contract — to deliver the Service you subscribed to.
• Legitimate interest — for fraud prevention, security, and improving the Service.
• Consent — for optional analytics, marketing email (if any), Community participation, and any future processing not covered above. You may withdraw consent at any time.
• Legal obligation — when required by law to retain or disclose data.

5. Sharing your data

We share data only:

• Service providers under contract — payment processor, hosting provider, email delivery, AI moderation.
• Legal compliance — if required by court order, subpoena, or applicable law.
• Business transfer — in the event of a merger or sale of assets, your data may transfer to the acquiring entity, with notice.

We do not sell personal information as defined by the California Consumer Privacy Act (CCPA).

6. Retention

7. Your rights

Wherever you live, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your account and personal data (“right to be forgotten”).
• Export your data in a portable format (use Edit → Preferences → Your Data → Download My Data in the app for a ZIP of everything we hold).
• Object to certain processing.
• Withdraw consent for processing based on consent.

To exercise any of these rights, email privacy@sierradigitalforge.com with the subject line “Privacy Request.” We will respond within 30 days (45 for complex requests, with notice).

7.1 California residents (CCPA / CPRA)

You have the additional right to know what categories of personal information we collect and the categories of third parties we share it with. You may submit a verifiable consumer request via privacy@sierradigitalforge.com. We will not discriminate against you for exercising your rights.

7.2 Children

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. See COPPA_POLICY.md. If you believe we have collected information from a child under 13, contact privacy@sierradigitalforge.com immediately.

8. Security

We use industry-standard technical and organizational measures to protect your data, including TLS in transit, encryption at rest for sensitive fields, and least-privilege access controls. No system is perfectly secure; we will notify you if a breach affects your data, as required by applicable law.

On Android, all communication with our backend and with Gemini uses HTTPS. The app does not log Community content to device-shared logs.

9. International transfers

If you are in the EU/UK and our servers or service providers are located in the United States, your data will be transferred to and processed in the US under Standard Contractual Clauses or equivalent safeguards.

10. Cookies and similar technologies

The QuiltRBuddy desktop app does not use cookies. The Android app does not use cookies. The subscription billing portal (operated by our payment processor) and the legal-document hosting page may use essential cookies. See the payment processor’s privacy policy for details.

11. Changes to this Policy

We will notify you of material changes by email (if we have one on file), via in-app banner, and via the Play Store listing’s “What’s new” section at least 30 days before the change takes effect.

12. Contact

Privacy questions and requests: privacy@sierradigitalforge.com Mailing address: Sierra Digital Forge LLC, c/o Northwest Registered Agent LLC, 732 S. 6th St., Suite N, Las Vegas, NV 89101, USA EU/UK representative: Not applicable. QuiltRBuddy is currently distributed in the United States only and is not offered for sale to EU/UK users. An EU/UK representative will be appointed before any distribution in those regions.

Sierra Digital Forge LLC is a Nevada domestic, member-managed limited-liability company (Entity ID E57035552026-3, Nevada Business ID NV20263569431, filed 4/29/2026).