Privacy Policy

Last updated: October 27, 2026

Draft template — not legal advice. This document is a draft and should be reviewed (ideally by a qualified professional) before the app launches publicly.

This policy explains what information the All My Xs app and website (“All My Xs”, “we”, “us”) collect, how we use it, and the choices you have. All My Xs is a private, invite-only community cross stitch app for Android. We’ve tried to keep this in plain language.

1. Information we collect

Account information (Google Sign-In)

When you sign in with your Google account, we receive your name, email address, and profile photo, plus a unique account identifier. We do not receive your Google password.

Content you add

Patterns you upload or import, and the files or images associated with them.
Progress data, such as which stitches or sections you’ve completed, goals you set, and achievements/badges you earn.
Pattern notes you write.

Social information (inside circles only)

Circle membership: which circles you belong to and who else is in them.
Messages: short text private messages (150 characters maximum, no attachments) sent to members of your circles.
Blocks and reports: who you have blocked, and reports you submit (or that are submitted about you), including the reported content.

Device and diagnostic data

We may collect basic technical information such as device model, Android version, app version, crash logs, and performance data, to keep the app working and fix bugs.

2. How we use information

To sign you in, create your account, and keep it secure.
To provide the app: store your patterns and progress, sync them across your devices, and show your progress, achievements, and notes to the circle members you share with.
To deliver messages within circles.
To review reports, enforce our Terms & Community Policy, and keep the community safe.
To diagnose problems, measure stability, and improve the app.
To respond to your support requests and to comply with legal obligations.

3. Who can see your information

The social side of All My Xs is group-only. Your progress, badges, pattern notes, and profile name/photo are visible only to members of the circles you’re in. There is no public feed or public profile. Messages are visible only to the sender and recipient (and to us if a message is reported or when needed to enforce our rules or the law).

4. Where information is stored

All My Xs uses Google’s Firebase services: Firebase Authentication (Google Sign-In), Cloud Firestore (account, progress, circle, message and report data), and Cloud Storage for Firebase (uploaded files such as patterns). Data is stored and processed on Google’s infrastructure, which may be located in the United States or other countries. Google’s handling of that data is described in Google’s Firebase privacy information.

5. We do not sell your data

We do not sell your personal information, and we do not share it for third-party advertising. We share information only with service providers that run the app for us (such as Google Firebase), when required by law, or to protect the safety and rights of users and the service.

6. Retention and deletion

We keep your information while your account is active.
You can ask us to delete your account and associated data at any time by emailing [email protected] from the email address on your account (see how to request deletion). We aim to complete deletion within 30 days.
Deleting your account removes your profile, patterns, progress, notes, circle membership, and messages you sent, except where we must keep limited records (for example, reports and moderation records needed for safety, or data required by law) or where data persists briefly in backups.
Diagnostic data is kept only as long as needed to troubleshoot and improve the app.

7. Your choices and rights

You can ask to access, correct, export, or delete your information by contacting us. You can leave a circle, block other members, and report content from within the app. Depending on where you live, you may have additional rights under local law; we will honor them where they apply.

8. Security

We use Firebase security features such as authenticated access and access rules to protect your data. No system is perfectly secure, so we cannot guarantee absolute security.

9. Children

All My Xs is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us at [email protected] and we will delete it.

10. Changes to this policy

We may update this policy as the app evolves. We will change the “Last updated” date above and, for significant changes, tell you in the app or by email.

11. Contact

Questions or requests: [email protected].