Effective Date: July 21, 2026 · Last Updated: July 21, 2026
Luxorand ("we," "us," or "our") operates the Stitchr mobile application (the "App"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
By using the App, you agree to the collection and use of information as described in this policy.
When you sign in using Sign in with Google or Sign in with Apple, we receive limited profile information from that provider, which may include:
We do not receive your password or other credentials from Google or Apple.
The App uses your device's camera to let you capture photos and apply a "patch" filter to them. This includes:
The App accesses your camera only — it does not access your photo library/camera roll. Patches you capture are synced to our backend (see Section 1.4).
When you capture a patch, the App may ask for permission to access your location while you are actively using the App. Stitchr does not access or track your location in the background.
If granted, we convert your device's coordinates into a general place name (for example, "Cape Town, South Africa") and store only that place name — your precise GPS coordinates are never saved or transmitted. If location access is denied, unavailable, or cannot be determined, the patch is simply saved without a location tag, with no error shown to you.
You can deny or revoke location access at any time in your device settings — the App's core photo and filter features will continue to work without it.
We use Supabase as our backend and database provider. Data synced to Supabase includes:
The App may send you local notifications (e.g., reminders). These notifications are scheduled directly on your device and are not delivered through a third-party push notification service — no personal data is sent to us or anyone else as part of this feature.
We may also automatically collect limited technical information, such as device type, operating system version, and app diagnostics/crash data, to help us maintain and improve the App.
We use the information we collect to:
We do not sell your personal information.
We rely on the following third-party services to operate the App:
| Service | Purpose | Data Involved |
|---|---|---|
| Google Sign-In | Authentication | Name, email, profile picture, account ID |
| Apple Sign-In | Authentication | Name, email (or private relay email), account ID |
| Supabase | Backend database & storage | Account data, synced patches, location tags, app metadata |
Each of these providers has its own privacy policy governing how they handle your data:
Our Supabase project is currently hosted within the European Union (Stockholm region). Your account data, patches, and location tags are stored on EU-based servers.
Authentication is handled by Google and Apple, which are headquartered outside the European Union. When you sign in, these providers may process your authentication data outside the EU under their own data transfer safeguards, as described in their respective privacy policies linked above. We do not control these transfers.
If we change our hosting region or add new service providers, we will update this policy accordingly.
We do not share your personal information with third parties except:
We retain your account information, patches, and location tags for as long as your account is active.
If you delete an individual patch, it is removed instantly from both your device and Supabase.
If you delete your account, it enters a 30-day grace period. During this window, logging back in cancels the deletion request and restores your account. If you do not log back in within 30 days, your account and all associated data (including patches and location tags) are permanently and completely deleted from our systems, except where retention is required for legal or security purposes.
We use reasonable administrative, technical, and physical safeguards to protect your information, including relying on Supabase's built-in security infrastructure (encryption in transit, access controls). However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.
Depending on your location, you may have the right to:
To exercise these rights, contact us at mail@luxorand.com. You can also delete your account directly within the App under Settings → Delete Account.
If you are located in the European Economic Area (EEA) or UK, you have rights under the General Data Protection Regulation (GDPR). If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA).
Stitchr is intended for users aged 13 and over. When you first open the App, you are asked to confirm that you meet this age requirement before you can sign in or use any features. We record only the fact and date of that confirmation — we do not ask for or store your date of birth or age.
The App is not directed to children under 13, and we do not knowingly collect personal information from them. Location tagging (Section 1.3) is entirely optional, is turned off unless you grant permission, and stores only a general place name rather than precise coordinates.
If you believe a child under 13 has provided us with personal information, please contact us at mail@luxorand.com. We will delete the account and all associated data promptly.
Revoking any of these permissions in your device settings will not prevent you from using the App, though some features (like location-tagged patches or reminders) may not work as intended.
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date above and, where appropriate, through an in-app notice.
If you have questions about this Privacy Policy or how your data is handled, contact us at:
Luxorand
Email: mail@luxorand.com
Zaaierstraat, 2645 JH Delfgauw,
Netherlands