Privacy Policy

Last updated October 16, 2026. Covers the StitchSwap app, stitchswap.app and our waitlist.

What we collect

• Account: email address, username, password (stored encrypted by our login provider; we never see it), display name, bio and profile photo.
• Listings and activity: the photos and details you post, likes, saves, follows, price votes, offers, reviews and reports.
• Messages: your chats and trade chats, including photos you send.
• Trades and shipping: shipping addresses, package weights, labels, tracking numbers, and photos we take of items when they arrive.
• Payments: amounts, what each payment was for, and its status. Card and bank details are collected and stored by Stripe, not by us.
• Safety records: account health, blocked messages caught by our filter, reports, failed verifications, suspensions and other moderation actions, and failed log-in attempts.
• On your phone only: your "Remember me" and appearance choices. Face ID is only used by team accounts to switch accounts, and Apple never shares your face data with us.

We don't use advertising trackers, we don't track you across other apps or websites, and we don't collect your location.

The waitlist

If you signed up on stitchswap.app to claim a username, we also keep:

• Your email address and the username you asked us to reserve.
• If you applied for verification: your social media handle and platform, and your marketplace profile link and platform.
• Who invited you, if you joined with someone's link.
• A one-way fingerprint of your network address and a random ID your browser keeps, used only to stop spam sign-ups. We can't turn the fingerprint back into your address.

We use these to email you a link that confirms your email and shows your place in line, to hold your username until you sign up for the app with the same email (sign-ups that aren't confirmed within 48 hours are deleted), to email you when it's your turn in the beta and send occasional StitchSwap news, to work out your place in line, and to check a seller's accounts before giving a Verified badge. Your reserved username becomes public once you use it in the app. To release a reserved username or delete your waitlist details, email us from the address you signed up with.

Why we use it

• To run trades: match offers, make shipping labels, take payments, verify items and ship them.
• To keep StitchSwap safe: prevent scams and fakes, enforce our Terms, and resolve disputes.
• To contact you about your account and trades, in the app and by email.
• To meet legal requirements, like tax and payment records.

Who we share it with

We never sell or rent your personal information. We share it only with services that help us run StitchSwap:

• Supabase: our database, log-in and file storage.
• Stripe: payments and refunds.
• Shippo and USPS: shipping labels and delivery (names and addresses).
• Resend: emails from us.
• Apple: app distribution through TestFlight and the App Store.

Your trade partner sees your username, profile and items, but never your address, email or tracking numbers. We may share information if the law requires it, to protect people from harm or fraud (for example with a brand owner, carrier, payment processor or law enforcement), or as part of a merger or sale of StitchSwap.

Who can see your chats

Private chats are between you and the other person. StitchSwap staff can open a private chat only if one of you reports something in it, or our filter blocks a message in it. StitchSwap takes part in every trade chat.

How long we keep it

We keep your information while your account is open. When you delete your account, we delete your profile and listings, but keep records of trades, payments, messages and safety actions as long as we need them to resolve disputes, prevent fraud and meet legal and tax requirements.

Your choices and rights

• Edit your profile and listings in the app at any time.
• Delete your account in Settings → Delete account.
• Ask for a copy of your information, or ask us to correct or delete it, by emailing us from your account's email address. California residents have these rights under the CCPA, and we honor them for everyone.
• Stop non-essential emails by replying "unsubscribe".

Security

Data is encrypted in transit, access is limited to the StitchSwap team, and payment details stay with Stripe. No system is perfectly secure, so use a strong password and tell us right away if you think someone got into your account.

Age

StitchSwap is for people 18 and older. We don't knowingly collect information from anyone younger.

Changes

If we make important changes, we'll tell you in the app before they take effect.

Contact

stitchswapsupport@gmail.com, or message @stitchswap in the app.