Qwilted

Qwilted Privacy Policy

Last updated: October 30, 2026. This version takes effect on that date. What changed since the last version is listed at the end.

1. Who we are and how to reach us

Qwilted is an iPhone app that saves the links, videos and posts you share from other apps, lets you find any of them again by asking, and arranges them on a board you can share. Stitch is the character in the app who answers your questions about your saves. Your board is called your Qwilt, and its patches are your collections. A patch you share with friends is a group Qwilt, and it can have a chat.

Qwilted is provided by Qwilted LLC, an Ohio limited liability company. It decides how your personal information is used, and in this policy "Qwilted", "we", "us" and "our" mean it. "You" means anyone who uses the app.

• Privacy questions and requests: privacy@qwilted.app
• Everything else: support@qwilted.app

• Mailing address: Qwilted LLC, 2205 Tremont Rd, Columbus, OH 43221

Jacob Hanks, Qwilted's founder, is the person responsible for protecting personal information at Qwilted, including under Canadian and Australian law. Email is the fastest way to reach us, and we aim to answer every privacy email within the times in section 9.7.

This policy covers the Qwilted app (including the part of it that appears in other apps' Share menus), the Qwilted server the app talks to, and these web pages (this policy, the Terms of Use and the support page). It doesn't cover other apps or websites, including the sites behind the links you save.

2. The short version

• Your library lives on your phone. Your saves, notes, patches, your Qwilt, your to-dos and what Stitch remembers about you are stored on your phone. There's no sign-up, and our server keeps no copy of your library.
• Group Qwilts go through Apple's iCloud, not our server. A patch you share, and its chat, live in the iCloud of the person who started it and on each member's phone. Only the people in the group can see them. We can't read them (3.9).
• Cloud AI is your choice. If you choose Cloud AI, the save being read or the question you ask goes to our server, which passes it to Claude, an AI made by Anthropic, to write a note or an answer. Our server doesn't keep it, and Anthropic doesn't train on it. If you choose Phone only, none of it is sent. You can change your mind in Settings at any time.
• Two sharing switches, both off unless you turn them on. "Share how I use Qwilted" sends daily counts, never what you saved. "Help improve Stitch" sends your questions, his answers and your thumbs up or down, which we keep for 12 months to fix wrong answers.
• Two things go only when you tap a button. Survey answers go when you tap Send (3.10). A report about a save, a person or a message goes when you tap Send report (3.9).
• Some things happen whatever you choose. To show a link's title and picture, your phone contacts the site the link came from. And while Qwilted is open, it checks now and then that it can reach our server, even with Phone only, so like any internet service our server sees your phone's network (IP) address.
• No ads, no tracking, no selling. There are no ads, no advertising ID, no tracking across other apps or websites, and no third-party analytics code in the app. We never sell your information.
• Qwilted is for adults. You must be 18 or older to use it.

3. What we collect

"Collect" here means any information about you that the app stores, or that leaves your phone. It's split by where it goes.

3.1 Kept on your phone only

These stay in Qwilted's storage on your phone. We can't see them.

• Your library. Your saves (links, titles, captions, the app each came from and when you saved it), notes, patches, your Qwilt (where patches sit, the threads you tie between them and the labels you write on it), and your to-dos with their deadlines and reminders. A to-do you make from a save remembers which save it came from and that save's title.
• Words Qwilted keeps so you can find things. The text of a saved web page, words spoken in a video, and text read from screenshots and video frames. Qwilted reads these on your phone.
• Pictures. Photos, screenshots and videos you add, which you pick with Apple's photo picker (it gives Qwilted only the ones you pick). Qwilted also keeps a copy of each save's preview picture, because many sites' picture links stop working after a few days. Each copy is at most 1,200 pixels across, all of them together at most 256 MB, and a copy is deleted when its save is deleted for good.
• Work done on your phone. Transcribing videos you add, reading text in pictures, finding saves, and some notes and answers run on your phone with Apple's built-in tools, including Apple's on-device AI when your phone has it. That work stays on your phone.
• What Stitch remembers. The nickname you give him and what you tell him during setup, such as how you like answers. It's kept only on your phone, apart from the first name you confirm before you share a group Qwilt, which starts from your nickname (3.9). One part of it leaves your phone: with Cloud AI on, if you told him whether you like short answers or more detail, that choice goes with your questions about your saves as one number, about how many words to aim for, so Claude answers the way you asked (3.2). Everything else he remembers is never sent.
• How you file. When you move a save to a different patch, Qwilted notes it on your phone so it can file the next similar save the same way. With Cloud AI on, a short summary of it goes with each save that's read (3.2).
• Your question history. The questions you ask Stitch, how each was answered and how long it took, up to the newest 5,000. When you give an answer a thumbs down, or correct Stitch on your next question, Qwilted also notes the question, the answer, the titles of the saves it showed and your correction, up to the newest 2,000, so a wrong answer can be found later. These records never leave your phone. (The "Help improve Stitch" switch in 3.3 is separate.)
• Survey answers. When Qwilted asks how it's going and you answer, your answers (the newest 100) are kept on your phone. When you tap Send, they are also sent to us (3.10).
• Your editing history. So you can undo while you edit a note, Qwilted holds your recent changes in memory. They're gone when you quit the app, and they're never written to storage or sent.
• Usage counts. Daily counts of things like saves and questions, kept for 45 days, so Settings can show how you use Qwilted. These stay on your phone. The "Share how I use Qwilted" switch (3.3) collects its own counts, and only while it's on.
• Crash reports. If Qwilted crashes or freezes, iOS gives the app a technical report. Qwilted keeps the 10 newest on your phone and never uploads them.
• Automatic backups. When you leave the app and your library has changed, Qwilted may save a backup of your library on your phone, at most once a day, keeping the 3 newest. They include your saves, notes and the words Qwilted kept from pages and videos, but not pictures. If your library ever can't be opened, Qwilted also keeps a rescue copy on your phone before it starts fresh.
• Saves waiting to be added. When you share something to Qwilted from another app, it waits on your phone until Qwilted opens. The Share menu never contacts our server (see 3.6 for the one thing it may fetch from the web).
• Your age answer. See section 10. Qwilted keeps only whether you're 18 or older, or that setup was stopped. If you're 13 to 17, it also keeps the day you turn 18, so setup can open for you then. It never keeps your birthday or your age.
• Settings and plan. Your Cloud AI choice, the two sharing switches, notification times, whether you have Plus (with Plus, Apple's signed record of your subscription), how much Cloud AI you've used, and the date your free trial started. The trial date is also kept in the iPhone Keychain so that reinstalling can't restart the trial. (With Cloud AI on, your plan also travels with each request, as 3.2 and 3.5 explain.)
• Reminders and notifications. Created and scheduled on your phone. We don't send notifications from a server. (If you're in a group Qwilt, Apple's iCloud may wake Qwilted in the background to fetch the group's changes. That shows you nothing and sends us nothing.)
• Your group Qwilts and chats. Your phone keeps a copy of each group Qwilt you're in and of its chat, and the agreement you gave before sharing, joining or chatting, with the version of the Terms you agreed to. Section 3.9 says what the group sees.
• A random install ID. A random code made for this copy of Qwilted and kept in the iPhone Keychain. It contains nothing about you, and it's sent only with Cloud AI requests (3.2). It stays in the Keychain if you delete the app. "Delete account and data" in Settings erases it (section 9.2).

3.2 Sent when you use Cloud AI

Only if you choose Cloud AI, during setup or in Settings. With Phone only, none of this is sent. Before anything goes to Anthropic, Qwilted asks you, and shows what Cloud AI sends.

With Cloud AI on, Qwilted sends information to our server at two moments. Each request carries one save or one question, never your whole library.

When a save is read. During your free trial and with Plus, each new save is sent so Stitch can write its note and suggest a patch for it. Saves you already had may also be sent: up to 25 a day during the trial, or one at a time when you ask Qwilted to read a save. A screenshot or picture shared on its own, with no link, is read too, during your free trial and with Plus, if your phone found text in it: only that text is sent (up to 16,000 characters), never the picture. A picture with no text in it isn't sent. Qwilted sends:

• the full link (the whole web address), when the save has one;
• the save's title and caption, and the app it came from;
• text from the web page, up to 16,000 characters during your free trial and with Plus and up to 6,000 otherwise, and how long the whole page was (a number);
• during your free trial and with Plus, words spoken in a video (up to 16,000 characters) and text read from its frames (up to 500 characters);
• text read from a screenshot or picture, whether it was shared with a link or on its own;
• your note on it: the note you typed when you saved it, and a note you wrote or changed later, each once (a save a friend added to a group Qwilt carries no note of theirs: 3.9);
• the names of all your patches, only when Qwilted is choosing where to file the save, and the names of the group Qwilts you're in;
• for a save a friend added to a group Qwilt, that a friend added it and the first name they go by in the group (3.9);
• a short hint about how you usually file things (up to 280 characters), which can name up to 2 of your patches and the kinds of saves you put in them. It goes with every save that's read.

When you ask Stitch something that needs Cloud AI. Qwilted sends:

• your question;
• your last 4 questions and the first 240 characters of each of Stitch's answers, so follow-up questions make sense, with the random IDs of the saves each of those answers showed you, and of any save you told Stitch wasn't the one you meant;
• excerpts from saves that match your question, including notes and to-dos you wrote, and saves friends added to a group Qwilt you're in, marked as theirs with their first name (3.9). Our server passes a friend's words to Claude as quoted text, never as instructions. For each save: its title, a random ID for it, the app it came from, the day you saved it, what kind of save it is (such as "YouTube video" or "to-do"), its tags, its patches, who made it (such as a creator's name and handle, as the app you shared from or the link named them) and the website its link is on (the site's name only, never the rest of the address), each of those two at most 100 characters; and up to 2,000 characters of its words: your own note first, including the note you typed when you saved it, then its spoken words, the page's note, page text and on-screen text. Sometimes also a short passage (about 300 characters) of a video's spoken words that matches your question;
• when you're in a group Qwilt, the names of the group Qwilts you're in, so Stitch knows which patches are shared;
• for a to-do, its deadline (the day of the week, the date and the time), whether it's overdue and whether it's done;
• if you told Stitch during setup whether you like short answers or more detail, that choice as one number: about how many words to aim for (3.1);
• how much: when Stitch looks through your saves step by step, the titles, excerpts, creators and sites for one question add up to at most 16,000 characters, including a short list of up to 20 likely saves at 160 characters each. When Stitch answers in one go, he sends at most 8 saves, or at most 20 when he's putting something together for you, such as a list or a plan. Each save's words are cut to 2,000 characters, so a question sends up to 16,000 characters of excerpts in all, and up to 40,000 when Stitch puts something together;
• counts about your library when your question needs them, such as how many saves you have by app, type and topic, and the dates of your first and latest saves;
• your phone's current date and time with its offset from UTC, and which day your week starts on, so "this week" means your week, and the days your phone took any date words in your question to mean (such as "last week");
• sometimes, a draft of Stitch's reply, which can mention save titles and counts, so Claude can make it read naturally.

If your question isn't about your saves, Stitch may answer from Claude's general knowledge. Then only your question and your recent conversation are sent. If Stitch offers a to-do, the to-do is made on your phone, and only if you choose to keep it.

A message about suicide, self-harm or someone in danger. Stitch answers it with fixed words that list crisis lines, written in advance by us, never by AI. When your phone recognises such a message, it isn't sent to Cloud AI at all. If one reaches our server, the server answers with the same fixed words before any AI is used and keeps nothing from it. If Claude is the first to recognise one, our server replaces Claude's reply with the same fixed words. A conversation like this is never kept in the "Help improve Stitch" log (3.3), and it's never sent again as part of a later question.

Attached to every Cloud AI request:

• the random install ID (3.1), used to keep usage limits fair;
• the app's access key, which is the same in every copy of Qwilted and says nothing about you;
• the app's build number, and one word for the plan your phone thinks it's on ("free", "trial" or "plus");
• if you have Plus, Apple's signed record of your subscription, so our server can check with Apple that it's paid for (3.5);
• if you signed in with Apple in an early test version of Qwilted, the anonymous Apple user ID that sign-in created (never your name or email). Current versions don't offer sign-in.

Never sent to our server, or to Anthropic: your whole library, your nickname or what you told Stitch about yourself (except whether you like short answers or more detail), your photos, videos or audio, the pictures Qwilted keeps, your crash reports, your backups, your age, or any group chat message. (Survey answers go separately, only when you tap Send: 3.10.) If you join a group Qwilt, the name you choose for the group, which starts as your nickname, is shared with its members (3.9).

3.3 Sent only if you turn on a sharing switch

There are two switches, offered during setup and in Settings. Both are off unless you turn them on, and you can turn either off at any time. Turning a switch off stops sending straight away and throws away anything still waiting to be sent. It doesn't delete what was already sent (section 9.2 says how to delete that).

"Share how I use Qwilted." Qwilted sends a day's counts once the day is over, and today's counts so far when you leave the app, for any day in the last 45 not yet sent. The counts are:

• how often you open Qwilted and how many days it's been since you installed it, which tabs you use, how far you got in setup and how long each setup screen took, and how many times setup stopped at the age question (never your age);
• how many things you saved, from which apps and of which kinds (like "TikTok · video"), how you saved them, and whether they arrived;
• how many questions you asked Stitch, whether each was answered with Cloud AI or on your phone, what kind of question it was, how many found nothing, and how many got a thumbs up or down or a score from 1 to 5;
• how often you moved, resized, recoloured, hid, tied or labelled things on your Qwilt, changed its background or shared a card, and how many to-dos you or Stitch made and how many were finished;
• how many patches you have, how many saves are unsorted, and whether your patch names are common words from a fixed list, such as "Recipes" or "Travel" (any other name is counted only as "custom");
• how many free trials started and ended, Plus purchases and which plan was bought, how often Plus lapsed, times the Plus screen was shown or closed, and how often Cloud AI stepped down to your phone and why;
• how often Stitch's notifications were shown and opened, including the note about new saves in a group Qwilt (as the kind "group", never which group);
• how many times the app crashed and in which build (never the crash report), and how long some things took, such as saving (as a middle value and a 90th-percentile value);
• how often the feedback question was shown or answered (never your answers; those go only when you tap Send, 3.10);
• the day, the app version and the analytics ID (below).

It never includes titles, links, notes, questions or anything you wrote.

"Help improve Stitch." When a turn of your conversation with Stitch ends, Qwilted sends:

• your question exactly as you typed it (up to 2,000 characters);
• Stitch's answer as it read at the end (up to 6,000 characters), which can name or quote your saves;
• the kind of question, whether it was answered with Cloud AI or on your phone, how many saves the answer used (a number, never which ones), and your thumbs up or down if you gave one;
• the day, the app version and the analytics ID.

We use these to find wrong answers and fix Stitch. A turn whose answer used a save a friend added to a group Qwilt is never sent or kept, so a friend's words never reach us through your switch. Group chat messages are never sent. A message about suicide, self-harm or someone in danger, and the crisis answer to it, are never sent or kept (3.2), even with this switch on. If you give that answer a thumbs up or down with "Share how I use Qwilted" on, only the number of thumbs is sent, after the day is over, with no analytics ID, and our server adds it to one total for the day.

The analytics ID. Everything the two switches send carries a random ID, made the first time you turn a switch on. It's separate from the install ID used for Cloud AI, and the two are never sent together, so they can't be joined. It's kept in Qwilted's own storage, not the Keychain, so deleting the app deletes it. Delete Account erases it too.

Where it's kept. In Qwilted's database, hosted by Render in Oregon, USA, for 12 months, then deleted automatically. Each day's counts (never questions or answers) are also written to our server's logs, which Render keeps for up to 30 days.

3.4 Technical information our server receives

Whenever the app contacts our server:

• Your IP address, which is your phone's network address, with the time, the address requested and the result. Our server uses it to limit how many requests one network can send, and it's written in the server's logs, which Render keeps for up to 30 days. We don't use it to work out where you are.
• Basic connection details your phone sends with any web request, such as the app's name and version and the iOS version.
• The connection check. While Qwilted is open on your screen, it checks that it can reach our server: when it opens, about once a minute after that, and when your network changes. This starts the first time you open the app, during setup, and happens even with Phone only. It sends the app's access key (and a leftover Apple user ID, if one is stored from an early test version), and nothing you wrote, saved or answered.
• Usage-limit counters. To keep Cloud AI fair and affordable, our server counts requests and spending per install ID, per Plus subscription and per IP address, with reading your saves and Stitch's answers counted separately. Each counter is named with a scrambled code made from the ID or address (a keyed hash), never the ID or address itself. The counters hold no content. Most expire within about 7 days, and a counter for a single question within 10 minutes. A Plus subscription's counts for the calendar month (how many Cloud AI answers it has had and what it has spent) are kept for 40 days, and so are the month's two running totals of all spending, one for Plus and one for everyone else, which have no ID.
• The removal list. At most once an hour, when Qwilted opens or you come back to it, your phone downloads our list of removed content (3.9). The request carries only the app's access key, the same in every copy of Qwilted, so it doesn't say who is asking.
• Filing memos. When Cloud AI reads a save and picks a patch for it, our server may keep a short memo so the same request gets the same answer: the kind of save, two confidence scores and the position of the chosen patch in the list your phone sent. It holds no name, no link and no words from the save, it's named with a scrambled code made from the request, not from any ID, and it expires after 30 days.
• Cost records. For each Cloud AI call, our server logs what it cost us: how much text was processed, the price, the kind of request, whether the server treated it as free or Plus, and the plan word your phone sent. There's no ID and nothing you wrote. We also keep daily totals of these, split by free and Plus, for 12 months.

Our server runs on Render. Every request reaches it through Cloudflare's network, which Render uses in front of its servers.

3.5 Purchases

Qwilted Plus is sold through Apple's App Store, and Apple handles payment. We never receive your card details, your name, your email address or your Apple Account.

• Checking your plan. Your phone asks Apple whether Plus is active. With Plus and Cloud AI on, each Cloud AI request also carries Apple's signed record of your subscription: the product, the purchase and expiry dates, Apple's transaction numbers, the App Store country, the price and currency, any offer or offer code used, and codes Apple adds so the record can be checked. Our server checks Apple's signature, then asks Apple whether the subscription is still paid for. It remembers the answer in memory for up to 15 minutes, logs nothing about the purchase, and names your Plus spending counter with a scrambled code made from Apple's transaction number (3.4).
• The free trial of full Plus, with no card, lasts 30 days from your first save while Cloud AI is on (or your first Cloud AI answer, if that comes first) and is tracked on your phone.
• Counts only. With "Share how I use Qwilted" on, the daily counts include trials and purchases (3.3).

3.6 Things your phone fetches from other sites

When you save a link, your phone contacts other services directly, whether or not you use Cloud AI. Our server isn't involved.

• Link previews. To show a title, a picture and who made it, your phone sends the link to the public preview services of YouTube, TikTok, Instagram, Reddit, Pinterest or Spotify, or opens the web page itself.
• Page text. For a web page, your phone reads the page to keep its words (3.1). A save that doesn't have them yet is read once, the first time you open it.
• Pictures. Your phone loads preview pictures from those sites. Qwilted keeps a copy of each save's picture (3.1): if the picture has already been loaded to show you, it keeps that; if not, it downloads a copy only on Wi-Fi and never in Low Data Mode.
• Page titles in the Share menu. When the app you share from doesn't include a web page's title, the Share menu reads the start of the page (at most 64 KB, for at most 3 seconds) to find it, with no cookies and no Qwilted ID.
• Video captions. If "Transcribe videos automatically" is on (it is, unless you turn it off), your phone may ask YouTube for a video's public captions.

Those sites receive your IP address, the link and basic connection details, and they may collect more under their own privacy policies. Qwilted sends them no ID of its own. Like a web browser, your phone may keep and send back cookies that some of those sites set.

3.7 Emails and the beta sign-up form

• Email. If you email us, we get your address and whatever you write. We use it only to reply and to keep a record of privacy requests. Email to qwilted.app goes through Cloudflare, which forwards it to our inbox at Google (Gmail).
• The beta sign-up form. If you ask to test Qwilted before release, the form asks for your name, email, country, iPhone model and iOS version, and a few questions about how you save things. We use your answers to choose who to invite, to send your invite and beta updates, and to understand who finds Qwilted useful. We give your email to Apple only so TestFlight can send your invite. The form runs on a form service we use only for this. We delete sign-up answers within 30 days after the beta ends, or sooner if you ask. To stop beta emails, reply "stop" or write to support@qwilted.app.

3.8 What we don't collect

Qwilted doesn't ask for or collect:

• your name, email address or phone number (unless you email us or sign up for the beta; the first name you choose for a group Qwilt goes to the group, not to us, 3.9);
• your contacts or calendar (when a group's starter invites people, Apple's own sharing screen handles the contacts, not Qwilted);
• your location, or your photo library (only the photos you pick);
• your camera or microphone (transcription listens to videos you add, not to you);
• health or fitness information;
• an advertising ID, or your activity in other apps and websites.

Your saves may contain personal things, because you choose what to save. We don't look for, sort or use sensitive information in them.

3.9 Group Qwilts and chat

A group Qwilt is a patch you share with friends. Everyone in it can add saves to it and take saves off it, and it can have a chat. It sits on each person's own Qwilt, next to their other patches.

How it travels. A group Qwilt and its chat go through Apple's iCloud, not through our server.

• They're stored in the iCloud account of the person who started the group (the "starter"), and count against the starter's iCloud storage. Apple stores them under its own iCloud terms and privacy policy.
• Each member's phone gets its copy through their own iCloud, so everyone needs to be signed in to iCloud. There's still no Qwilted account.
• Invites are iCloud links. The starter sends them with Apple's sharing screen, which shows the people invited the way Apple shows them. Qwilted doesn't read or show anyone's Apple Account name, email address or phone number.
• Our server never receives what's in a group, who is in it, or its chat, except what someone reports (below).

Who can be in one. Up to 10 people, including the starter, all 18 or older. Only the starter invites people and removes them. Qwilted won't let more than 10 join.

What the group sees of a save you add. A group save carries:

• the link, with tracking tags taken off (such as "utm" tags and "fbclid");
• the title you typed;
• what your phone read from the page: its title, a short cover line, a public link to its picture, what kind of thing it is, and the creator's name as the page states it;
• when it was added and its position in the group.

Any member can change a group save's title and what was read from its page, and every phone shows the latest change. Notes never go to the group: a note you type while saving into a group, or write later, stays on your phone.

It never carries your notes, anything read from your own photos or videos or from a share out of Notes, transcripts, tags or structured facts, or anything a Cloud AI read wrote after seeing a private note.

The group also sees the first name you chose (up to 20 characters, filled in from the nickname you gave Stitch, and you can change it before you share or join), a colour and the day you joined, and the patch's name, colour and description, which are shared with every member, and its cover picture, which iCloud shows on the invite. If you join a group Qwilt, the name you choose for the group, which starts as your nickname, is shared with its members. Group Qwilts go through Apple's iCloud, not through our server.

What the group never sees. Your other patches and saves, your notes on saves you didn't add to the group, your to-dos and reminders, photos, screenshots and videos, what Stitch remembers about you, your question history, and where the patch sits on your Qwilt.

Chat. Messages (up to 1,000 characters each, optionally pointing to a save in the same group) and hearts live in the group in the starter's iCloud and on each member's phone. Only the people in that group can read them. Qwilted and Stitch don't read them: they're never sent to our server, to Cloud AI or to any AI provider, unless someone reports a message. You can delete a message you wrote; it's removed for everyone in the group, but anyone who already left keeps their copy.

Taking saves off. Anyone in the group can take a save off. It goes to the group's Recently removed, where anyone in the group can put it back for 30 days. A save you take off stays in your own library.

Leaving, being removed, and a group that ends. If you leave, or the starter removes you, you keep a copy of the patch with every save in it, and it stops updating. What you added stays in the group for the others. If the starter stops sharing, every member keeps their copy. Anyone who has been in a group keeps a copy of what was in it while they were there, on their own phone, where we can't reach it.

When a friend's save reaches your phone. Your phone treats it like a link you saved: it may fetch the link's title and picture from the site (3.6), and if you use Cloud AI, Stitch may read it with Cloud AI (3.2). So a save you add can reach Anthropic when another member uses Cloud AI. The screen before you share or join says so: "Friends who use Cloud AI may have Stitch read these saves."

Stitch and a group. Stitch can find and read the saves in the group patches you're in, on your phone. He can't add, rename or take anything off in a group, and he never reads the chat.

Crisis lines in chat. If a message you write plainly says you might hurt yourself, your phone shows you crisis lines under it. Only you see them. It reads on your phone, looks only at messages you write, and sends nothing, keeps nothing and tells nobody. It can miss things, so it isn't a safety service (Terms, section 10.8). The chat menu's "Crisis lines" also lists them at any time.

Reporting. You can report a save, a person or a message from inside the group. A report sends our server only:

• for a save: its link, title and up to 500 characters of its note;
• for a person: the first name they chose;
• for a message: its text, the title of the save it points to, and two codes, one that stands for the message and one for its writer in that group, so a second report about the same message or person can be matched (each code is made on your phone from the group and the record, and differs in every group, so it doesn't name anyone);
• the reason you picked, and a random code for the group (made on your phone from the group's iCloud name; it doesn't say who is in the group).

A report never includes your name, and the person reported isn't told who reported. A message report also carries a random code made only for reports, used to limit each phone to 10 message reports a day and never stored. We keep reports for 90 days, then delete them.

How we remove things. We can't read or delete anything in anyone's iCloud or on anyone's phone. Instead, after reading a report, we can add it to a list of removed content that every copy of Qwilted downloads (3.4). The list holds only scrambled codes (hashes) of links, sites, messages, message writers and groups, never titles, names or words, and it's signed so a phone can tell it's ours. When a phone finds a match it hides that save or message ("Removed by Qwilted"), hides a writer's messages once two of them have been removed, or pauses a group so it can be read but not changed. Nothing is deleted from anyone's phone by this.

Blocking. Blocking someone hides their saves, their name, their messages and their hearts on your phone, in every group, and stops new ones arriving there. It happens only on your phone, and they aren't told. They can still see what you add and write in a group you share; to stop that, leave the group.

Filtering. Your phone can hide a chat message that contains a word from Qwilted's list of offensive words, with a Show button. Before you send one, it asks whether you're sure. This happens on the phone and sends nothing.

Your agreement is recorded. Before you share a patch or join a group for the first time, and before you first chat, Qwilted asks you to agree to this policy and the Terms. Your phone records that you agreed, when, and which version of the Terms it was. That record stays on your phone.

Age. Group Qwilts and chat are for adults only, and use the 18+ answer you gave in setup (section 10). If an under-18 answer is ever recorded on a phone, Qwilted takes that phone out of every group and removes its chats.

3.10 Survey answers you send

Now and then Qwilted asks how it's going. If you answer and tap Send, your answers go to our server. Nothing goes until you tap Send, and this doesn't depend on either sharing switch. The line above Send says: "Send shares only these answers with the Qwilted team."

What's sent:

• your scores (1 to 5) and any "why" you chose;
• what you typed in the boxes, up to 2,000 characters each;
• which survey asked and at which point, and the app's build number;
• a random feedback ID, made the first time you tap Send, and a random ID for that one form, so a retry isn't counted twice.

The survey never asks for your name, nickname, email or saves. Only type what you're happy for us to read.

The feedback ID is separate. It isn't the analytics ID (3.3) or the install ID (3.1), and it isn't made from either, so your survey answers can't be joined to your usage counts, your question log or your Cloud AI requests.

Where it's kept. In our database, hosted by Render in Oregon, USA, for 12 months, then deleted automatically. Our server never writes the answers to its logs. Jacob reads them on his private data page (section 7).

Deleting them. Settings › "Delete my survey answers" deletes every answer sent under your feedback ID, and so does Delete Account (9.2).

4. How we use it

We use information only for the purposes below.

We don't use your information to show ads, build a profile of you, sell or rent it, make decisions about you with legal or similarly serious effects, or train AI models.

5. Cloud AI and Anthropic

• Who does the AI work. Anthropic, PBC, which makes Claude. Our server sends Anthropic the information in 3.2. Anthropic sees our server, not your phone, so it doesn't get your IP address. Anthropic processes this for us as our service provider, under its Commercial Terms of Service and Data Processing Addendum, and not for its own purposes.
• No training. Anthropic's Commercial Terms say Anthropic "may not train models on Customer Content from Services." We don't train AI models on your content either.
• How long Anthropic keeps it. Anthropic deletes what we send, and what Claude writes back, within 30 days. It may keep it longer where the law requires, or up to 2 years if it's flagged under Anthropic's Usage Policy, with its safety scores for that request kept up to 7 years (Anthropic Privacy Center, "How long do you store my organization's data?", updated July 1, 2026).
• Our server doesn't keep it. It handles each request in memory, passes it to Anthropic, returns the result and discards it. An automated test checks on every code change that request content isn't written to logs. The only things you wrote that our server keeps are the "Help improve Stitch" log, which you have to turn on (3.3), survey answers you send (3.10) and reports (3.9). None of them goes to Anthropic.
• You'll know when Cloud AI isn't used. When an answer comes from your phone instead of Cloud AI, the answer is marked that way and Stitch tells you why: for example Phone only, no internet, the trial or allowance used up, or Cloud AI couldn't finish an answer.
• AI can be wrong. Notes, patch suggestions and answers are written by AI and can be incomplete or wrong. Check anything important. Stitch is an AI, not a person.
• No automated decisions about you. Qwilted doesn't make decisions based only on automated processing that have legal or similarly significant effects on you. Sorting a save, answering a question, or answering on your phone when a limit is reached doesn't decide anything about your rights, money, job, housing or health.

6. Who we share it with

We share information only with the service providers below, and only so they can run Qwilted for us. Qwilted has no third-party analytics, advertising or tracking code: the usage counts in 3.3 go only to our own server.

We don't sell your information, and we don't share it for advertising. We don't sell personal information, and we don't "share" it for cross-context behavioural advertising, as California law defines those words. We haven't done either in the past 12 months. We don't work with data brokers or ad networks.

Sharing you choose. When you share your Qwilt, a card or an exported backup, it goes where you send it. It doesn't pass through our server. A group Qwilt and its chat go to the people in the group, through Apple's iCloud (3.9). When you tap Open in Maps on a save, the place's name or address goes to Apple Maps.

Legal requests. We may disclose information if the law requires it, for example in response to a valid court order, or to protect someone from serious harm. When we're allowed to, we'll tell you first. Because our server keeps almost nothing, there's usually little we could provide.

If Qwilted changes hands. If Qwilted is sold or becomes part of a company, the little information we hold may pass to the new owner. The new owner must follow this policy, or tell you and get any consent the law requires before handling it differently.

7. Who at Qwilted can see what

• Nobody at Qwilted can see your library, your group Qwilts or your chats. Your library is on your phone, and groups are in iCloud. We see only what someone reports (3.9).
• Reports and survey answers. The same private page (below) lists the reports people send, so Jacob can act on them, and the survey answers people send, never the feedback ID.
• The data page. Jacob has a private page, locked with a long secret key, that shows totals worked out from the counts in 3.3, the cost records in 3.4, and the "Help improve Stitch" log: each question, Stitch's answer, when it was asked, the kind of question, whether it was answered with Cloud AI or on the phone, how many saves it used, and the thumbs. It never shows the analytics ID or anything that says who asked. Jacob uses it to find wrong answers and decide what to fix.
• AI help. Jacob may use AI tools to help read that log or those totals, and only under terms or settings that don't let the tool's maker train on them.
• Nobody else at Qwilted has access to our server's settings, database or logs. Our hosting providers' staff can reach their own systems only under their own terms, and Jacob may use AI tools to help run and fix the server, under terms that don't let the tool's maker train on what they see.

8. How long we keep it

9. Your choices and rights

9.1 Controls in the app

• Phone only or Cloud AI. Choose during setup and change it any time in Settings. Turning Cloud AI off stops new sending straight away. It can't recall what was already sent.
• The two sharing switches. In Settings. Both are off unless you turn them on.
• Transcribe videos automatically. Turn it off in Settings to stop video transcription and the YouTube caption request.
• Notifications. Choose when Stitch may send notes during setup, or turn notifications off in iOS Settings.
• Delete a save. It goes to Recently Deleted for 30 days, where you can restore it or erase it now.
• Export a backup. Settings saves your whole library as one file you can keep anywhere. It's also how to get a portable copy of your data.
• In a group Qwilt. Take a save off, delete a message you wrote, report a save, a person or a message, block someone, or leave. The starter can also remove people and stop sharing.
• Survey answers. Settings › "Delete my survey answers" deletes what you sent (3.10).

9.2 Delete account and data

"Delete account and data" is in Settings (we call it Delete Account below). On your phone it erases:

• your library: saves, notes, patches, your Qwilt with its threads and labels, and your to-dos;
• the photos, screenshots and videos you added, and the pictures Qwilted kept;
• what Stitch remembers about you, how you file, your question history, your notes on wrong answers, and the survey answers kept on your phone;
• your copies of group Qwilts and their chats, and your agreements to share, join and chat;
• automatic backups, rescue copies, cached web pictures, and anything waiting in the Share menu;
• your Cloud AI choice, the sharing switches and the analytics ID;
• usage counts, crash reports, the install ID in the Keychain, and any leftover Apple user ID;
• reminders and notifications waiting to be delivered.

It also asks our server to delete everything the sharing switches sent under your analytics ID (the daily counts and the question log). If your phone is offline, it keeps asking until our server confirms. Until then, the analytics ID stays on your phone inside that one request, and is used for nothing else.

It also asks our server to delete the survey answers you sent under your feedback ID (3.10), and keeps asking until our server confirms.

Group Qwilts and chat. Delete Account takes you out of every group Qwilt you're in:

• the saves you added stay in the group for the others, shown as added by "a member"; your first name is removed, and the links and titles stay;
• the messages and hearts you wrote in groups you're still in are deleted for everyone;
• a group you started, which lives in your iCloud, is deleted from your iCloud and stops syncing; everyone in it keeps their copy.

Friends' phones that are offline may keep your name, notes and messages until they reconnect. Anyone who left a group before you deleted keeps the copy they already had, and messages in groups you already left stay there. We can't reach any of those copies. If iCloud isn't available when you delete, these steps run the next time Qwilted opens with iCloud. Reports aren't linked to anyone, so there is nothing of yours to find in them; they're deleted after 90 days.

What Delete Account can't reach:

• backups you exported yourself, and iPhone backups (iCloud or computer) made before you deleted;
• what Anthropic keeps for its limited time (section 5);
• server logs, until they expire (up to 30 days);
• Apple's purchase records.

What it keeps on purpose: the date your free trial started, in the Keychain, so that deleting and starting over can't restart the trial. It's one date and says nothing about what you saved.

Deleting your account doesn't cancel Plus. Apple bills it. Cancel it in iPhone Settings, under your Apple Account, then Subscriptions.

If you just delete the app, iOS removes Qwilted's storage from your phone, except the install ID and the trial date in the Keychain. Anything the sharing switches already sent stays on our side, and because the analytics ID was deleted with the app, we can no longer link it to you. It's deleted after 12 months. Deleting the app also doesn't take you out of a group Qwilt: you stay a member, and what you added stays. To have all of this handled now, use Delete Account before you delete the app.

9.3 Your rights, wherever you live

Whatever the law where you live says, you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct it;
• delete it;
• give it to you in a portable format;
• stop using it where you gave consent (for Cloud AI or either switch), without affecting what was done before.

We won't treat you differently or give you a worse service for asking. Most of your information is on your phone, where you already control it. Section 9.7 says how to ask.

9.4 If you live in California

This is our notice under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA). The CCPA may not apply to a business of our size, but we give everyone in California the rights below. Sections 3 and 8 are our notice at collection: what we collect, why, and how long we keep each kind. In the past 12 months we collected:

We don't collect precise location, biometric information or inferences about you, and we don't intentionally collect sensitive personal information. If something sensitive is in a save you send with Cloud AI, it's used only to write the note or answer you asked for, never to infer things about you, so the right to limit its use needs no extra step. We don't sell or share anyone's personal information, including anyone under 16. We offer no financial incentive for personal information, and we don't disclose it to third parties for their direct marketing.

In California you have the rights in 9.3, plus the right to know the categories and specific pieces of personal information we collected, where they came from, why, and who received them; to correct it; to delete it; to opt out of sale or sharing (there's nothing to opt out of, and we still honour Global Privacy Control, section 13); to limit the use of sensitive personal information (we don't use it beyond what you asked for); and to use an authorized agent (9.7). We won't discriminate against you for using any of these rights: you won't be charged more, get a worse service or be refused Qwilted. Section 9.7 says how to ask.

9.5 If you live in another US state

Several US states have their own privacy laws, such as those of Colorado, Connecticut, Texas and Virginia. Some may not apply to a business of our size, but we honour the rights in 9.3 for people in every state. Depending on your state, you may also have the right to opt out of targeted advertising, the sale of personal data, and profiling that leads to significant decisions (we do none of these), and to get a list of the third parties we've disclosed personal data to.

Appeals. If we turn down your request, reply with "Appeal" in the subject line within 60 days. We'll answer within the time your state's law allows. If we still say no, you can contact your state's Attorney General.

9.6 If you live in Canada

Canada's federal privacy law (PIPEDA) and provincial laws, including Quebec's, give you the rights in 9.3. You can withdraw your consent to Cloud AI or either switch at any time in Settings. We'll answer a request to see or correct your information within 30 days, or tell you within that time if we need longer and why. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca), or in Quebec to the Commission d'accès à l'information (cai.gouv.qc.ca), or to your province's privacy commissioner.

Your information is processed in the United States (section 12), where it may be available to US courts, law enforcement and national security authorities under US law. We use contracts and our providers' own terms to protect it there.

If a breach of our safeguards creates a real risk of significant harm to you, we'll report it to the Office of the Privacy Commissioner of Canada and tell you, as PIPEDA requires, and we keep a record of every breach.

9.7 How to make a request

• Email privacy@qwilted.app with "Privacy request" in the subject line. Requests are free.
• Start in the app if you can. Export a backup to get your library, edit saves to correct them, and use Delete Account to erase everything, including what the sharing switches sent.
• What we can find. Qwilted has no sign-up, and we don't know your name or email unless you write to us. What the sharing switches sent is stored under the random analytics ID, and survey answers under the feedback ID, which the app doesn't show, so we may not be able to find them from an email. Settings can delete survey answers (3.10). We can't reach group Qwilts or chats in anyone's iCloud; delete what you wrote from inside the group, or use Delete Account (9.2). If you can't use Delete Account, tell us about when you used Qwilted and, if you turned on "Help improve Stitch", a question you asked, and we'll look for it. If we can't link anything to you, we'll say so. Everything sent under the switches is deleted after 12 months regardless.
• Checking it's you. We match what you tell us to what we hold. We'll never ask you to create an account, and we use what you give us only to handle your request.
• Authorized agents. Someone acting for you must send your signed permission, and we may ask you to confirm directly, unless they hold a valid power of attorney.

9.8 If you live in Australia

We handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988, whether or not the Act applies to a business of our size.

• You don't have to tell us who you are. Qwilted has no sign-up, and you can use it without giving us your name or email (APP 2).
• Access and correction. You can ask to see the personal information we hold about you and ask us to correct it (APPs 12 and 13). Most of it is on your phone, where you already control it. Section 9.7 says how to ask, and we'll answer within 30 days.
• Sent overseas. What leaves your phone is handled outside Australia, mostly in the United States, by the providers in section 6: Anthropic (Cloud AI requests, only if you choose Cloud AI), Render (our server and database), Cloudflare (our network, worldwide), Apple (the App Store, payments and iCloud, which carries group Qwilts), Google (our email), GitHub (these pages) and the beta sign-up form service. We send each only what its job needs, and we take reasonable steps to protect it there, by using providers that make privacy commitments in their terms and by limiting what we send (APP 8).
• Breaches. If a data breach is likely to cause you serious harm, we'll tell you and the Office of the Australian Information Commissioner, as the notifiable data breaches scheme requires where it applies to us.
• Complaints. Email privacy@qwilted.app first, and we'll reply within 30 days. If you're not happy with our answer, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

10. Age: Qwilted is for adults

Qwilted is for people 18 and older. Nobody under 18 may use it.

• Age comes first. Setup asks about age on its second screen, before your nickname, any save or the Cloud AI choice. If your iPhone can answer, Apple shows its own screen asking whether to share your age range with Qwilted (Apple's Declared Age Range), and Apple tells Qwilted only a range, never your birthday. If you don't share, or your iPhone can't answer, setup asks for your birthday. Your phone checks it and then forgets it: the date is never stored or sent.
• Under 18. If Apple says you're under 18, or your birthday says you are, setup stops and Stitch kindly explains that Qwilted is for people 18 and up. If you typed your birthday wrong, you can fix it once. Nothing you entered is sent. Qwilted keeps only that setup is stopped, why, how many under-18 answers were given, and (if you typed your birthday yourself) one day, so the stop can lift: the day you turn 18 if you're 13 to 17, otherwise the day you answered. It never keeps your birthday or your age.
• Nothing about you reaches our server before this. From the first screen, the app checks that it can reach our server (3.4). That check carries no answer, no name and no save, only what every internet connection shows, such as your network address.
• Children under 13. Qwilted isn't directed to children under 13, and we don't knowingly collect personal information from them.
• If we learn someone under 18 is using Qwilted, we'll delete anything on our side we can link to them and ask them to stop. Their library is on their phone, where we can't reach it. Delete Account, or deleting the app, removes it.
• Parents. If you believe your child has used Qwilted, email privacy@qwilted.app.
• Groups and chat. Starting, inviting, joining and chatting use the same 18+ answer. Don't invite anyone under 18. If an under-18 answer is ever recorded on a phone, Qwilted takes that phone out of every group and removes its chats (3.9).
• Testers. People testing Qwilted before release must also be 18 or older.
• A teen mode may come later. Before anyone under 18 is allowed to use Qwilted, we'll update this policy and tell you in the app first (section 15).

11. Security

What we do:

• Encrypted connections. Every connection the app makes to our server uses HTTPS, and the app's settings don't allow unencrypted web connections.
• No database of your content. Our server doesn't keep what you send with Cloud AI, and an automated test checks on every change that request content isn't written to logs.
• Scrambled counters. Usage-limit counters are named with a keyed hash (HMAC-SHA256) of the ID or address, never the ID or address itself. They expire within days, and neither the counters nor our database can be reached from the public internet.
• A locked data page. Jacob's data page needs a long secret key, answers exactly like a missing page to anyone without it, and tells browsers never to store it.
• Your phone's protection. Your library is stored in Qwilted's private storage on your phone, which iOS encrypts using your passcode. The install ID is kept in the iPhone Keychain.

Please be aware:

• Exported backups aren't encrypted. An exported backup is a plain file with your patches, saves, notes, the text kept from pages and videos, and cover pictures. Anyone who gets the file can read it, so keep it somewhere safe.
• Automatic backups aren't encrypted by Qwilted. They're plain files in Qwilted's storage on your phone, protected by your phone's own encryption.
• Nothing is perfectly secure. No system can be made completely safe, and we can't promise yours won't be affected. If a breach affects your personal information, we'll tell the authorities and you as the law requires. Because Qwilted has no accounts, we'll usually tell you in the app and on this page, and by email if you've written to us.

Found a security problem? Tell us at support@qwilted.app.

12. Where your information is processed

Qwilted is run from the United States by Qwilted LLC, an Ohio limited liability company, and is offered on the App Store in the United States, Canada and Australia. What leaves your phone is processed in the United States: our server and database by Render in Oregon, Claude by Anthropic, email by Google, these pages by GitHub, and the network by Cloudflare, which runs worldwide, so a request may pass through a Cloudflare location near you. Our providers may also use other countries where they operate. Group Qwilts and their chat are stored by Apple in iCloud, wherever Apple stores iCloud data, under Apple's terms.

Qwilted isn't offered in the European Union, the United Kingdom or Switzerland. If you use it there anyway, your information is still handled as this policy describes, and you can use the rights in 9.3 by email.

13. Do Not Track and Global Privacy Control

• Do Not Track. Qwilted doesn't track you across other companies' apps or websites, so Do Not Track signals don't change anything.
• Global Privacy Control (GPC). We treat a GPC signal as a request to opt out of the sale or sharing of your personal information. We don't sell or share, so honouring it changes nothing about how Qwilted works. You can also email us to opt out.

14. Apple, the App Store and TestFlight

• No tracking permission needed. Qwilted never asks for permission to track you (Apple's App Tracking Transparency), because it doesn't track you, and it doesn't use the advertising identifier.
• Purchases. Apple processes purchases and subscriptions under Apple's own privacy policy.
• Ratings. Qwilted may show Apple's own rating prompt. What you choose there goes to Apple, not to us.
• Crash reports and statistics from Apple. If you agreed in iOS to share analytics with app developers, Apple may give us crash reports and summary statistics. If you test Qwilted with TestFlight, TestFlight shows us the name and email you were invited with, when you installed, crash reports, and any feedback or screenshots you choose to send, under Apple's TestFlight terms.
• Permissions Qwilted may ask for:
  • Notifications, for reminders, to-do alerts, Stitch's notes and the trial notice.
  • Speech Recognition. Qwilted transcribes the sound of videos you add with Apple's speech tools on your phone, never the microphone, so iOS usually doesn't need to ask. The first time, iOS may download Apple's speech model. If Cloud AI is on, the transcript can then be sent as described in 3.2.
  • Add to Photos, only to save a picture you choose, such as your Qwilt poster or a share card. Qwilted can add that picture to Photos. It can't see or read your photo library.
  • Paste. Qwilted may ask iOS whether what you copied looks like a web link, without reading it, so it can offer Paste. It reads what you copied only when you tap Paste, and iOS asks you first.
• What Qwilted doesn't ask for: your photo library, camera, microphone, location, contacts, calendar, Bluetooth or local network.
• iCloud. Qwilted doesn't sync your own library through iCloud. Group Qwilts and their chat, and only they, go through iCloud (3.9), using the iCloud account you're signed in to on your iPhone. If you back up your iPhone to iCloud or a computer, that backup includes Qwilted's data, including your copies of group chats, under Apple's terms. If Qwilted adds iCloud sync of your own library, we'll update this policy first.
• Background updates. If you're in a group Qwilt, iCloud may wake Qwilted in the background so the group stays up to date. These are silent and come from Apple, not from our server.
• Sign in with Apple. Qwilted doesn't offer it. If you signed in with an early test version, Apple gave the app only an anonymous ID, never your name or email, and Delete Account erases it.

15. Changes to this policy

We'll update this policy when Qwilted changes how it handles information, and change the date at the top.

• Big changes come with notice. If a change is material, such as a new kind of information, a new provider or a new use, we'll show a notice in the app before it takes effect.
• When consent is needed, for example to send something new with Cloud AI, we'll ask first. We won't assume a yes, and turning a switch off stays a real choice. This version is one such change: with group Qwilts, Cloud AI can also send saves friends added to a group, with their first names. So if you said yes to Cloud AI before this version, Qwilted shows you the Cloud AI card once more, saying what Cloud AI sends now, and sends nothing to Cloud AI until you choose. Choosing Phone only, or closing the card, turns Cloud AI off.
• Group Qwilts and chat ask for your agreement to this policy and the Terms the first time you share, join or chat (3.9).
• Earlier versions. What changed in this version is listed below, and earlier versions are available by email.

16. Contact and complaints

Questions, requests or complaints about privacy: privacy@qwilted.app. Everything else: support@qwilted.app. We'll reply as quickly as we can, and within the times in section 9.7.

If you're not happy with our answer, you can also complain to:

• in Canada: the Office of the Privacy Commissioner of Canada (priv.gc.ca), or your province's privacy commissioner (in Quebec, the Commission d'accès à l'information, cai.gouv.qc.ca);
• in Australia: the Office of the Australian Information Commissioner (oaic.gov.au);
• in California: the California Privacy Protection Agency (cppa.ca.gov) or the California Attorney General;
• in another US state: your state's Attorney General;
• anywhere in the US: the Federal Trade Commission (reportfraud.ftc.gov).

Changes since the version of October 29, 2026

• When the free trial starts. It now starts with your first save while Cloud AI is on (section 3.5). Nothing else changed.

Earlier changes, in the version of October 29, 2026, compared with the version of October 28, 2026:

• Age check by birthday. When Apple can't tell us your age range, setup now asks for your birthday instead of a range. Your phone checks it and forgets it; Qwilted keeps no birthday and no age (sections 2 and 10).

Earlier changes, in the version of October 28, 2026, compared with the version of October 27, 2026:

• How long a group lasts is now stated correctly: stopping sharing ends access, and the group stays in the starter's iCloud until they use Delete Account.
• What happens to a save taken off a group is now stated in full, in the table in section 8, and the summary of a page is no longer listed among what a group gets, because none is ever sent.
• Notes no longer go to a group. A group save carries its link, title and what was read from its page, and any member can change those. Your notes stay on your phone (sections 3.2 and 3.9).

Earlier changes, in the version of October 27, 2026, compared with the version of October 24, 2026:

• Qwilted is offered in Australia too. A new section explains your rights under the Australian Privacy Principles and how to complain to the OAIC (sections 9.7, 9.8, 12 and 16).

Earlier changes, in the version of October 24, 2026, compared with the version of October 22, 2026:

• The free trial is 30 days of full Plus, with no card (section 3.5).
• More is said about what Stitch sends and what a group sees. A question sends up to 16,000 characters of excerpts, and up to 40,000 when Stitch puts something together (section 3.2). A group save carries the link, your title, the group note and what your phone read from the page, and never your private notes (section 3.9). Your nickname is never sent to our server or to Anthropic, but the group name it starts as is shared with the group (sections 3.2 and 3.9).
• Qwilted is offered in the United States and Canada.

Earlier changes, in the version of October 22, 2026, compared with the version of October 6, 2026:

• Survey answers are sent when you tap Send. The last version said your answers to "how's it going?" were never sent to us. That was wrong: a survey form's answers go to our server when you tap Send, under a random feedback ID of their own, and are kept 12 months. Settings and Delete Account can delete them (sections 3.1, 3.10, 8 and 9.2).
• Group Qwilts and chat are new. A patch you share with friends, and its chat, go through Apple's iCloud, not our server. This version says what the group sees, what stays yours, who keeps a copy, how reporting, blocking, filtering and removal work, and what Delete Account does to your groups (sections 2, 3.9, 6, 8, 9.2 and 14).
• Cloud AI can send a friend's save. When Stitch reads or answers with a save a friend added to a group, it goes with their first name and their note, marked as theirs. You're asked about Cloud AI again first (sections 3.2 and 15). "Help improve Stitch" never sends a turn that used a friend's save (section 3.3).
• Reports and the removal list. What a report sends, that it's kept 90 days, and the list of removed content every copy of Qwilted checks (sections 3.4, 3.9 and 8).
• California and Canada. The California notice now covers survey answers and reports, and states the rights to correct and to limit and that we don't discriminate. The Canada section covers breach reporting (sections 9.4 and 9.6).
• Breaches are now explained: how we'd tell you without accounts (section 11).
• Filing memos. Our server may keep a 30-day memo of how a save was filed, with no content and no ID (sections 3.4 and 8).
• Who we are and where these pages live. Qwilted is now provided by Qwilted LLC, an Ohio limited liability company, which decides how your information is used (section 1). This policy, the Terms and the support page are served by GitHub at jclhanky.github.io/qwilted-legal; qwilted.app is used for email only (sections 6 and 12).

Earlier changes, in the version of October 6, 2026, compared with the version of October 1, 2026:

• More goes with a Cloud AI request, and you're asked first. With each save Stitch reads about: what kind of save it is, who made it and the site it's from, a to-do's deadline and whether it's done, and the note you typed when you saved it. With questions about your saves: whether you asked for short answers or more detail, as one number. When a save is read: longer page text during the free trial and with Plus, how long the page was, longer video transcripts, and the text read from a screenshot shared on its own (sections 3.2 and 15).
• Crisis messages. A message about suicide, self-harm or someone in danger gets fixed words with crisis lines, never AI, and is never kept, even with "Help improve Stitch" on (sections 3.2 and 3.3).
• Usage-limit counters. Reading your saves and Stitch's answers are counted separately, and a Plus subscription's counts for the month are kept for 40 days (sections 3.4 and 8).
• Google only runs our email (sections 3.3, 6, 8 and 9.2).

Earlier versions are available by email.