Privacy Policy

This Privacy Policy describes how RockWorks LLC ("we," "us," or "our") collects, uses, and shares information in connection with Threadstone (the "Service"), including our mobile applications, websites, and related features. By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide to us.

When you create an account or use the Service, we collect your email address (for sign-in) and, optionally, a display name or username, profile photo or avatar, ZIP code, and any bio or profile details you choose to add. As you use the Service, we collect content you submit, including store visits, reviews and ratings, photos, saved stores and wishlist items, store recommendations, follows, and any other content you contribute.

Information collected automatically.

When you access the Service, we automatically collect certain device and usage information, including device type, operating system and version, app version, browser type, IP address, approximate location derived from IP, language and region settings, time zone, crash logs, performance data, and information about how you interact with the Service (pages or screens viewed, features used, session timing).

Location information.

If you grant location permission on your device, we collect approximate device location in order to display stores near you and calculate distances. You can revoke this permission at any time in your device settings; the Service continues to work without it, with reduced functionality for location-based features.

ZIP code geocoding.

If you enter a ZIP code in your profile or in search, we may convert it to approximate latitude and longitude using a third-party geocoding service (Google) to enable nearby-stitcher and nearby-store features.

Information we do not collect.

We do not collect government-issued identification numbers or payment card numbers. Any payments processed through the App Store or other payment processors are handled by those providers under their respective privacy policies; we receive only limited transaction information necessary to provide the Service.

2. How We Use Your Information

We use the information we collect to:

• operate, maintain, secure, and improve the Service;
• create and manage your account and authenticate your sign-in;
• display the content you submit (reviews, store visits, recommendations, photos) to other users where you have chosen to make it visible;
• calculate distances and show nearby stores and fellow stitchers;
• send transactional communications about your account, submissions, and the Service;
• send updates or promotional communications where you have consented (you can opt out at any time);
• detect, investigate, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Use;
• generate de-identified or aggregated analytics that do not identify you personally;
• comply with applicable laws, regulations, legal process, and enforceable governmental requests.

Legal bases (EU, UK, and similar laws). Where required, our legal bases for processing personal information are: performance of our agreement with you (to provide the Service); your consent (for optional features such as marketing emails or precise location); our legitimate interests in operating, securing, and improving the Service; and compliance with legal obligations.

3. How We Share Information

We do not sell your personal information, and we do not share your personal information with third parties for their own advertising or marketing purposes.

We share information in the following limited circumstances:

Service providers.

We share information with vendors who help us operate the Service, including backend and hosting infrastructure (Base44), authentication and storage providers, analytics and crash- reporting providers, email delivery providers, and geocoding and mapping providers (OpenStreetMap / Nominatim). These providers are contractually limited to using your information to provide services to us.

Other users.

Profile information you choose to make public (such as display name, avatar, ZIP code if you have not hidden it, and your reviews, visits, photos, and recommendations) is visible to other users of the Service. You can hide profile details in your account settings.

Legal and safety.

We may disclose information when we reasonably believe disclosure is required by law, subpoena, court order, or other legal process; to respond to claims or legal liability; to enforce our Terms of Use; to protect the rights, property, or safety of RockWorks LLC, our users, or others; or to investigate fraud or security issues.

Business transfers and corporate changes.

If RockWorks LLC or the Threadstone business is involved in a merger, acquisition, financing, reorganization, restructuring, asset sale, bankruptcy, or transfer of the Service to a different legal entity (including transfer to another entity owned or controlled by the same person or persons), your information may be transferred or disclosed as part of that transaction or as a business asset. We will post notice of any change in ownership or control of the Service on this page.

With your consent.

We may share information in other ways with your consent or at your direction.

4. Cookies, Tracking, and Analytics

We use cookies, local storage, and similar technologies to keep you signed in, remember your preferences, understand how the Service is used, and improve performance and reliability. You can control cookies through your browser or device settings; disabling them may affect functionality of the Service.

We honor Global Privacy Control (GPC) signals where required by law as a request to opt out of any sale or sharing of personal information. We do not currently respond to other "Do Not Track" browser signals because there is no common industry standard for how they should be interpreted.

5. Data Retention and Account Deletion

We retain your personal information for as long as your account is active or as needed to provide the Service. You may permanently delete your account and all associated data directly within the app — go to your Profile page, scroll to the bottom of the header section, and tap Delete Account. Deletion will permanently remove your profile, visits, reviews, favorites, wishlist, and uploaded photos. Store listings you submitted will remain on Threadstone but will no longer be associated with your account. Account deletion is processed immediately and cannot be undone.

After deletion, we may retain limited information as required for legal compliance, tax and accounting purposes, fraud prevention, dispute resolution, or to enforce our agreements. Backup copies are purged on our normal backup rotation, typically within thirty (30) days.

6. Security

We take reasonable administrative, technical, and physical measures designed to protect your information from unauthorized access, use, alteration, or disclosure, including encryption in transit and restricted access to production systems. No method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and for all activity that occurs under your account.

7. Children's Privacy

The Service is not directed to children under 13 (or under 16 in the European Economic Area and the United Kingdom), and we do not knowingly collect personal information from such children. If you believe we may have collected personal information from a child under the applicable age, please contact us at the email below and we will delete it promptly.

8. Your Privacy Rights

Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete your information; restrict or object to certain processing; receive a copy of your information in a portable format; and withdraw consent where processing is based on consent. We will not discriminate against you for exercising these rights.

California residents.

Under the California Consumer Privacy Act (CCPA), as amended by the CPRA, California residents have the right to know what personal information we collect and how we use it, the right to delete personal information, the right to correct inaccurate information, the right to opt out of any sale or sharing of personal information for cross-context behavioral advertising (we do not sell or share personal information for these purposes), the right to limit the use of sensitive personal information, and the right to designate an authorized agent to make requests on your behalf.

Residents of other U.S. states.

Residents of Colorado, Connecticut, Virginia, Texas, Utah, Oregon, Montana, and other states with comprehensive privacy laws have similar rights under those laws, including rights of access, correction, deletion, portability, and opt-out of targeted advertising and sale of personal information.

EU, UK, and Swiss residents.

Residents of the European Economic Area, United Kingdom, and Switzerland have rights under the GDPR, UK GDPR, and Swiss FADP, including the right to lodge a complaint with a supervisory authority in your country of residence.

You can update your profile at any time from your Profile page, and you can permanently delete your account and associated data using the Delete Accountoption on your Profile page. For any other data requests, contact us at [email protected]. We may need to verify your identity before processing certain requests, and we may decline requests in the limited circumstances permitted by law.

9. International Data Transfers

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Service, you consent to such transfer and processing.

10. Third-Party Links and Services

The Service may contain links to third-party websites, services, or content that we do not own or control. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party service before providing them with your information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy on this page with a new "Last updated" date and, for significant changes, by other reasonable means such as in-app notice or email. Your continued use of the Service after the effective date of an updated policy constitutes acceptance of the changes.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise any of your rights, contact us at:

RockWorks LLC
Email: [email protected]