Privacy Policy

Effective June 19, 2026 · Last updated November 5, 2026

This Privacy Policy explains how Catalyst Code LLC ("Catalyst Code," "we," "us," or "our") handles information in connection with the Thread Nest mobile application (the "App") on Apple iOS and Google Android. The App is available in the United States, Canada, India, the European Union and European Economic Area (EU/EEA), the United Kingdom, and Switzerland.

We built Thread Nest to be privacy-respecting by design. Thread Nest has no server of its own and no user accounts. Your thread inventory, projects, patterns, and shopping lists are stored locally on your device. We do not operate a backend database that holds your content, and we cannot see your inventory.

If you have any questions, contact us at contact@catalyst-code.com.

1. Summary

• We do not collect your name, email address, or account login. Thread Nest has no sign-up.
• Your app data (threads, projects, patterns, lists, photos) lives on your device.
• Optional backups are written to your own Google Drive (Android) or iCloud Drive (iOS). We never receive or store them.
• We collect pseudonymous usage and crash data through Google Firebase, tied to a random app-installation identifier rather than to you, to understand how features are used and to fix bugs. You can turn this off in Settings. In the EU/EEA, the United Kingdom, and Switzerland it is off until you turn it on.
• Photos and the camera are used only on your device for pattern scanning, color matching, and Photo to Pattern. Images are never uploaded to us or to any third party.
• We do not show ads, we do not collect your device's advertising identifier, and we do not track you across other companies' apps or websites.
• We do not sell or share your personal information.

2. Information We Collect

2.1 Information stored only on your device (we never receive it)

• Thread inventory, projects, patterns, shopping lists, notes, and tags you create.
• Photos you select or capture for color matching, pattern scanning, Photo to Pattern, and project progress.
• Spreadsheets you choose to import. They are read on your device and are not uploaded.
• App settings and preferences.
• On Android, if you sign in to Google for backups, the email address of that Google account is shown in the App so you know which account is in use. It stays on your device and is not sent to us.

This data stays on your device unless you choose to back it up to your own cloud storage (see Section 4).

2.2 Usage and crash data (Firebase)

We use Google Firebase Analytics and Firebase Crashlytics. When enabled, they collect:

• Which features are used and how often (for example, adding a thread, completing a project, or viewing the upgrade screen), including which Premium plan was purchased (no payment details).
• App version, device model, operating system version, and crash and diagnostic details.
• A random app-installation identifier generated by Firebase. It resets if you reinstall the App and is not linked to your name, email, or any account.
• When you start the free Premium preview, a one-way hashed device identifier. It is derived on your device from a device-specific value (on Android, the system's app-scoped device ID; on iOS, a random ID the App stores in your Keychain), cannot be reversed into that value, and is not linked to your name, email, or any account. It is used only to count preview starts and to prevent repeated free previews on the same device, and it may stay the same if you reinstall the App.
• An approximate location (country, region, or city), which Google derives from your IP address. Firebase Analytics does not store your IP address, and the App never accesses your device's location.

We do not set a user identifier, Google Signals and ad personalization are disabled, and the App does not collect your device's advertising identifier. We use this data only in aggregate and do not try to identify you.

You can turn off both analytics and crash reporting at any time with the Share Usage Data switch in the App's Settings.

2.3 Purchase information

If you subscribe to Thread Nest Premium, the transaction is processed entirely by Apple (App Store) or Google (Google Play). The App receives only your purchase and subscription status so it can unlock Premium features. We do not receive or store your payment card, billing details, or store account identity.

2.4 Camera and photos

Thread Nest can use your camera or photo library for color matching, pattern (text) scanning, and Photo to Pattern. All image processing happens on your device (for example, Apple Vision and Google ML Kit on-device text recognition). Images are never sent to us or to any external server.

2.5 Shopping links

The shopping list can open searches on Amazon and Michaels in your browser. When you tap one, you leave the App and that site's own privacy policy applies, including any cookies it sets. The App does not tell those sites anything except the search terms in the link.

3. How We Use Information

We use the limited information described above to:

• Provide and operate the App's features.
• Understand which features are used so we can improve the App.
• Diagnose and fix crashes and bugs.
• Unlock and restore your Premium subscription.

We do not use your data for advertising, and we do not sell or rent it.

4. Backups to Your Own Cloud

Thread Nest lets you back up and restore your data using:

• Google Drive (Android). You sign in with your own Google account. The App can only use a private, hidden app-data folder in your Drive that it creates for its backups. It cannot see or change your other Drive files.
• iCloud Drive (iOS). Backups are saved to the App's own folder in your iCloud Drive. No separate sign-in is needed.

These backups are stored in your cloud account and are governed by Google's or Apple's terms and privacy policies. Catalyst Code never receives, accesses, or stores these backups.

5. Third-Party Services

Thread Nest relies on the following third parties. Their handling of data is governed by their own privacy policies:

• Google Firebase (Analytics, Crashlytics & Remote Config): firebase.google.com/support/privacy. The App downloads Premium preview settings from Firebase Remote Config, even when Share Usage Data is off. This download sends no usage data; like any internet request, Google receives your IP address and a Firebase installation identifier to deliver it.
• Google Play Billing (Android purchases): policies.google.com/privacy
• Apple App Store / StoreKit (iOS purchases): apple.com/legal/privacy
• Google Sign-In and Google Drive API (optional backup, Android): policies.google.com/privacy
• Apple iCloud Drive (optional backup, iOS): apple.com/legal/privacy
• Google Analytics (Website, only with your consent): policies.google.com/privacy
• Amazon (shopping links): amazon.com/privacy
• Michaels (shopping links): michaels.com/privacy-policy

6. Data Retention

• On-device data: kept until you delete it in the App or uninstall the App.
• Cloud backups: kept in your own Google Drive or iCloud Drive until you delete them.
• Analytics data: retained by Google Firebase for up to 14 months, then automatically deleted.
• Website analytics: retained by Google Analytics for up to 14 months.
• Crash reports: retained by Firebase Crashlytics for up to 90 days.

7. Your Privacy Rights

Because Thread Nest stores your content on your device and collects only pseudonymous usage data, you are in direct control of your data.

• Access / portability: your data is on your device and can be copied with the backup feature.
• Deletion / erasure: delete items within the App, or uninstall the App to remove all local data. Deleting your cloud backup removes the backup copy. Uninstalling also resets the Firebase installation identifier, so past usage data can no longer be associated with your device. The hashed Premium preview identifier described in Section 2.2 is not reset by uninstalling.
• Stop analytics: turn off Share Usage Data in Settings at any time.

Canada (PIPEDA and provincial laws)

By using the App with Share Usage Data turned on, you consent to the collection of the usage and crash data described in Section 2.2. You may withdraw that consent at any time by turning off Share Usage Data in Settings. You have the right to access and correct personal information we hold about you. Because we hold no data on servers of our own and do not link Firebase data to you, requests relating to your content are fulfilled on-device as described above. Firebase data is processed by Google in the United States and may be accessible to authorities there under U.S. law. Our privacy officer can be reached at contact@catalyst-code.com. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

European Economic Area, United Kingdom, and Switzerland (GDPR, UK GDPR, Swiss FADP)

For the App, Catalyst Code LLC (contact details in Section 12) is the controller of the limited personal data described in Section 2.2 and 2.3. Your content (threads, projects, patterns, photos) stays on your device and is not processed by us.

• Legal bases: usage and crash data through Firebase are processed only with your consent (Share Usage Data is off by default in these regions; you turn it on in Settings and can turn it off at any time without affecting anything else). Subscription status is processed to provide Premium under the contract with you.
• Your rights: access, correction, erasure, restriction, portability, and objection, plus the right to withdraw consent at any time. Because Firebase data is tied to a random installation identifier rather than to you, we may need you to help us identify it; uninstalling the App resets that identifier. Contact contact@catalyst-code.com to exercise a right.
• International transfers: Firebase data is processed by Google, including in the United States. Google relies on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) and standard contractual clauses for these transfers.
• Retention: as set out in Section 6.
• Complaints: you may lodge a complaint with your local data protection authority, for example the supervisory authority in the EU/EEA country where you live, the UK Information Commissioner's Office, or the Swiss Federal Data Protection and Information Commissioner.

India (Digital Personal Data Protection Act, 2023)

We process the limited usage and crash data described in Section 2.2 based on your consent, which you give by leaving Share Usage Data turned on and can withdraw at any time by turning it off in Settings. You may request access to, correction of, or erasure of personal data we hold about you, and you may nominate another person to exercise these rights in the event of your death or incapacity, by writing to contact@catalyst-code.com. We will respond within 45 days. Because the data is tied to a random installation identifier, we may ask you to help us identify it. If you are not satisfied with our response, you may complain to the Data Protection Board of India once it is operating. Firebase data is processed by Google outside India.

California (CCPA/CPRA)

We do not sell or share personal information (including for cross-context behavioral advertising), and we do not collect personal information that identifies you. California residents may contact contact@catalyst-code.com with any privacy request, and we will not discriminate against you for making one.

8. Children's Privacy

Thread Nest is a general-audience app and is not directed to children: not under 13 in the United States, Canada, and the United Kingdom, not under 16 in the EU/EEA and Switzerland (or the lower age your country sets, no lower than 13), and not under 18 in India. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact contact@catalyst-code.com and we will address it.

9. Security

Your content is stored locally in the operating system's app sandbox. Usage and crash data are sent to Google over encrypted connections. No method of storage or transmission is 100% secure, but we minimize risk by not collecting personal data and by keeping your content on your device.

10. Website Analytics

This section applies to visitors of threadnest.catalyst-code.com (the "Website"), not to the App.

If you press Accept on the cookie banner, we use Google Analytics 4 to count visits and to count taps on the App Store and Google Play download buttons. Google Analytics sets cookies (_ga and _ga_*) in your browser and receives your IP address, browser and device type, the pages you view, and an approximate location derived from your IP address. Google Signals and ad personalization are turned off, and we do not set a user identifier.

If you press Decline, or make no choice, Google Analytics is not loaded and no analytics cookies are set. You can change your choice at any time with Cookie settings in the footer of any page; declining also removes the analytics cookies. Your choice is stored in your browser's local storage.

Website analytics data is retained by Google for up to 14 months. See how Google uses data from sites that use its services.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, notify you within the App. If a change affects how we use data in a way you have not already agreed to, we will ask for your consent again where the law requires it.

12. Contact Us

Catalyst Code LLC
260 E Main St Ste 6928
Rochester, NY 14604-2100
United States
Email: contact@catalyst-code.com