Legal
Privacy Policy
Last updated: 13 May 2026
Ecru ("we", "our", or "us") is operated as a sole proprietorship registered in Ontario, Canada. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Ecru mobile application ("the App").
By using the App, you agree to the collection and use of information as described in this policy.
1. Information We Collect
Information you provide
- Account information: Your email address and password when you create an account. Passwords are encrypted and never stored in plain text.
- Content you create: Photos of fabric, notions, and patterns you upload; item details you enter (name, type, colour, measurements, quantity, notes); pattern information; project details and status.
Information collected automatically
- Technical data: Device type, operating system version, and app version. Crash reports and error logs when the app encounters a problem (used to identify and fix bugs).
Information processed by third parties on your behalf
- AI photo scanning: When you use the photo scan feature, the photo you select is sent to a third-party AI processing service for analysis. That service returns extracted item details (e.g. fabric type, colour) which are then stored in your account. We do not control that provider's data practices — the current provider's privacy policy applies and is available on request.
- Payment information: Purchases are processed by Apple App Store or Google Play. We do not receive or store your payment card details.
2. How We Use Your Information
We use the information we collect to:
- Provide and maintain the App and your account
- Process and display the content you create
- Send transactional emails (password reset, account confirmation)
- Identify and fix technical problems via crash reports
- Improve the App based on how it is used
We do not use your information for advertising. We do not sell your data to third parties.
3. How We Store Your Information
Your account data, content, and uploaded photos are stored securely using third-party infrastructure providers. Transactional emails are sent via a third-party email delivery service. A list of our current infrastructure providers and links to their privacy policies is available on request by contacting us at the address below.
We take reasonable technical measures to protect your data, but no system is completely secure. We encourage you to use a strong, unique password for your account.
4. Data Retention
- Active accounts: Your data is retained for as long as your account is active.
- Inactive accounts on the Free tier: If your account is on the Free tier — including accounts that have reverted to Free after a paid subscription has expired — and you have not signed in or used the App for 5 consecutive years, the photos and pattern files attached to your items, patterns, and projects may be permanently deleted to manage storage. We may attempt to notify you by email before deletion takes place, but you should not rely on receiving such notice. Your text records (fabric stash entries, pattern metadata, project notes, and notions) are retained indefinitely and remain available whenever you sign back in. This automated cleanup does not apply to active accounts, paid subscribers, or accounts in trial.
- Account deletion: When you delete your account, your personal data and uploaded content will be deleted within 30 days. Some data may be retained for a shorter period in backup systems before being permanently removed.
5. Your Rights
Depending on where you are located, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Export your data in a portable format (where technically feasible)
To exercise any of these rights, contact us at the address below. We will respond within 30 days.
Canadian residents (PIPEDA): You have the right to access and correct personal information we hold about you.
EU/EEA residents (GDPR): You have additional rights including the right to restrict processing and the right to lodge a complaint with your local supervisory authority.
California residents (CCPA): You have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information.
6. Children's Privacy
The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
7. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this policy and, where appropriate, through an in-app notification. Continued use of the App after changes constitutes acceptance of the updated policy.
8. Contact
For privacy-related questions or requests, including a list of our current data processors, contact:
Ecru
Ontario, Canada
privacy@ecruapp.com