Effective 11 September 2026
The short version
Your data is yours. We built All The Ducks to help you run your craft business, not to learn about you or make money from your information.
•
We do not track you. There is no analytics, no advertising, no behavioural profiling and no location tracking. The one exception is anonymous crash reporting — if something breaks, a bare technical error report (no personal data, nothing about what you were doing) may be sent to our bug-tracking tool. See "We do not track you" below.
•
Everything you enter — your workspaces, suppliers, items, projects, images and notes — belongs to you. We do not use it, sell it, rent it, share it or hand it to anyone for marketing or any other purpose.
•
The only personal detail we hold is the email address you sign up with, and it is used purely to sign you in and keep your account secure.
•
You can view, edit, export or delete your information at any time, and you can permanently delete everything from inside the app.
Who this policy is from
This app ("All The Ducks: Craft Control", or "All The Ducks") is published by Suzannah, trading as All The Ducks, based in Australia.
If anything in this policy is unclear, or you want a copy of your data or want it removed, contact us through "Feedback & Suggestions" in the app Menu, or via stitcherystuff.com.au.
Effective date: 11 September 2026.
What we collect
We only hold what the app genuinely needs to work.
Account details:
•
Your email address — used solely to log you in, keep your account secure, send you a verification or password-reset message if you ask for one, and let you recover access. It is never used for marketing.
•
Your password — this is handled by our authentication provider and stored only in a securely hashed form. We cannot see it, and neither can anyone else.
Your business content — everything you type or upload into the app:
•
Workspaces, crafts and specialties, suppliers and their contact details, categories, items and stock levels, pricing, projects, build sheets, orders, shopping lists, allocations, inventory, clients, and any images, PDFs or documents you add to the Library.
This content is entered by you, about your business. Where you choose to store other people's details (for example a client's name, email, phone or address in the Clients section), you are responsible for having their permission to do so — we only store it on your behalf and never use it ourselves.
On-device settings:
•
Small preferences such as your chosen theme colours, list layout and sort order, which workspace is currently open, and whether you've seen the first-run tour. These stay on your device and are never sent to us as personal information.
We do not track you
All The Ducks contains no analytics or tracking technology. Specifically, there is:
•
No usage analytics or event tracking (we do not record which screens you open or what you tap).
•
No advertising, ad networks or ad identifiers.
•
No behavioural profiling or automated decision-making about you.
•
No device fingerprinting.
•
No third-party trackers, pixels or social-media plugins.
•
No tracking cookies. The app only uses local storage on your own device to remember your settings.
We do not build a profile of you, and we do not try to identify you beyond the account you signed up with.
The one exception, disclosed here rather than hidden: if the app hits an unexpected error, a bare crash report (the error message, which screen/file it came from, and the device/browser type) may be sent automatically to Sentry, a third-party crash-reporting tool, purely so we can find and fix the bug. It is configured to exclude personal data and never records your usage, your business content, or what you were doing when it happened — it only ever fires when something has actually gone wrong. This is bug-fixing, not analytics: nothing is collected about how you use the app when it's working normally.
How your information is used
Your information is used only to provide the app to you:
•
To let you sign in and keep your account secure.
•
To store your business data so it's there when you come back, and to sync it across your own devices when you're signed in to the same account.
•
To calculate the things the app is for — costs, profit, "how many can I make", reorder alerts and so on — on your own data.
•
To respond to you if you contact us for support.
That's the entire list. We do not use your information for advertising, marketing, resale, analytics, training, or any purpose you haven't asked for.
Who your information is shared with
We do not sell, rent, trade or share your personal information or your business content with third parties for marketing or any other purpose.
The only parties involved in running the app are:
•
Our hosting and database provider (Supabase). Your account and your business data are stored on secure cloud infrastructure they operate. They act only as our service provider — they store and process the data on our instructions and are not permitted to use it for their own purposes. Data is currently hosted in a Supabase region and protected by their platform security.
•
A free public currency-exchange-rate service (open.er-api.com), contacted only to look up conversion rates when you use multiple currencies. It is sent nothing about you — only a three-letter currency code (for example "AUD"). No personal or business data ever leaves the app to this service.
•
Square, if you subscribe. Square handles checkout and billing directly — your card details are entered on Square's own secure page and never pass through or get stored by All The Ducks. Square receives your email address and payment details to process your subscription; All The Ducks only ever sees your subscription status (active, trialing, cancelled).
•
Apple, if you subscribe in the iPhone/iPad app. Apple handles the purchase with your Apple ID; All The Ducks receives only the subscription's status, renewal date and an Apple purchase reference so your account stays unlocked. We never see your Apple ID details or payment card.
•
Sentry, our crash-reporting tool (see "We do not track you"). Only receives a bare technical error report when something breaks — never your business content or usage activity.
We may disclose information only if we are legally required to by a valid law, court order or government request, or where it's necessary to protect someone's safety or our legal rights. If that ever happened we would limit disclosure to the minimum required.
Storage and security
•
Your data is transmitted over encrypted connections (HTTPS) between the app and our hosting provider.
•
Access to the stored data is restricted to your own signed-in account.
•
Passwords are stored only as secure hashes and are never visible to us.
•
Images and documents you upload are stored in private storage tied to your workspace.
No system can be guaranteed perfectly secure, but we keep the app deliberately simple and collect as little as possible specifically to reduce risk.
How long we keep it
•
Your business content is kept for as long as your account is active, so it's available whenever you log in.
•
If you delete an item, project, workspace or your whole account, that content is removed from our database.
•
"Delete My Account" (in the Menu) permanently erases every workspace, supplier, item, project, order, image and other record you own, cancels any subscription and removes your login. Only an anonymous count of deleted accounts is kept — no name, email or other detail.
•
After an account deletion, a minimal login record (your email) may remain with our authentication provider until it is purged. You can contact us to have that removed as well.
•
On-device settings are cleared when you uninstall the app or clear its data.
Your choices and rights
•
Access and correct — you can view and edit any information about your business directly in the app at any time.
•
Export — you can produce PDF/printable copies of your data (catalogues, guides, lists) from within the app, and you can request a copy of your account data from us.
•
Delete — you can delete individual records, whole workspaces, or your entire account and its contents yourself, at any time, from the Menu.
•
Withdraw — you can stop using the app and delete your account whenever you like.
Depending on where you live, you may also have rights under laws such as the Australian Privacy Act, the GDPR or similar. We will honour those requests — contact us and we'll help.
Children's privacy
All The Ducks is a tool for running a craft business or hobby and is not directed at children. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we'll remove it.
Changes to this policy
If we change this policy we'll update the effective date shown above, and for any significant change we'll make it visible in the app. Continuing to use All The Ducks after a change means you accept the updated policy. The current version is always available here in the app, offline.