Privacy policy

Last updated 23 September 2026.

Stitchfloor is production software for garment factories. It is sold to a company, and the people using it are that company's staff. This page says what each part of it collects, who else can see it, and how to have it removed.

There is no advertising anywhere in Stitchfloor, and nothing collected here is sold, rented or shared for marketing. That part is not qualified anywhere below.

The Android app contains no analytics or tracking software of any kind. The website uses one piece of third-party software that behaves like it: Google reCAPTCHA, on the sign-in screen only, to check that a sign-in attempt is a person rather than a machine. Google sets a cookie and reads signals from your device to make that judgement. It runs nowhere else in the product, and there is no other such software anywhere in it.

The Android app

The app on Google Play is a self-contained demonstration of the factory-floor screens. It ships with fictional sample records — made up lots, workers, styles and figures — and everything you do in it is written to storage on your own phone and nowhere else. It has no sign-up, contacts no server, and creates no account.

Specifically, the app:

• requires no account, and the demonstration sign-in it shows checks the password on the device;
• sends no records, identifiers, usage statistics or crash reports off the phone;
• contains no advertising, analytics or tracking libraries;
• plays spoken Hindi and English instructions from audio files included in the download, so it needs no network connection and never uses the microphone — the app does not request microphone permission;
• asks for no location, contacts, photos, files or camera access.

Uninstalling the app deletes everything it stored. You can also clear it from the app's own Settings screen at any time.

The Stitchfloor workspace

A customer's own workspace — at an address like yourcompany.stitchfloor.com — is the part real staff sign in to. It holds that company's manufacturing records and does need personal data to work.

What is collected, and why

A mobile number, or an email address, or a Google account

Whichever you sign in with. It identifies your account, and it is how you get back in. Signing in by mobile number sends you a one-time code by SMS.

Your name and your role

Entered by an administrator at your own company when they give you access. Your name appears against the entries you record, so the factory can see who did what.

Which device you used, and when

A short description of the device — for example "Chrome on Android" — with the first and last time it was used. It lets an administrator at your company see that an account is being used, and from how many devices. It is not a location and not a browsing history.

The work you record

Lots, assignments, wages, stock movements, invoices, payments and so on. These are your employer's business records, kept on their behalf.

Who can see it

People your company has given access to that workspace, and nobody else. Each company's workspace is separate: staff at one customer cannot read another customer's records.

Within a workspace, be aware that anyone your company has admitted can read the business records in it, not only the screens their role is arranged around. Roles in Stitchfloor decide what a person may change. If a record should not be visible to all of your staff, do not put it in the workspace.

Who processes it for us

• Google LLC — Firebase Authentication holds sign-in identities, and Firestore stores the records. The one-time codes for mobile sign-in are sent by Google, and reCAPTCHA on the sign-in screen is Google's.
• Vercel Inc. — serves the website. Vercel keeps ordinary server request logs.

Both are used as processors, under their own terms, and neither is given the records for any purpose of their own. There is no other third party.

How long it is kept, and how to remove it

Records are kept for as long as your company uses Stitchfloor, because they are its accounts and production history. An administrator can download the whole workspace at any time from Settings, and can withdraw a person's access at any time. Withdrawing it removes every record and every screen from them; they may still reach a sign-in screen, and will be told they have no access.

To have an account and its personal details deleted, ask an administrator at your company, or write to hello@stitchfloor.com from the address on the account. Deletion requests are actioned within 30 days. Business records belong to the company that entered them, so a request to erase those has to come from the company.

The public demo

demo.stitchfloor.com is open to anyone and its sign-in details are printed on its own front page. It contains fictional data, keeps what you enter in your own browser, and has no account behind it. Do not put real business information into the demo — it is a sample, not a workspace.

Children

Stitchfloor is workplace software. It is not directed at children and we do not knowingly hold data about anyone under 18.

Changes

If this policy changes in a way that affects what is collected, the date at the top changes and customers are told. This page is the current version.

Contact

Stitchfloor — hello@stitchfloor.com