Privacy Policy

Effective Date: November 8, 2026

Floating Point Applications ("Company", "we", "our", or "us"), a business organized under the laws of the Commonwealth of Pennsylvania, is committed to protecting your privacy and safeguarding your personal information. This Privacy Policy explains how we collect, use, store, disclose, and protect your information when you use our mobile applications, including Fold, Stashly, and Blip Bluetooth Finder Tracker, and any future applications we may release (collectively, the "Apps"), as well as our website located at floatingpointapps.com (the "Site").

Please read this Privacy Policy carefully. By downloading, installing, accessing, or using any of our Apps or visiting our Site, you acknowledge that you have read and understood this Privacy Policy. This Privacy Policy should be read in conjunction with our Terms of Service.

1. Information We Collect

We categorize the information associated with our Apps into information stored locally on your device, cloud data (Stashly, which requires an account), and information we may collect with your consent. The table below provides a detailed breakdown:

1.1 Information Stored Locally (Not Collected by Us)

Data you create in Fold and Blip is stored only on your device. It is never transmitted to our servers, and we have no ability to access, view, or retrieve it. (Stashly is different: it syncs your catalog to the cloud, as described in Section 1.2.) This includes:

• Fold: Bet logs, odds entries, bankroll history, and all tracking data you enter.
• Blip: Bluetooth device scan results, signal strength measurements, proximity data, saved device preferences, and AirTag logs. Scan data exists in active memory during use; saved devices and logs are stored in a local database on your device. Locations Blip saves (your safe zones, and where a tracker was detected) also stay on your device.

1.2 Stashly Accounts, Cloud Sync, Purchases & AI

Stashly requires an account to use, and synchronizes your catalog to the cloud on every plan. Both are powered by Google Firebase services:

• Authentication Data: When you create a Stashly account, your email address is collected via Firebase Authentication to secure your account, authenticate your login sessions, and support password resets. If you sign in with Apple or Google, we receive the email address they share with us (with Apple this can be a private relay address) and, if you allow it, your name.
• Cloud Catalog Sync: Pattern names, fabric inventory details, notion records, project tracking entries, measurements, notes, tags, and categories are synced to Google Firebase Firestore so you can access your sewing catalog across multiple devices.
• Photos: Images you take or attach to pattern, fabric, notion, or project entries are stored on your device and uploaded to Google Firebase Cloud Storage, in a user-specific path readable only by your authenticated account, so they are backed up and available on your other devices. Photos are compressed before upload and are encrypted in transit and at rest.
• Purchases: Plans are bought through Apple or Google, who handle the payment; we never see your card details. The App sends us the store's record of your purchase so our server can confirm it with Apple or Google and link it to your account.
• AI Features: AI scans and the Atelier send the photos you choose (and, for the Atelier, the pattern's details) to Google's Gemini models through Google Cloud's Vertex AI. See Section 10.6.

1.3 Crowdsourced Community Barcode Catalog (global_barcodes)

To enable automatic barcode auto-lookup when adding commercial sewing patterns, Stashly maintains a shared community barcode lookup database (global_barcodes). When a user scans or adds a commercial sewing pattern with a UPC barcode, non-personal commercial pattern specifications (brand name, pattern number, title, garment type, and fabric yardage requirements) are contributed to this shared lookup database so other sewists scanning the same barcode can auto-fill pattern information. If you choose to contribute the pattern envelope's cover photo, it is checked by Google Cloud Vision's SafeSearch and then shared with other users for the same lookup.

1.4 Crash Reports, Analytics & Advertising Data

Depending on the App and your choices, we may collect the following limited information:

• Crash Reports (Fold on Android, Stashly): Off unless you turn them on in the App's Settings. When on, a report with technical details (what went wrong, the app version, your device model and operating system, and a Crashlytics installation identifier) is sent to Google Firebase Crashlytics. Reports never include your bets or your catalog, and are used solely to diagnose and fix technical issues. Fold on iPhone and Blip do not include crash reporting. On iPhone, Apple may share crash logs with us if you allow it in your iPhone's settings.
• Usage Analytics (Fold on Android): Off unless you turn on Crash Reports & Analytics in Fold's Settings. When on, Fold uses Google Analytics for Firebase, which collects app usage events, device and app information, an approximate (city-level) location derived from your IP address, and a pseudonymous app-instance identifier. Fold never collects your device's Advertising ID, and your bets are never included. Fold on iPhone has no analytics.
• Usage Analytics (Blip on Android): Blip's Android app uses Google Analytics for Firebase to understand how the App is used and how our advertising performs. This collects app usage events (such as app opens, session starts, and screen views), device and app information, an approximate (city-level) location derived from your IP address, and your device's Advertising ID, tied to a pseudonymous app-instance identifier rather than your name or email address. Because this data is linked to Google AdMob for revenue reporting, it is pseudonymous rather than fully anonymous. In the EEA, UK and Switzerland, collection is governed by the consent choice you make in the App's consent dialog; elsewhere it operates by default. Blip on iOS does not include Firebase Analytics.
• Advertising Data (Ad-Supported Apps Only): In Apps that display advertisements (e.g., Blip), the Google Mobile Ads SDK (Google AdMob) automatically collects certain information to serve and measure ads. This includes:
  • IP Address: Used to estimate approximate (city-level) location for contextual ad serving, fraud prevention, and security.
  • Ad Interaction Data: Information about your interactions with advertisements, including ad impressions, clicks, and video views.
  • App and Device Information: App version, device model, operating system version, and mobile network information, plus diagnostic and crash information about the ad SDK itself.

  In Ad-Supported Apps, Google AdMob uses your device's Advertising ID (such as Google Advertising ID on Android or IDFA on iOS) to serve personalized advertisements tailored to your interests, unless you decline consent or opt out. We implement the Google User Messaging Platform (UMP) SDK to gather and manage your consent choices. You can learn more about how Google uses data at How Google uses data when you use our partners' sites or apps.

• App Tracking Transparency (iOS): On iOS devices, Blip displays Apple's App Tracking Transparency (ATT) prompt asking whether the App may track your activity across other companies' apps and websites. This choice governs whether Google AdMob can access your device's Advertising Identifier (IDFA) to deliver personalized ads. Declining ATT tracking or personalized ad consent changes nothing about how the App works — Bluetooth scanning, signal strength tracking, saved devices, and the AI assistant remain completely unaffected. You can modify your tracking choice at any time in iOS system settings (Settings › Privacy & Security › Tracking) or in the App via Settings › Ad Privacy.

1.5 Information We Do NOT Collect

For clarity, we want to explicitly state what we do not collect:

• Financial information, payment card details, or banking information (handled directly by Google Play or the Apple App Store)
• Precise location. Blip stores locations only on your device (see Section 1.1); analytics and advertising services may estimate a city-level location from your IP address, as described in Section 1.4
• Contacts, call logs, SMS messages, or calendar data
• Videos or audio recordings
• Advertising IDs or cross-app tracking identifiers for the purpose of interest-based advertising or user profiling in Ad-Free Apps (Fold and Stashly contain zero advertising SDKs)
• Health, fitness, biometric, or genetic data
• Browsing history or search history
• Device identifiers for the purpose of cross-app tracking or behavioral profiling

2. Device Permissions

Certain Apps require specific device permissions to function. We follow the principle of just-in-time permissions — we only request access when a feature requires it, not at app startup. Below is a complete list of permissions our Apps may request:

You may revoke any permission at any time through your device's system settings. Revoking a permission may limit the functionality of the associated feature but will not affect other features of the App.

3. How We Use Your Information

We use information associated with our Apps strictly for the following operational and service purposes:

• Stashly Catalog Services: To store, organize, and sync your sewing patterns, fabrics, notions, and projects across your devices via Google Firebase, and authenticate user accounts via Firebase Authentication.
• Stashly AI Features and Plans: To read the photos you scan, draw Atelier pictures with Google's Gemini models, and confirm your plan with Apple or Google.
• Community Barcode Auto-Lookup: To enable commercial sewing pattern barcode auto-fill via the non-personal global_barcodes database.
• App Improvement & Maintenance: To identify and fix bugs, crashes, and performance issues based on opt-in crash reports.
• Feature Development: To understand which features are most valuable to users and prioritize future development.
• Compatibility: To ensure our Apps function correctly across different device models and operating system versions.
• Security: To detect and address potential security vulnerabilities and protect user account access.
• Advertising (Ad-Supported Apps Only): To display advertisements within Ad-Supported Apps (such as Blip). Advertising data collected by the Google Mobile Ads SDK is processed by Google AdMob to serve, personalize (based on your consent), measure, and improve advertisements.

We do not use any information for:

• Advertising, ad targeting, or ad personalization in Ad-Free Apps (Fold and Stashly). In Ad-Supported Apps (Blip), advertisements are served by Google AdMob and personalized based on your consent as described in Section 14
• User profiling or behavioral tracking across third-party services
• Selling, renting, or trading personal data to third parties
• Marketing communications (we do not send marketing emails, push notifications, or SMS)

4. How We Share Your Information

We do not sell, rent, trade, or otherwise share your personal information with third parties for their own commercial purposes.

We share information only in the following limited and transparent circumstances:

• Cloud Infrastructure & Service Providers: For Stashly, we use Google Firebase and Google Cloud (Firebase Authentication, Firestore, Cloud Storage, Cloud Functions, Vertex AI and Cloud Vision) to run accounts, sync your catalog and photos, verify purchases, provide AI features and check shared cover photos. We use Firebase Crashlytics for crash reports and Google Analytics for Firebase for usage analytics, as described in Section 1.4. These providers process data on our behalf under their data processing terms.
• Community Barcode Catalog (global_barcodes): Non-personal commercial pattern specifications (brand name, pattern number, title, garment type, yardage requirements) contributed when adding a commercial pattern with a barcode are shared in the global lookup database to enable automatic pattern lookups for all users. Pattern envelope cover photos you choose to contribute are shared too, after an automated check. Personal notes, personal photos, fabric stashes, and user identifiers are never included.
• Advertising Partners (Ad-Supported Apps Only): In Ad-Supported Apps (Blip), the Google Mobile Ads SDK transmits certain data (including IP address, device advertising identifier, and ad interaction data) to Google and its ad partners for ad serving, subject to your consent choices. See Google's Privacy Policy.
• Legal Requirements: We may disclose information if required to do so by law, court order, subpoena, or legal process, or if we believe in good faith that disclosure is necessary to comply with applicable law, protect our rights or property, or ensure public safety.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, any information held may be transferred as part of that transaction with notice provided on our Site.

5. Data Security

We implement comprehensive administrative and technical safeguards to protect your information:

• Local-First Architecture: Storing data locally on your device for Fold and Blip minimizes exposure to remote server breaches.
• Encryption in Transit: All data transmitted between our Apps and backend infrastructure (including Stashly Firebase sync and crash reports) is encrypted using Transport Layer Security (TLS 1.2 or higher).
• Cloud Data Security & Rules: Stashly cloud data stored in Firebase Firestore and Cloud Storage is encrypted at rest by Google Cloud infrastructure. Firebase Security Rules enforce strict access controls ensuring that only authenticated account owners can read or write their personal catalog data.
• Secure Development Practices: We follow secure coding practices, code obfuscation, dependency management, and periodic security reviews.
• Minimal Data Collection: Our core strategy is data minimization — collecting only what is strictly necessary for functionality.

While we maintain high security standards, no method of electronic transmission or storage is 100% secure. We encourage users to maintain secure device passcodes and account credentials.

6. Data Retention

• Locally Stored Data: Data stored on your device persists until you delete it manually within the App, clear App storage via device settings, or uninstall the App.
• Stashly Cloud Catalog Data: Cloud catalog records and user account data in Firebase Firestore are retained as long as your account remains active. Upon account deletion, all personal catalog data under users/{uid} and authentication records are permanently deleted within 30 days.
• Community Barcode Data (global_barcodes): Entries in the crowdsourced community barcode catalog consist exclusively of non-personal, public commercial pattern specifications (brand, pattern number, title, garment type, yardage) and contain zero personal identifiers, user IDs, or usernames. These community reference records remain in the shared database to support barcode scanning auto-lookup for all users even if an individual user deletes their personal account.
• Stashly AI Data: Photos you scan are deleted as soon as they have been read. Atelier pictures stay in your private cloud storage until you delete them or your account.
• Crash Reports & Analytics: Crash and usage data is retained by service providers for a maximum of 24 months, after which it is automatically purged.

7. Data & Account Deletion

Because our Apps prioritize user autonomy and local-first design, you maintain direct control over your data at all times:

7.1 Stashly In-App Account Deletion (Settings → Delete Account)

Stashly provides a direct, self-service account and data deletion mechanism within the App:

1. Open Stashly and navigate to Settings.
2. Tap Delete Account.
3. Confirm account deletion when prompted.

Executing Delete Account immediately and permanently deletes:

• Your local Room database cache and stored settings on your device;
• All Firestore cloud data associated with your user ID (including patterns, fabrics, projects, notions, tags, and profile);
• Your photos and AI-generated pictures in Firebase Cloud Storage, and your AI scan and Atelier records;
• Your Firebase Authentication account.

7.2 Stashly Email Deletion Request (Fallback)

If you cannot access the App or wish to request manual deletion, you may email support@floatingpointapps.com with the subject line "Stashly Account Deletion Request". Please send your request from the email address registered with your Stashly account. We will permanently erase your account credentials, Firestore cloud records and cloud photos within 30 days and confirm in writing.

7.3 Local Data Deletion (All Apps)

To delete locally stored data for any of our Apps:

• In-App: Delete individual entries, or in Fold use Settings → Reset App to erase all data. Fold keeps no backup, so export your data first if you want a copy. For Stashly, use Delete Account (Section 7.1) to remove your cloud data as well.
• Device Settings (Android): Go to Settings > Apps > [App Name] > Storage > Clear storage. iPhone has no equivalent setting, so delete the App instead.
• Uninstallation: Uninstalling the App permanently removes all locally stored data from your device. For Stashly, your cloud data stays until you delete your account.

8. Children's Privacy

Floating Point Applications is committed to protecting the privacy of children. Our Apps are not directed at children under the age of thirteen (13), and we do not knowingly collect personal information from children under 13 in compliance with the Children's Online Privacy Protection Act (COPPA).

Fold is for adults only: it may be used only by people who are at least 21 years old, or the age of majority where they live, whichever is greater, as set out in our Terms of Service.

If we become aware that we have inadvertently collected personal information from a child under 13, we will take immediate steps to delete such information from our systems. If you believe that a child has provided personal information to us, please contact us immediately at support@floatingpointapps.com.

9. Third-Party Services & SDKs

Our Apps may integrate with third-party infrastructure and service providers as outlined below:

Ad-Free Apps (Fold and Stashly) do not integrate advertising SDKs or ad networks. Across all Apps, we do not integrate social media tracking SDKs, data brokers, or cross-app tracking tools. Review Google's Privacy Policy for information on Google services.

10. Artificial Intelligence

Our Apps include artificial intelligence ("AI") features. Fold and Blip use AI models that run on your device. Stashly's AI features run in Google's cloud (Section 10.6). This section explains how AI is used in our Apps and how it relates to your privacy.

10.1 AI Features by App

10.2 How On-Device AI Works

Fold and Blip use on-device large language models optimized for mobile hardware (Google Gemma 4 E2B on Android devices, and Apple Intelligence on iOS devices). The AI model:

• Runs locally: All AI inference and processing occurs on your device's processor. No internet connection is required for AI features to function.
• Processes data in real-time: The AI reads your locally stored data only when you actively use AI features. It does not continuously monitor or process your data in the background.
• Has tool-calling capabilities: The AI assistant can read from and write to your local app database (such as logging bets in Fold or toggling the Bluetooth scanner in Blip) based on your conversational instructions. All such actions occur exclusively on your device.
• Does not learn from your data: The on-device model does not train, fine-tune, or update itself based on your personal data. The model is static; new model versions are obtained only when you choose to download them or through app updates.

10.3 User Consent and Control

AI features in our Apps are entirely opt-in. In Fold and Blip, you open the AI assistant and accept the in-app AI disclaimer before any AI processing begins, and on Android you first download the AI model. Stashly asks for your agreement before you first use its AI tools. If you choose not to use AI features, no AI processing occurs.

10.4 AI Model Storage

On Android, Fold and Blip download the AI model files directly to your device from a trusted public model repository (currently Hugging Face) only when you choose to enable AI features. The download is a one-way transfer: the model file is fetched to your device, and no personal data, identifiers, or usage information is sent in return. On iPhone, Fold and Blip use Apple Intelligence, which is built into the phone, so no model is downloaded.

10.5 What the AI Does NOT Do

For clarity, the on-device AI in Fold and Blip does not transmit prompts or queries to external servers, share betting or Bluetooth data with third parties, process biometric data, or profile users.

10.6 Stashly's Cloud AI Features

Stashly's AI tools run only when you use them. They are provided by Google's Gemini models through Google Cloud's Vertex AI, which processes these requests for us as a service provider.

• AI scans: When you scan an item, such as a pattern envelope or a fabric swatch, the photo is sent to Gemini to be read, and the details it finds are added to your catalog for you to check. The photo is deleted as soon as it has been read.
• The Atelier: When you create a look, your fabric's photo and the pattern's details (such as garment type and style) are sent to Gemini to draw the garment. The picture it makes is checked by Google Cloud's safety filter and saved in your own private cloud storage, where only your account can see it, until you delete it.

We do not use your photos, catalog or generated pictures to train AI models. Scan and Atelier records, and every generated picture, are deleted with your account.

11. Your Privacy Rights

Depending on your location, you have rights regarding your personal information under applicable data protection laws:

11.1 Rights Under CCPA/CPRA (California Residents)

California residents have the right to request disclosure of collected personal information, request deletion of personal information, opt out of the "sale" or "sharing" of personal information (or targeted advertising in Ad-Supported Apps), and receive non-discriminatory treatment. We honor Global Privacy Control (GPC) opt-out signals.

11.2 Rights Under GDPR (EEA, UK, Switzerland)

Users in the EEA, UK, or Switzerland have rights of access, rectification, erasure, restriction, data portability, and consent withdrawal under the GDPR. Our legal basis for processing opt-in crash/analytics data is consent (Article 6(1)(a) GDPR), and for Stashly's account, cloud sync and AI features it is contract performance (Article 6(1)(b) GDPR). Contact support@floatingpointapps.com to exercise your rights.

11.3 Other U.S. State Privacy Laws

We respect privacy rights under state privacy laws (including VCDPA, CPA, CTDPA, TDPSA, OCPA, MTCDPA) allowing users to access, delete, or opt out of targeted advertising in Ad-Supported Apps.

12. Do Not Track & Global Privacy Control (GPC)

We recognize and honor Global Privacy Control (GPC) signals. When detected, GPC signals are treated as an opt-out of targeted advertising in Ad-Supported Apps (resulting in non-personalized ads only). Ad-Free Apps (Fold and Stashly) contain no advertising or cross-site tracking tools.

13. International Data Transfers

Floating Point Applications is located in Pennsylvania, United States. Any data transmitted to cloud services (such as Stashly's cloud sync and AI features, usage analytics, or opt-in crash reporting) may be processed in the United States under standard security protocols and encryption.

14. Advertising & Tracking (Ad-Supported Apps Only)

Ad-Free Apps (Fold and Stashly) contain no advertisements or advertising SDKs. In Ad-Supported Apps (Blip), advertisements are served by Google AdMob. On iOS devices, users are presented with Apple's App Tracking Transparency (ATT) prompt asking for permission to track activity across apps for personalized ads. In addition, users are presented with the Google User Messaging Platform (UMP) consent flow. Declining ATT tracking or personalized ad consent results in contextual, non-personalized ads and does not degrade or disable any app features (Bluetooth scanning, device tracking, saved devices, and the AI assistant remain 100% functional). Consent choices can be updated at any time in-app via Settings → Ad Privacy or system-wide in iOS Settings → Privacy & Security › Tracking.

15. Data Breach Notification

In the event of a data breach affecting personal information held on cloud systems, we will notify affected users and regulatory authorities (including the Pennsylvania Attorney General) within 72 hours of verification, consistent with legal requirements.

16. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Material changes will be accompanied by an updated "Effective Date" and prominent notices on our Site or within Apps.

17. Google Play Data Safety Compliance Summary

• Data Collection: Fold collects nothing by default; on Android, crash reports and usage analytics only if you turn them on, plus ML Kit diagnostics. Stashly collects your account email (and name with Apple or Google sign-in), catalog, photos and purchase records, and crash reports if you turn them on. Blip on Android collects advertising data and usage analytics.
• Data Sharing: No selling of data. Stashly shares the commercial pattern details and cover photos you contribute with other users. For Blip (Ad-Supported), ad interaction/device info processed by Google AdMob.
• Data Encryption: All transmitted data is encrypted in transit using TLS 1.2+. Stashly cloud data encrypted at rest in Firebase.
• Data Deletion: In-app self-service deletion in Stashly (Settings → Delete Account) and in Fold (Settings → Reset App), plus a manual email deletion request process.

18. App Disclosures Comparison Summary

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@floatingpointapps.com
• Phone: 1-410-343-7227
• Mailing Address: Floating Point Applications, 310 E South St, York, Pennsylvania 17403