Privacy policy

Information we handle

Account information

To sign you in, we process your name, email address, account identifier, verification status, and authentication records through Aerovisus Accounts. If you choose Google sign-in, Google provides the basic profile and email information needed to identify your account. We do not request access to Gmail, Drive, contacts, or calendars.

Membership information

We process your account identifier, membership plan and status, renewal period, and Stripe customer or subscription identifiers to decide whether Studio access is active. Stripe collects payment details directly under its own terms. My Sewing Assistant does not receive or store your full card number.

Your sewing workspace

Projects, editable patterns, pattern notes, fabric records, bookmarks, measurements, and sewing-help history are saved on your device and automatically synced to your signed-in account for use across your devices. Workspace records and attached reference files are stored in the separate aero-shared Supabase project. MYSA keeps a local copy for offline use; changes made offline sync when the service is available again. Files you select for pattern assembly remain in the browser session unless you deliberately export or share a result.

Optional OpenAI conversational help

Cloud chat is off by default and available only when you turn it on in Ask Mysa. When enabled, MYSA sends your current question, up to four recent sewing exchanges selected by matching topic wording or direct follow-up (safety/action exchanges are excluded), and only saved sewing records explicitly matched to that question to OpenAI to generate a reply. It does not send your full workspace, attachments, account identifier, or sign-in credentials. Workspace actions and MYSA's primary deterministic sewing-safety rules run on your device; a Worker-side policy filter also discards a narrow set of risky cloud replies. Turning the option off prevents later questions from using this OpenAI path. Workspace sync is a separate MYSA feature and does not send workspace information to OpenAI.

OpenAI processes the submitted text to provide the response. API data is not used to train OpenAI models by default. Responses are requested with application-state storage disabled, but OpenAI may retain API content for up to 30 days for abuse monitoring, unless longer retention is required by law or reasonably necessary to protect OpenAI, its services, or a third party from harm. See OpenAI's API data controls.

Service and security information

Our hosting and security providers may process request information such as IP address, timestamps, browser or device type, and error details to deliver the service, prevent abuse, and investigate failures. We do not use advertising SDKs or sell personal information.

How information is used

Information is used to create and secure accounts, restore sessions, verify membership access, provide support, process account-deletion requests, provide an OpenAI reply only when you enable optional cloud chat, prevent fraud or abuse, and meet legal obligations. It is not used for third-party advertising.

Service providers

We use service providers only as needed to operate Mysa: Supabase for account authentication and workspace storage, Google when you select Google sign-in, Stripe for subscription billing, Cloudflare and our hosting providers for service delivery and security, Migadu for account email delivery, and OpenAI only when you enable cloud chat. These providers process information under their own terms and our service arrangements.

Retention and deletion

Account and membership records are retained while needed to operate your account. Security and transaction records may be retained when reasonably necessary for fraud prevention, accounting, tax, dispute, or other legal obligations. A local workspace copy remains on your device until you remove the app data, clear the browser storage, or uninstall the app. Account-synced workspace records and attachment files are removed when we complete a verified account-deletion request, subject to legal retention requirements.

You can request deletion of your account and associated server-held information through our account-deletion page or from the link provided inside the Android app.

Security

Network requests use encrypted HTTPS connections. Mobile session credentials are kept in platform secure storage when available. No method of storage or transmission is completely risk-free, but we limit access and information handling to what is needed to operate the service.

Children

My Sewing Assistant is not directed to children under 13, and we do not knowingly collect their information.

Contact

Questions, access requests, corrections, or deletion requests can be sent to [email protected].