CrochetAI Privacy Policy

Effective Date: April 6, 2026
Last Updated: April 7, 2026

Crocheh Solutions Inc. ("Crocheh," "CrochetAI," "we," "us," or "our") operates the CrochetAI app and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information.

This Privacy Policy applies to users in the United States and Canada.

1. What This Policy Covers

This Policy applies to personal information we collect when you create an account, use the Service, contact support, subscribe, receive notifications, or otherwise interact with us.

2. Personal Information We Collect

2.1 Information You Provide

We may collect:

• account details such as name, email address, account identifier, and authentication provider;
• profile details such as display name or nickname;
• prompts, pattern requests, pattern records, refinement history, feedback, corrections, and preferences;
• support communications, attachments, and correspondence; and
• communication preferences and consent choices.

2.2 Information Collected Automatically

We may collect:

• device and app information, such as device type, operating system, app version, language, time zone, push token, and diagnostic identifiers;
• usage and interaction data, such as feature usage, generation counts, session activity, and settings;
• log and security data, such as IP address, request metadata, timestamps, crash data, and fraud or abuse signals;
• subscription and entitlement status received from Apple or Google; and
• advertising-related data for ad-supported tiers, including ad impressions, ad interactions, and device advertising identifiers where permitted.

2.3 Information from Third Parties

We may receive information from:

• authentication providers such as Apple or Google;
• app marketplaces such as Apple App Store and Google Play;
• cloud messaging providers;
• analytics and infrastructure providers; and
• payment or commerce providers if and when commerce features are enabled.

3. How We Use Personal Information

We use personal information to:

• create and manage accounts;
• authenticate users;
• provide the Service and generate requested outputs;
• store, sync, and export patterns, refinement history, and settings;
• validate subscriptions and enforce usage limits;
• display ads on applicable tiers;
• send service-related notices, security alerts, and support responses;
• personalize the Service, such as remembering preferences and improving usability;
• maintain, debug, secure, monitor, and improve the Service;
• detect, prevent, and investigate fraud, abuse, and security incidents;
• comply with legal obligations and enforce our terms; and
• perform internal analytics and product improvement.

4. How AI-Related Processing Works

To provide the Service, we may send prompts and related content to third-party AI providers acting on our behalf for inference only, such as extracting structured parameters from natural-language requests.

We do not train or fine-tune our own AI model because we do not operate one.

We store prompts, pattern records, refinement history, and feedback for purposes such as:

• generating requested patterns and related outputs;
• allowing users to view, revisit, refine, and re-export prior patterns;
• maintaining pattern history and support records; and
• improving our deterministic engine, including stitch math, sizing logic, pattern rules, and related quality controls.

We do not use your prompts or related records for:

• training our own model;
• fine-tuning a third-party model on our behalf; or
• selling or sharing prompt data for another party’s independent purposes.

We do not sell your prompts.

5. Advertising and Analytics

If you use an ad-supported tier, we or our advertising partners may process advertising identifiers, device information, and interaction data to deliver ads, measure ad performance, prevent fraud, and, where permitted, personalize ads.

On iOS, where required, we request permission through App Tracking Transparency before accessing the IDFA for tracking.

You can change device-level tracking and ad-personalization settings through your device settings. You may also avoid in-app ads by subscribing to an ad-free tier if offered.

6. How We Disclose Personal Information

We may disclose personal information:

• to service providers and subprocessors that host, support, secure, analyze, message, or operate the Service;
• to AI, cloud, messaging, analytics, advertising, localization, authentication, and subscription-validation providers acting on our behalf;
• to legal, regulatory, governmental, or law-enforcement authorities where required or permitted by law;
• in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of business assets; and
• with your direction or consent.

We do not sell personal information for money.

If our use of advertising or analytics technologies constitutes "sharing" for cross-context behavioral advertising under California law, California users may exercise applicable opt-out rights as described below.

7. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, unless a longer period is required or permitted by law.

Retention periods may vary based on the type of data, the sensitivity of the information, operational needs, legal requirements, security needs, and dispute-resolution needs.

When you delete your account, we will delete or de-identify your personal information within a reasonable period, except where retention is required or permitted for legal compliance, security, fraud prevention, tax, accounting, audit, chargeback handling, recordkeeping, or dispute resolution.

8. Your Choices and Rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to withdraw consent or opt out of certain uses.

You may also be able to:

• update profile information in the app;
• delete your account in the app;
• manage push notifications through device settings;
• manage marketing preferences through unsubscribe links or account settings; and
• manage tracking permissions through device settings.

8.1 California Privacy Rights

If you are a California resident, you may have rights under California privacy law, including rights to know, access, delete, correct, opt out of sale or sharing, and limit certain sensitive personal information uses where applicable.

To submit a privacy request, contact us at privacy@crocheh.com with the subject line "California Privacy Request." We may need to verify your identity before processing your request.

You may also designate an authorized agent where permitted by law.

8.2 Canadian Privacy Rights

If you are in Canada, you may request access to personal information we hold about you, ask us to correct inaccuracies, and withdraw consent to certain uses, subject to legal or contractual restrictions.

You may also contact our Privacy Officer using the contact details below to ask questions or raise a complaint.

9. Children and Age-Related Privacy

The Service is not directed to children under 13 in the United States.

We do not knowingly collect personal information from children under 13 in the United States in a manner that violates applicable law.

If we learn that we collected personal information from a child in a manner that violates applicable law, we will delete that information.

For users in Canada, including Québec, age-of-consent and parental-consent rules may differ by jurisdiction. Where applicable law requires parental or guardian consent, the Service may only be used with such consent.

10. International and Cross-Border Transfers

Personal information may be processed in Canada, the United States, or other jurisdictions where we or our service providers operate.

When information is processed outside your home jurisdiction, it may be subject to the laws of that jurisdiction and accessible to courts, law enforcement, or regulators there.

11. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including measures such as encryption in transit, access controls, authentication protections, logging, and security review processes.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

12. Breach Notifications

Where required by law, we will notify affected individuals and regulators of reportable privacy or security breaches.

13. Marketing Communications

We may send service-related messages without separate marketing consent where permitted by law.

We will send promotional or marketing communications only in accordance with applicable law, including consent and unsubscribe requirements where required.

14. Language

Where required by applicable law, including for users in Québec, this Privacy Policy may be made available in French. In the event mandatory local law gives you language rights that cannot be waived, those rights will apply.

15. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide notice by appropriate means and update the Last Updated date.

Unless a shorter period is required for legal, security, fraud-prevention, or platform-compliance reasons, material changes will become effective no earlier than 30 days after notice.

16. Contact Us

Crocheh Solutions Inc.
Privacy Officer
Email: privacy@crocheh.com

If you are in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.