privacy policy_

Cold Harbor Digital (“we”, “our”, “us”) operates the StitchSocial and TreatYourself mobile applications. This Privacy Policy explains how we collect, use, and protect your information when you use our apps.

Information We Collect

• Account Information — Email address and display name when you create an account. ALL APPS
• Health & Fitness Data — With your permission, we access Apple HealthKit data including workouts, active calories, steps, heart rate, height, weight, and age. Used solely to calculate your effort score and personalize your experience. TREATYOURSELF
• Video & Camera Data — Videos you record and upload, including stitches, reactions, and recordings created in-app. Stored to power your feed, threads, and creator profile. STITCHSOCIAL
• Engagement Data — Hype/Cool reactions, follows, comments, and tier progression are stored to power the reputation system. STITCHSOCIAL
• Location Data — When you use the “Find Nearby” feature, we access your approximate location to show nearby restaurants. Location is not stored on our servers. TREATYOURSELF
• Food Logging — Meals and foods you log are stored in your account to track your daily calorie budget. TREATYOURSELF
• Usage Data — Anonymous usage data to improve the app experience, including features used and session duration. ALL APPS

How We Use Your Information

• To power core app functionality — effort scores, meal tiers, creator tiers, video feeds, threads
• To generate personalized meal plans and recipes
• To track your calorie deficit and rollover budget
• To enable social features — friend connections, challenges, follows, stitches, Hype/Cool reactions
• To track milestones, achievements, and creator tier progression
• To send notifications you opt into
• To improve and optimize our apps

Health Data

We take your health data seriously. Data accessed from Apple HealthKit is never sold, shared with third parties, or used for advertising. Health data is used exclusively within TreatYourself to provide the core experience — calculating effort scores, tracking activity, and personalizing meal plans. Health data is not stored on external servers beyond what is necessary for your account functionality.

Video & User Content

Videos and content you publish in StitchSocial are stored on our servers to enable playback, threading, and discovery. You retain ownership of all content you create. You can delete any video, stitch, or thread at any time from your profile — deletion is permanent and removes the content from our servers and from any threads it appears in.

Data Storage

Your data is stored securely using Google Firebase, which provides industry-standard encryption in transit and at rest. We retain your data for as long as you maintain an active account. You may delete your account and all associated data at any time from the Profile settings within the app.

Third-Party Services

• Firebase (Google) — Authentication, database, storage, hosting, push notifications
• Spoonacular API — Recipe and meal plan generation TREATYOURSELF
• Google Places API — Nearby restaurant search TREATYOURSELF
• Apple HealthKit — Health and fitness data access TREATYOURSELF
• Apple AVFoundation — On-device video recording and editing STITCHSOCIAL

Each service has its own privacy policy governing how they handle data.

Data Sharing

We do not sell your personal information. We share data only:

• With friends you explicitly connect with via invite codes (limited to display name, effort score, and activity summaries)
• Publicly within StitchSocial when you publish a video, stitch, or comment — these are visible to other users by design
• When required by law or to protect our rights

Your Rights

• Access the personal data we hold about you
• Request correction of inaccurate data
• Delete your account and all associated data
• Revoke HealthKit permissions through iOS Settings
• Opt out of location services
• Delete individual videos, stitches, or comments at any time
• Block or report other users

Children’s Privacy

Our apps are not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “last updated” date.