Privacy

The short version

Your records live on your own device. They are copied to your account only if you sign in, and that copy exists so you can use Illuminate on more than one machine and get your work back if a device is lost.

the operator of this site does not sell anything to anybody, does not advertise, and has no interest in your customer list.

What is kept, if you sign in

• Your records: customers, quilts, quotes, invoices, payments, stock, patterns and settings. Whatever you have typed into the app.
• Your photographs of quilts.
• Your sign-in: from your Gammill account, an identifier for that account and your email address. Illuminate keeps nothing else from it: not your name, not your password, which it never sees.
• Your devices: a token per device so it can reach your account, the name you gave it, and when it last connected.
• Your subscription: whether it is live and until when.

If you never sign in, none of this leaves your device and there is nothing here about you at all.

What is encrypted, and what is not

This is the part most privacy pages are vague about, so here it is plainly.

• Backups are encrypted before they are stored, with a key derived separately for your account.
• Photographs are encrypted the same way, with a different key again.
• Records kept for syncing between your devices are NOT encrypted at the record level. They are stored in your account's own private database, reachable only with one of your device tokens, and not readable by other customers, but they are not scrambled the way the backup is.

Everything is held on Cloudflare's platform and is encrypted in transit and at rest by Cloudflare regardless.

How the app is used

If you sign in, the app asks once whether it may share how it is used, to find and fix crashes and to see which parts are used. You can say no, and you can switch it off later in Settings under How the app is used; off means nothing more is sent from any of your devices.

What is shared, once a day: which screens are opened and which buttons are tapped, as counts; how long the app takes to open and to draw; whether saving worked; what kind of error happened and on which screen; how many customers, quilts and invoices you have, as numbers; which features are switched on; the make of your longarm; the kind of device and browser; and the state you are in.

Never shared: names, emails, phone numbers or addresses, yours or a customer's; anything you type; prices, totals or any amount of money; photographs; your account or sign-in. The numbers are stored under a random number made for this, not under your account, and the address your device connects from is not kept with them. Settings shows you the whole of what would be sent.

Card payments

Illuminate never sees a card. Payments are taken by Stripe on Stripe's own pages. the operator of this site is told that a payment happened and until when access runs. Never a card number, never the security code.

Your customers

If you share a quilt with a customer, that one quilt's details are put on a page reachable by an unguessable link, which only they have. It shows that quilt and nothing else: not your other customers, not your costs, not your private notes.

Getting it out, and getting rid of it

You can save a backup of everything at any time, subscription or not, from inside the app. It is yours.

You can close your account and have what is stored deleted. Write to the address above.

How long it is kept

For as long as you have an account. Backups are kept a few generations deep so a bad one can be walked back. Deleted records leave a marker for a while so the deletion reaches your other devices, and then that goes too.

This page describes what the software does, checked against the code that does it. It is not legal advice and has not been written by a lawyer. Have one read it before you rely on it.