Who handles your information.
- Publisher
- Level Up Classroom Inc.
- Business jurisdiction
- Ontario, Canada
- Business address
- 79 Potters Way, Woodstock, ON, Canada, N4S 9A1
- Telephone
- 519-536-5587
- Support and privacy contact
- reece@levelupclassroom.com
Level Up Classroom Inc. is responsible for the Cloth & Colour information described here. This notice concerns the quilt designer, its Community service and purchases; it does not describe a school’s gradebook or student records.
We use the information described below to provide accounts and purchases, deliver the sharing features you choose, respond to support requests, protect the service, handle deletion and recovery, and meet applicable recordkeeping obligations. Optional launch-news signup has its own notice at the signup form; buying the app, using Feedback or joining Community does not automatically subscribe you to marketing.
What stays on your computer.
Private projects, blocks, fabric photos, measured stash, checkpoints and unfinished drawings are stored on your device. Saving or exporting a file does not automatically upload it to Community. You control independent copies, backups and anything you choose to email or upload elsewhere.
The core designer does not contain advertising trackers or online license activation. A support report is created locally for you to review and save; it is not uploaded automatically. It reports app/runtime versions and limited setup/connection information, without inspecting private quilts, photographs, licenses or file paths.
When you choose to share.
Community processes the account reference and profile name needed for the service, plus designs, public titles/descriptions/tags, geometry, colours, creator credits, ratings, comments, reports and moderation records. Public contributions and credits are visible to other visitors; reports and moderation records are not public gallery content.
The current sharing format strips fabric-photo textures, private notes, stash references, checkpoints, local paths, unused designs/fabrics and private labels/identifiers. It shares the chosen public copy and active colourway. Review that copy before submission; avoid placing private information in its public title, description or comments.
Sign-in, payments and service providers.
Google Firebase Authentication handles Community email/password and Google sign-in. The app keeps its active Community session in memory; refreshing or quitting signs you out. Passwords and sign-in tokens are not saved in quilt files or library backups.
Stripe handles payment and billing details at its hosted Checkout. Our purchase store records the order/session references, chosen license name, purchaser name returned by Checkout, offer and major version, verified subtotal/tax/total and payment date, payment state, original terms and original signed license. Separate recovery history preserves acknowledged purchase state and the original license. Deleting Community does not delete required purchase records.
Purchase access is held privately in the original browser tab. An optional saved access file contains the store origin, order reference and secret access key, but no name, email or card details. Anyone holding it can access that purchase; keep it private. The server stores its key hash. A license file contains its chosen name and reference; keep that private too.
Online requests expose connection information such as IP addresses to the receiving hosts. Request limits use short-lived keyed references; sign-in handoffs are encrypted and expire. Our website uses Cloudflare Web Analytics to understand aggregate page views, referrals and page-load performance. It does not use analytics cookies, browser-storage identifiers or fingerprinting to track visitors across websites. We do not send names, email addresses, quilt designs or purchase-access keys to this analytics service. Hosting providers still receive connection information when a page is requested. The desktop designer has no advertising or analytics tracker. We do not use advertising pixels. Hosts can retain their own connection/security records.
Community content and backup location: Canada — Toronto. Dedicated production databases and private services are configured. Sign-in, payment and email providers may process information elsewhere, as described below.. Authentication and payment providers may process information in other countries under their own arrangements. This is not a promise that all provider processing occurs in Canada.
Provider notices: Firebase, Google, Stripe, Cloudflare.
Your purchase records by email.
After payment verification, the purchase service retrieves the email address collected at Stripe Checkout and sends your original license, purchase agreement and original terms through Resend. These are private purchase records, not marketing messages. They contain the chosen license name, purchaser name, order reference, payment facts and original terms. Keep the attachments private.
The purchase store keeps delivery progress, attempt times, message and recipient hashes, and the provider’s message reference alongside the order. It does not copy the raw email address or another copy of the message body into that progress record. Stripe, Resend and your email provider process the contact address and message for delivery and have their own retention arrangements. A recipient hash remains potentially linkable information; it is not described as anonymous.
A sender’s acceptance does not prove that a message reached your inbox. Check spam or junk folders if it is missing. Your purchase page still offers the original downloads, and support can verify the purchaser and help recover original records. A purchase does not subscribe you to launch news.
Bug reports and feature requests.
The app’s Feedback form sends your message, optional reply address and explicitly included setup details to our support inbox through Resend. It does not automatically attach quilts, photos, licenses or file paths, and it does not subscribe you to launch emails. Messages are kept for up to two years after closure. The sending service stores a temporary daily count, not the message. Resend and email providers may process messages outside Canada under their own policies.
How long information is kept.
- Private quilts and fabric photos
- Stored on your computer under your control. We do not automatically upload them.
- Community account and contributions
- Keep while you use the service. When deletion is accepted, hide contributions immediately and finish active-record cleanup within 30 days. Copies already downloaded by other makers cannot be recalled.
- Rolling service backups
- Keep 7 days of ordinary backups. A copy made before active deletion can remain for up to 7 further days: allow up to 37 days from the deletion request for these ordinary recoverable copies.
- Purchase and tax records
- Keep 7 years after the end of the relevant tax year. Applicable longer recordkeeping duties, unresolved disputes and legal holds are handled separately.
- License recovery
- Keep the minimal purchase entitlement while we provide recovery, with an annual review of what is still needed. This does not promise a permanently hosted recovery service; keep your downloaded license.
- Deletion and moderation recovery proof
- Keep minimal references and status history while needed to prevent removed or restricted content returning through recovery; review annually. This history does not contain the deleted quilt/photo files or comment text.
- Support correspondence
- Keep 24 months after the case closes. Remove unnecessary attachments earlier; required transaction records and legal holds are separate.
- Routine service logs
- Target 30 days for our diagnostic/access logs. Hosting/payment providers can keep separate security or audit records under their own schedules.
- Temporary sign-in and exports
- Sign-in handoffs cannot be used after at most 7 minutes. Account-export access expires after 30 minutes; exported files are scheduled for cleanup after one day. Background TTL/lifecycle removal can occur later.
Required records, legal holds, independent downloads and providers’ own retention are separate.
Your access, correction and deletion requests.
Community → Account & data lets you export your profile and contributions. Account removal requires fresh sign-in and confirmation. It hides contributions, runs active-record cleanup and requests removal of the associated sign-in. If provider removal fails, the app shows a retry state; contact us if it remains incomplete.
Minimal deletion/moderation recovery references help prevent removed content or suspended access returning through a restore. They are pseudonymous, not anonymous, and do not contain deleted quilt/photo files or comment bodies. Their purpose is reviewed annually; deleting them blindly could undo a person’s earlier deletion.
You may also email reece@levelupclassroom.com to ask about access, correction, deletion or other applicable privacy rights. We may need proportionate information to verify identity and locate the record. We explain any applicable retention exception or incomplete provider removal. You can contact the Office of the Privacy Commissioner of Canada about a privacy concern.