Privacy Policy
Draft — pending review. Last updated October 2026.
Pathways is a tool for documenting restoration projects. This policy describes what we collect, why, who else touches it, and what you can make us delete.
What we collect
- Account details. Your email address and name, held by our sign-in provider. We never see or store your password.
- Your project content. The photos, notes, voice recordings, tags, parts lists and project data you put in. This is yours.
- Billing details. Handled entirely by our payment provider. Card numbers never reach our servers; we keep only a customer reference and your plan status.
- Sign-in history. When you signed in and from what kind of device, so you and our support team can spot access that wasn't you.
- Diagnostics. Crash reports and error details when something goes wrong, including what the app was doing at the time. Some of this goes to a third-party error-tracking service — see below.
- Problem reports. If you report a problem from inside the app, what you wrote plus technical details about your session at that moment, and, only if you choose to include one, a screenshot of the app as it looked when you opened the report. A screenshot is deleted when you delete your account.
What we do with it
We use it to run Pathways for you: storing and syncing your projects across your devices, processing your subscription, answering your support requests, and fixing what breaks. That's the whole list.
We do not sell your data. We don't share it with advertisers, we don't build profiles for marketing, and we don't use your photos or notes to train AI models — ours or anybody else's.
Who else touches it
Running Pathways means using other companies for parts of it. Each one sees only what its job needs:
- Auth0 (Okta) — sign-in. Holds your email, name and password.
- Cloudflare R2 — where your photos and recordings are stored.
- Microsoft Azure — where the application runs, and where your project data, tags and parts lists are stored.
- Stripe — subscriptions and payments. Holds your card details; we never do.
- SendGrid (Twilio) — the email we send you, and whether it was delivered and opened.
- Sentry — crash and error reports. We configure it to strip IP addresses and device names, and it receives no photos or project content.
- Google (Gemini) — AI features only, and only the specific item you asked us to work on.
AI features
When you use a feature like manual-based part identification or a note summary, the specific photo, manual page or note you chose is sent to Google's Gemini service to produce the result you asked for, and the result comes back to your project.
Nothing is sent unless you invoke the feature. We do not send your library in bulk, and we do not use your content to train any model.
How long we keep it
- Your content — until you delete it. A deleted photo waits in the Recycle Bin until you empty it, and emptying it removes it from storage for good. A deleted project is recoverable for 30 days, then it is gone from storage for good.
- Your account — until you delete it. See below.
- Diagnostics and problem reports — kept for a limited period and then removed automatically. Sentry holds its own copies under its retention schedule.
- Billing records — retained by our payment provider, including after you delete your account, because we're required to keep records of what we charged.
Deleting your account
You can delete your Pathways account yourself, from Settings in any of our apps or from this page. The account switches off immediately and everything is destroyed after 30 days — reversible up to that point.
The full detail is here, including exactly what is deleted, what is kept, and why.
Your other rights
You can ask us for a copy of your data, ask us to correct it, or object to how we use it. Pathways can already export your media from Settings; for anything else, email support@codercraft.com and we'll answer.
Children
Pathways isn't intended for children, and we don't knowingly collect data from them. If you believe a child has given us data, email us and we'll delete it.
Changes
If we change this policy in a way that matters, we'll tell you before it takes effect — not by quietly editing this page.