隐私政策

本政策说明我的布料库如何收集、使用、存储和删除你的数据。

最后更新：2026 年 8 月 21 日

中文

我们收集的数据

邮箱地址：用于发送 Magic Link 或 6 位验证码，帮助你登录账户。我们不会将邮箱用于营销邮件。
用户 ID：由 Supabase Auth 为每个登录账户生成，用于把你的资料与其他用户隔离。
布料资料：包括你输入的布料名称、编号、材质、图案、宽度、剩余长度、备注和颜色信息。
图片内容：包括你上传的布料照片，以及你主动设置的头像。

我们如何使用这些数据

我们只将这些数据用于提供 App 的核心功能：登录、显示和管理你的布料库、保存颜色与图片、同步账户资料，以及在你要求时删除账户。我们不销售个人数据，不投放广告，也不将数据用于跨应用或跨网站追踪。

存储与访问控制

账户、布料记录、颜色信息和图片元数据存储在 Supabase 的 PostgreSQL 数据库中。布料照片存储在 Supabase 私有 Storage bucket fabric-images，对象路径按 <用户ID>/<布料ID>/<图片ID>.jpg 隔离。头像存储在单独的 Supabase 私有 Storage bucket user-avatars，路径为 <用户ID>/avatar.jpg。

数据库表和 Storage 对象均使用 PostgreSQL Row Level Security 与 Supabase Storage policy 限制访问。登录用户只能读取、创建、更新和删除属于自己账户的数据。

追踪、分析与广告

我的布料库不做任何追踪，不使用第三方分析服务，不包含广告 SDK，也不会为广告目的共享你的数据。

子处理方

Supabase：用于账户认证、数据库、私有文件存储和账户删除相关服务。
Brevo：用于发送登录所需的 Magic Link 或 6 位验证码邮件。

账户删除

你可以在 App 内打开「账户 → 删除账户与所有数据」申请删除账户。删除操作会永久移除你的账户、全部布料记录、颜色信息、图片元数据、已上传布料图片和头像。删除完成后，这些数据无法恢复。

联系我们

如需隐私支持，请发送邮件至 support@getloomastudio.com。

English

Data We Collect

Email address: used to send Magic Link or 6-digit OTP login emails. We do not use your email address for marketing.
User ID: generated by Supabase Auth to keep your account data separate from other users.
Fabric records: including fabric name, code, material, pattern, width, remaining length, notes, and color information that you enter.
Image content: including fabric photos you upload and the avatar you choose to set.

How We Use Data

We use this data only to provide the app's core functionality: account login, displaying and managing your fabric library, saving colors and images, syncing account data, and deleting your account when requested. We do not sell personal data, show ads, or use your data for cross-app or cross-website tracking.

Storage and Access Controls

Account data, fabric records, color information, and image metadata are stored in a Supabase PostgreSQL database. Fabric photos are stored in the private Supabase Storage bucket fabric-images, with object paths isolated as <userID>/<fabricID>/<imageID>.jpg. Avatars are stored in a separate private Supabase Storage bucket named user-avatars, at <userID>/avatar.jpg.

Database tables and Storage objects are protected by PostgreSQL Row Level Security and Supabase Storage policies. A signed-in user can only read, create, update, and delete data that belongs to their own account.

Tracking, Analytics, and Ads

Looma Studio does not track users, does not use third-party analytics, does not include advertising SDKs, and does not share your data for advertising purposes.

Subprocessors

Supabase: account authentication, database, private file storage, and account deletion services.
Brevo: delivery of Magic Link and 6-digit OTP login emails.

Account Deletion

You can delete your account in the app by opening Account → Delete Account and All Data. Deletion permanently removes your account, all fabric records, color information, image metadata, uploaded fabric images, and avatar. Deleted data cannot be restored.

Contact

For privacy questions, email support@getloomastudio.com.

App Store Privacy Mapping

PrivacyInfo.xcprivacy data type	Policy coverage	Purpose
EmailAddress	Login email address for Magic Link / OTP.	App Functionality; linked to user; not used for tracking.
UserID	Supabase Auth user ID used for ownership and RLS isolation.	App Functionality; linked to user; not used for tracking.
PhotosorVideos	User-uploaded fabric photos in private storage.	App Functionality; linked to user; not used for tracking.
OtherUserContent	Fabric records, color information, notes, image metadata, and avatar content.	App Functionality; linked to user; not used for tracking.