Privacy policy

SpoolPilot is built to keep your shop's data on your device. This page explains what that means in practice.

What's stored, and where

Your filament, product, production, and sales records are stored locally on your device using Apple's on-device SwiftData storage. None of it is uploaded to us — we don't run a server that stores your shop data, and we can't see it. A copy can be backed up to your own iCloud, which is described under Backups below. There is one small service involved in talking to a sales channel, described under The sign-in service; it stores none of your data and keeps no logs.

Etsy sync

When you connect your Etsy shop, SpoolPilot uses Etsy's official sign-in flow to get permission to read your own shop's listings and orders. It reads only the parts of an order that decide profit: the items sold, their quantities and prices, any discounts, the shipping charged, the currency, and the date.

It does not read your customers. SpoolPilot asks Etsy for no customer permissions — no names, email addresses, phone numbers, or billing details. Etsy's order records do arrive with the buyer's shipping details attached; SpoolPilot never reads, stores, or shows them — they're discarded unread, and no customer information appears anywhere in the app. Your access token is stored in your device's Keychain and used only to fetch your own shop data on your request. Etsy data is also subject to Etsy's own privacy policy.

If you connect any other sales channel you own, SpoolPilot handles it the same way: read-only access to your own orders, no customer data, and the access token kept in your device's Keychain.

The sign-in service

Talking to a sales channel needs one thing that can't ship inside an app: the channel gives developers a secret key, and anything inside an app can be pulled back out of it — so the key can't live on your phone. SpoolPilot runs a single small relay service that holds that key instead.

For Etsy, your phone's requests travel through that relay. It first checks the request comes from a genuine, unmodified copy of SpoolPilot — using Apple's App Attest, which only real Apple hardware can pass — then adds the key, forwards the request to Etsy, and streams Etsy's answer straight back to your phone. It stores nothing and logs nothing: no tokens, no orders, no record of which shop asked. The moment a response is delivered, the relay holds nothing at all.

For any other channel, the relay is used only to complete sign-in — a one-time code goes in, an access token comes back, and it keeps neither. After that your phone talks to the channel directly.

Camera

SpoolPilot uses your device's camera two ways, both entirely on-device: to read spool barcodes, and to read the print time and weight off a slicer screen. No camera images or video are stored or sent anywhere.

Shared filament library

Scanning a spool can look up its barcode in SpoolPilot's shared filament library so the spec fills in automatically. Only the barcode number is sent — nothing about you or your shop. If you opt in to sharing, specs you enter (brand, color, and weight — never your costs or sales) are added to the library for other makers. Contributions aren't shown with your name or any account details.

Notifications

Low-stock alerts are local notifications generated on your device. They don't involve a push notification server or any data leaving your device.

What we don't do

• No analytics or tracking SDKs
• No advertising, and no ad networks
• No selling or sharing your data with third parties

Backups

If iCloud Drive is switched on for SpoolPilot, the app keeps a backup of your shop in your own iCloud — a single file, SpoolPilot Auto-Backup.json, in an iCloud Drive folder named SpoolPilot. It holds what you'd expect a backup to hold: your settings, filament, products, and sales history.

This happens on its own — once when the app opens and again when you leave it, and at most once a day unless something actually changed. It goes to your Apple account, not to us: we have no access to that folder and never receive a copy. If a fresh install finds a backup there, SpoolPilot offers to restore it and waits for you to say yes.

To turn it off, switch SpoolPilot off under iCloud Drive in the iOS Settings app. The app has no separate toggle — it simply uses iCloud if you've allowed it to.

How long your data is kept

Your records stay on your device for as long as you want them — a profit history is only useful if it goes back. Nothing expires on its own and nothing is deleted behind your back. Deleting a record removes it; deleting the app removes all of it. Disconnecting a sales channel deletes that channel's access token from your device straight away, and SpoolPilot can no longer reach that shop.

Because your shop data isn't on our servers, there's nothing on our side to delete, and no retention period of ours for it to sit under.

Encryption

Traffic between your phone and the sales channels you connect, or the sign-in service above, goes over HTTPS. On your device, records are protected by iOS's built-in file encryption, and access tokens are held in the Keychain rather than ordinary storage. iCloud backups are encrypted by Apple under your own account.

Exporting your data

Manual backups and CSV exports write files to your device and hand them to Apple's standard share sheet, so you choose where they go. We never see them.

Questions

Email hello@spoolpilot.app and we'll get back to you.