Nextrow privacy policy
Last updated 11 November 2026
This policy covers the Nextrow app on iPhone, Apple Watch, Android and Wear OS. Nextrow is made by M/S Prograsec ("Prograsec", "we"), a firm registered in Punjab, Pakistan. Nextrow has no account and no sign-in, and it shows no ads. We don't sell your data or use it to track you across other apps.
1. What stays on your phone
Your patterns (PDFs, photos of pages and pasted text), your projects, row and repeat counters, notes, markup, project photos, yarn and tool stash, saved links and settings are stored on your device. We don't receive them.
Photos and camera. If you import a photo of a pattern or add a photo to a project, Nextrow asks for access and copies only the picture you choose into the app.
Backup. "Backup" in Settings makes a file on your phone that you save or share wherever you choose. We never receive it. Your phone's own device backup may also include Nextrow's data, under Apple's or Google's terms.
Watches and widgets. The Apple Watch app, the Wear OS app and the home-screen widgets show your current counter and send counts back to the phone. On iPhone this goes directly between your devices; on Android it goes through Google Play services' connection between your phone and watch. It doesn't pass through our server.
Reminders, such as the note before a free trial ends, are notifications scheduled on the phone. We don't use push notifications.
2. The install ID
On first open, Nextrow creates a random ID for that installation. It isn't linked to your name, email, phone number or advertising ID. The services below use it in place of an account. Reinstalling the app creates a new one.
3. Steps from your pattern (optional)
Nextrow can lay a pattern out as steps. This is the only feature that sends any part of a pattern off your phone, and it asks you first, naming who receives it. If you decline, nothing is sent, and the reader and counters work the same.
When you allow it, the app sends the text of each page, or an image of the page when it is a scan or photo, to our server. Our server passes it to an AI model through OpenRouter : DeepSeek for text pages and Anthropic's Claude for scans. We send these requests only to model providers that don't keep the data or use it for training. Our server uses the pages for that one answer and does not store or log them. It logs only the number of pages and the cost, with no install ID, file name or text. The steps that come back are saved on your phone.
To apply the free and Pro limits, our server keeps the install ID and a count of how many patterns it has read. On iPhone the app also proves it is a genuine copy using Apple's App Attest; the server keeps the resulting key for that install. On Android it asks Google Play for an integrity check instead: Google Play services sends Google information about the app and device (whether this is the copy of Nextrow from Google Play and whether the device is genuine and unmodified), and our server asks Google for the result, which it uses for that request only and doesn't store.
Reporting a step. If a step looks wrong, missing or offensive, you can report it from the steps screen. The report sheet shows what will be sent before you send it: the reason you pick, the step as shown, the line of the pattern it was read from, its page number and any note you write. Our server keeps that report, without the install ID, so we can find and fix the problem, and deletes it after 90 days. Nothing is sent unless you press Send report.
You can turn this feature off at any time in Settings > Read patterns as steps.
4. Other things we send, and to whom
Purchases (RevenueCat). Payments are taken by Apple or Google; we never see card details. To check whether you have Nextrow Pro, the app sends the install ID and the store's purchase receipt to RevenueCat , which keeps your purchase history, country and device type. Our server keeps a copy of whether that install ID has an active subscription, to apply the limits above.
Usage analytics (PostHog). To learn what helps people and what to fix, the app records how it is used: when it is opened and closed, which screens you visit (by type, such as “a project” or “the reader”, never which project), and actions such as importing a pattern, creating, finishing or deleting a project, adding a counter or a markup, looking up a term, changing a setting, the answers you pick in the first-run questions, and each step of the paywall, including the plan and price. Counts are sent only as ranges, such as “4 to 10 projects”. Our server adds the store's subscription events (a trial started, a renewal, a cancellation, a refund, with the plan and price) and, for the steps view, the number of pages, how long it took and what it cost us. All of it is tied to the install ID, with the app version, device model and operating system, and goes to PostHog on its EU servers. PostHog is told not to work out a location from your IP address. We never send pattern text, file names, project names, notes or photos. Session replay and automatic tap tracking are off. Our team also gets a short message when someone starts a trial, subscribes, cancels or asks for a refund; it says the plan, store and price, and nothing that identifies you.
Crash reports. If the app crashes, a report with the error, app version, device model and operating system goes to our own error tracker on Prograsec's server. It carries no name, email or IP-based identity, and no pattern content.
Like any web server, ours sees your IP address while answering a request. We use IP addresses only for rate limiting and security and don't store them with the install ID.
5. Why we use it
To run the features you use, to unlock what you paid for, to stop abuse of the steps feature, to fix crashes, and to understand which parts of the app help people finish their projects. We don't use your data for advertising and we don't sell it.
6. How long we keep it
Data on your phone stays until you delete it or the app. Pattern pages sent for steps are not kept at all. Step reports you send are deleted after 90 days. Usage counts and subscription status on our server are kept while the install ID is in use and removed when we no longer need them for the limits. RevenueCat keeps purchase records for as long as we use it for Nextrow, as tax and refund rules require. Analytics events and crash reports are kept only as long as they help us improve the app and fix errors, then deleted.
7. Deleting your data
Deleting a project in Nextrow removes its pattern, counters, notes, photos and saved steps from the phone. Deleting the app removes everything Nextrow stored on the phone. To remove what our server and our providers hold for your install, email business@prograsec.com from the app (Settings > Send feedback) and ask us to delete it; we reply within 30 days. Deleting data does not cancel a subscription; see how to cancel.
8. Your rights
Depending on where you live, you may have the right to ask for a copy of your data, to correct it, to delete it or to object to how we use it. Because Nextrow has no account, we can only find data linked to an install ID, so please write from inside the app. You can also complain to your local data protection authority.
9. Children
Nextrow is not directed at children under 13, and we don't knowingly collect data from them. If you think a child has used the steps feature, email us and we'll delete what we hold.
10. Where data is processed
Our server and error tracker run on a server we rent and manage. RevenueCat and OpenRouter are based in the United States, and the model providers OpenRouter uses may process pages in other countries. PostHog stores Nextrow's data in the EU. Each provider protects the data under its own terms and the law where it operates.
11. Changes
If we change what Nextrow collects, we'll update this page and the date at the top before the new version of the app ships.
12. Contact
M/S Prograsec, Punjab, Pakistan. Email business@prograsec.com.