Privacy policy

This policy explains what YarnHub collects, why we collect it, and what you can do about it. It applies to the YarnHub apps for iOS and Android and to the web app.

Who we are

YarnHub is operated by [LEGAL ENTITY NAME], [COMPANY NUMBER], registered at [REGISTERED ADDRESS]. For data protection purposes we are the data controller. You can reach us at [CONTACT EMAIL].

What we collect

Information you give us

• Account details. Your email address and a password. We never store your password itself, only a cryptographic hash of it.
• Your stash. The yarns you record, their quantities, colourways, dye lots, and any photographs you attach.
• Your projects. Project names, notes, row counts, and any pattern PDFs you upload.
• Community posts. Anything you choose to share to the public feed, including images and text.
• Preferences. Your regional setting and display options.

Information collected automatically

• Technical data. Device type, operating system version, and app version, used for diagnosing faults.
• Log data. Our backend records request timestamps and IP addresses as part of normal server operation and abuse prevention.

What we do not collect

We do not use third-party advertising networks, we do not sell your data, and we do not track you across other apps or websites. This website serves its own fonts rather than loading them from a third party, so visiting these pages does not disclose your visit to anyone else.

Why we use it, and our lawful basis

• To provide the service. Storing and syncing your stash and projects across your devices. Lawful basis: performance of a contract.
• To keep the service secure. Detecting abuse and preventing unauthorised access. Lawful basis: legitimate interests.
• To fix problems. Diagnosing crashes and faults. Lawful basis: legitimate interests.
• To contact you. Service messages such as password resets. Lawful basis: performance of a contract.

Who we share it with

We use a small number of processors to run the service. They act on our instructions and may not use your data for their own purposes.

• Supabase. Database, authentication, and file storage. Data is hosted in [REGION].
• [HOSTING PROVIDER]. Hosting for this website.
• [ANY OTHER PROCESSORS: analytics, email delivery, crash reporting]

We may also disclose information where we are legally required to do so.

What other users can see

Your stash and your projects are private to your account by default. Only what you deliberately post to the community feed is visible to other users.

Yarns you add to the global catalogue are visible to everyone, because the catalogue is a shared resource. Catalogue entries describe commercially available products and are not linked to your identity.

How long we keep it

We keep your account data for as long as your account is open. After you delete your account, data is removed from live systems within [NUMBER] days and from backups within [NUMBER] days. Server logs are retained for [NUMBER] days.

Your rights

If you are in the UK or the EEA, you have the right to access your data, correct it, delete it, restrict or object to its processing, and receive it in a portable format. You can exercise most of these directly in the app under Profile → Account, or by emailing us.

You also have the right to complain to a supervisory authority. In the UK that is the Information Commissioner's Office at ico.org.uk.

Children

YarnHub is not directed at children under [AGE]. We do not knowingly collect data from them. If you believe a child has given us their data, contact us and we will delete it.

Data stored on your device

The app caches your stash and projects locally so it works without a connection. This cache lives on your device and is removed when you sign out or uninstall the app.

Changes to this policy

If we make material changes we will tell you in the app before they take effect. The date at the top of this page shows when it was last revised.

Contact

Questions about this policy: [CONTACT EMAIL].