Privacy Policy

1. Introduction

Knytstudio ("we", "us", or "our") operates knytstudio.com. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable laws.

2. Age Requirement

Knytstudio is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use this service. If we learn that we have collected personal information from a child under 13, we will delete that information promptly.

3. Data We Collect

We collect the following information:

• Account Information: Email address when you create an account
• User Content: Patterns you create and choose to save
• Usage Data: Basic information about how you use the app (e.g., features accessed)

4. How We Use Your Data

We use your data to:

• Provide and maintain the service
• Save and sync your patterns across devices
• Process payments (if you subscribe to premium features)
• Send important service-related communications
• Improve and develop new features

5. Legal Basis for Processing (GDPR)

Under the GDPR, we process your data based on:

• Contract: To provide the services you signed up for
• Legitimate Interest: To improve our service and prevent abuse
• Consent: For optional communications (you can withdraw anytime)

6. Third-Party Services

We use the following third-party services:

• Supabase: Database and authentication (data stored in EU)
• Stripe: Payment processing (when applicable)
• PostHog: Privacy-friendly analytics to understand how users interact with the app (data stored in EU). We respect your browser's "Do Not Track" setting.

These services have their own privacy policies and are GDPR-compliant.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain it.

8. Your Rights (GDPR)

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at [email protected]

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (HTTPS) and at rest, secure authentication, and regular security reviews.

10. International Transfers

Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place for such transfers in accordance with GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the app. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at: [email protected]

13. Supervisory Authority

If you are in the EU/EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.