Privacy Policy.

Who is responsible

The controller for this app is Alain Kessler, a sole proprietorship registered in Switzerland, operating under the brand Klar. For any privacy question or request, contact support@getklar.org.

What we collect

Account data.We store your email address to sign you in and to keep your stash across devices. You can sign in with email, with Apple, or with Google. With Sign in with Apple you may use Apple's private relay email; that works fine. When you sign in with Google, we receive your email address and basic profile from Google — nothing else from your Google account. A display name and an avatar are optional and set by you.

Your stash and projects. The yarn entries you create — name, brand, color, fiber, weight, yardage, price, notes — the patterns and projects you add, and the photos and PDF patterns you attach. Attachments are stored with your account so they follow you across devices. Free accounts can keep up to 30 entries; this limit is enforced on our server.

Your counting. The current row count and target rows of a project, and — if you use the timer — how long you have worked on it. Repeat counters and side counters are stored on your device only and never reach our servers.

Messages to support. If you write to us from the feedback screen in Settings, your messages and our replies are stored with your account, so the conversation is still there next time.

Purchase status. Purchases are processed by Apple or Google. We receive only the resulting entitlement status (active or not) through our subscription provider RevenueCat. We never receive your card or payment details.

Crash reports. If the app crashes, a technical report (stack trace, device model, app version) is sent to our own self-hosted crash server. These reports are for fixing bugs and are not used for advertising or profiling.

A one-time clipboard read.If you arrived through a link from someone who recommends the app, that link places a short token on your clipboard. On the first cold start the app reads the clipboard once, and only accepts text matching that exact token format. iOS shows its own “pasted from” notice when this happens. Anything else on your clipboard is ignored and never leaves your device, and the check does not run again.

The camera and the label scanner

The camera has three jobs, and you choose when to use it.

Scanning a yarn label (Premium).When you photograph a yarn label — or the yarn itself, if the label is long gone — that one photo is sent to our server and passed to Anthropic's Claude model, which reads brand, fiber and yardage out of the image. The photo is used for that single extraction and is not kept by us afterwards; only the extracted text fields you choose to save end up in your stash. Scans are rate-limited on our server.

A portfolio photo. When you mark a project as finished, you can add a photo of it to your portfolio. That photo is kept, see the next section.

Reading an invite code.The scanner that reads a friend's QR invite code runs entirely on your device. Nothing is recorded and no image leaves your phone.

The Room and your portfolio

The Room.The Room is a shared 3D room in the app, split into rooms of up to 40 members each. You get a place in a room the first time you open it and keep it while you come back within 30 days. Every member appears there as a ball of yarn that grows with the time you spend on your projects. Other members of your room see only an anonymous ball: a random identifier that is not your account ID, a nickname the app generates from a fixed list of words (such as “Fluffy Bumblebee”; you can draw a new one, but never type one), a colour, a position in the room, your total crafting time, when you were last in the app, whether you are working on a project right now (a project timer runs, or you counted a row in the last 15 minutes) and since when, and the country set in your phone's region settings, shown as a small flag. You can hide the flag in your profile at any time. They never see your name, your email address, the names of your projects or your stash. While you have the Room open, the position of your ball is shared live with the other members who are in the Room at the same time. To measure crafting time, the app also counts the time between rows you count while no timer runs.

Crafting statistics and the leaderboard. Each time your crafting time grows (a timer you stop, rows you count, or a time you correct by hand), we store how many seconds were added and when. From this we show you your own week and your streak, and we show other members, when they tap your ball, your crafting time of the last seven days, your longest session, how many projects you have finished and, for each project you are working on, whether you knit or crochet it, how many rows you have counted and planned, and the time you have spent on it, never its name or a photo of it. The weekly leaderboard lists the ten members with the most crafting time in the last seven days, by nickname only. Members you blocked, and members who blocked you, never see each other there.

Hearts and stars. In the Room you can send another ball a felt heart or star. It is passed live to the members who are in the Room at that moment and is not stored.

Your portfolio. A photo you add to a finished project is stored with your account. Other signed-in members can see it when they tap your ball in the Room, together with the finish date, the time you spent and whether it was knitted or crocheted. They never see the project name or anything else about you. You can hide your whole portfolio from others in Settings at any time, and remove a single photo whenever you like.

The automatic photo check.Before anyone else can see a portfolio photo, it is sent to Anthropic's Claude model, which checks that it shows a craft project and no nudity, violence or personal data. We store the result (approved or rejected, and the reason). Until a photo is approved, only you can see it.

Reports and blocks. You can report a photo and block a member. A report stores who reported what and why, so that we can review it within 24 hours; the reported member never learns who reported them. A block hides both of you from each other.

What stays on your phone

Repeat and side counters.The rhythm of your pattern (“increase every 6 rows”) and any extra counters you run alongside a project are stored in the app's local storage on your device.

Reminders. Project reminders and the monthly summary are local notifications scheduled on your phone. There is no push server involved; we do not know whether they fired or whether you opened them.

Appearance and language. Your theme and language choices are kept on the device.

What we do not do

No advertising and no ad networks. No cross-app or cross-site tracking, and no advertising identifier (IDFA). No location data, no access to your contacts or microphone. Photo library access happens only when you actively pick a photo to attach. There is no feed, no chat and no public profile with your name; outside the Room nobody sees anything of yours. We do not sell or rent personal data to anyone.

Why we process this data

To provide the app and your account, to keep your stash, projects and row counts across devices, to run the label scanner when you ask for it, to run the Room and show your portfolio to other members, to keep the Room safe through the photo check, reports and blocks, to unlock and restore the paid features, and to fix crashes. Legal bases under the GDPR are the performance of our contract with you (Art. 6 para. 1 lit. b) and our legitimate interest in keeping the app working (Art. 6 para. 1 lit. f). The Swiss Data Protection Act (DSG) applies in parallel.

Service providers

We use a small set of processors, each only to run the service:

Apple for Sign in with Apple and for all payments. Google for Sign in with Google, if you choose it. Supabase for account authentication, database and photo storage, located in the European Union. RevenueCat for managing subscription entitlements. Anthropic for the label scanner, where it receives the single photo you scan and returns the extracted text, and for the portfolio photo check, where it receives each portfolio photo and returns approved or rejected. These providers process data on our behalf under data processing agreements.

Where data is stored and how long

Account data, your stash and your photos are stored on Supabase servers in the European Union. Crash reports are stored on our own server. We keep your data for as long as your account exists. You can delete your account at any time in the app under Settings; that removes your account, your stash, your projects, your photos, your portfolio, your ball in the Room, your crafting statistics and your counts.

Your rights

You have the right to access, correct, delete and export your personal data, and to object to or restrict its processing. The app can export your whole stash as CSV or PDF at any time, and the fastest way to delete everything is the in-app account deletion. For any other request, write to support@getklar.org. You also have the right to lodge a complaint with a data protection authority.

Children

My Yarn Stash is intended for a general audience and is not directed to children. We do not knowingly collect personal data from children under 13, or under 16 in the European Union. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the app evolves. The current version is always available at this page, with the date shown below. Material changes will be reflected here before they take effect.