Privacy Policy.

Who is responsible

The controller for this app is Alain Kessler, a sole proprietorship registered in Switzerland, operating under the brand Klar. For any privacy question or request, contact support@getklar.org.

What we collect

Account data.We store your email address to sign you in and to keep your stash across devices. You can sign in with email, with Apple, or with Google. With Sign in with Apple you may use Apple's private relay email; that works fine. When you sign in with Google, we receive your email address and basic profile from Google — nothing else from your Google account. A display name and an avatar are optional and set by you.

Your stash and projects. The yarn entries you create — name, brand, color, fiber, weight, yardage, price, notes — the patterns and projects you add, and the photos you attach. Photos are stored with your account so they follow you across devices. Free accounts can keep up to 30 entries; this limit is enforced on our server.

Your counting. The current row count and target rows of a project, and — if you use the timer — how long you have worked on it. Repeat counters and side counters are stored on your device only and never reach our servers.

Purchase status. Purchases are processed by Apple. We receive only the resulting entitlement status (active or not) through our subscription provider RevenueCat. We never receive your card or payment details.

Crash reports. If the app crashes, a technical report (stack trace, device model, app version) is sent to our own self-hosted crash server. These reports are for fixing bugs and are not used for advertising or profiling.

A one-time clipboard read.If you arrived through a link from someone who recommends the app, that link places a short token on your clipboard. On the first cold start the app reads the clipboard once, and only accepts text matching that exact token format. iOS shows its own “pasted from” notice when this happens. Anything else on your clipboard is ignored and never leaves your device, and the check does not run again.

The camera and the label scanner

The camera has exactly two jobs, and you choose when to use it.

Scanning a yarn label (Premium).When you photograph a yarn label — or the yarn itself, if the label is long gone — that one photo is sent to our server and passed to Anthropic's Claude model, which reads brand, fiber and yardage out of the image. The photo is used for that single extraction and is not kept by us afterwards; only the extracted text fields you choose to save end up in your stash. Scans are rate-limited on our server.

Reading an invite code.The scanner that reads a friend's QR invite code runs entirely on your device. Nothing is recorded and no image leaves your phone.

What stays on your phone

Repeat and side counters.The rhythm of your pattern (“increase every 6 rows”) and any extra counters you run alongside a project are stored in the app's local storage on your device.

Reminders. Project reminders and the monthly summary are local notifications scheduled on your phone. There is no push server involved; we do not know whether they fired or whether you opened them.

Appearance and language. Your theme and language choices are kept on the device.

What we do not do

No advertising and no ad networks. No cross-app or cross-site tracking, and no advertising identifier (IDFA). No location data, no access to your contacts or microphone. Photo library access happens only when you actively pick a photo to attach. There is no feed and no public profile. We do not sell or rent personal data to anyone.

Why we process this data

To provide the app and your account, to keep your stash, projects and row counts across devices, to run the label scanner when you ask for it, to unlock and restore the paid features, and to fix crashes. Legal bases under the GDPR are the performance of our contract with you (Art. 6 para. 1 lit. b) and our legitimate interest in keeping the app working (Art. 6 para. 1 lit. f). The Swiss Data Protection Act (DSG) applies in parallel.

Service providers

We use a small set of processors, each only to run the service:

Apple for Sign in with Apple and for all payments. Google for Sign in with Google, if you choose it. Supabase for account authentication, database and photo storage, located in the European Union. RevenueCat for managing subscription entitlements. Anthropic for the label scanner: it receives the single photo you scan and returns the extracted text. These providers process data on our behalf under data processing agreements.

Where data is stored and how long

Account data, your stash and your photos are stored on Supabase servers in the European Union. Crash reports are stored on our own server. We keep your data for as long as your account exists. You can delete your account at any time in the app under Settings; that removes your account, your stash, your projects, your photos and your counts.

Your rights

You have the right to access, correct, delete and export your personal data, and to object to or restrict its processing. The app can export your whole stash as CSV or PDF at any time, and the fastest way to delete everything is the in-app account deletion. For any other request, write to support@getklar.org. You also have the right to lodge a complaint with a data protection authority.

Children

My Yarn Stash is intended for a general audience and is not directed to children. We do not knowingly collect personal data from children under 13, or under 16 in the European Union. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the app evolves. The current version is always available at this page, with the date shown below. Material changes will be reflected here before they take effect.