Privacy Policy

Last updated: 2 July 2026 · Applies to crochets.app and the Crochets app

The short version: we collect the minimum needed to run Crochets — your account details, your app preferences, and payment records. We never sell your data, we don't run third-party advertising trackers, and you can export or delete everything by emailing us.

1. Who we are

Crochets is operated by Boroto Ltd, a company registered in the United Kingdom ("we", "us"). We are the data controller for the personal data described in this policy. Contact: privacy@crochets.app.

2. What we collect and why

Account data — name, email address and (if you sign in with Google) your Google profile ID. Processed by our authentication provider, Clerk Inc. Purpose: creating and securing your account. Legal basis: performance of a contract.
Preferences & content — your onboarding answers (skill level, goals, handedness, units, pattern terms), projects, patterns and charts you create. Purpose: making the app work and personalising it for you. Legal basis: performance of a contract.
Payment data — handled entirely by Stripe. We never see or store your card number. We keep records of your subscription status and invoices. Legal basis: contract and legal obligation (tax records).
Photo renders — when you use "See it in real life", your chart description (not your personal data) is sent to an AI image service to generate the preview.
Technical data — our hosting provider (Vercel) processes IP addresses in server logs and uses your IP-derived country to show prices in your currency. We do not build profiles from this.

3. Cookies

We use strictly necessary cookies only: authentication session cookies (Clerk) and your saved preferences. We do not use advertising or cross-site tracking cookies. Because we only use essential cookies, no cookie consent banner is required — if that changes, we will ask first.

4. Who we share data with

Only processors needed to run the service: Clerk (authentication), Stripe (payments), Vercel (hosting), and our image-generation provider (chart descriptions only). Each processes data under their own GDPR-compliant terms. We never sell personal data, and we don't share it with advertisers.

Some outbound yarn-shop links are affiliate links; the shop knows you came from Crochets but receives no personal data from us.

5. Embedded videos

Stitch tutorials are embedded from YouTube using its privacy-enhanced (no-cookie) player. YouTube may still process technical data when you press play, under Google's privacy policy.

6. Where your data lives and how long

Data is stored within the EU/UK or under appropriate safeguards (Standard Contractual Clauses) where processors operate elsewhere. Account data is kept while your account exists and deleted within 30 days of account deletion; invoicing records are kept as long as tax law requires.

7. Your rights

Under UK/EU GDPR you may access, correct, export, restrict or delete your personal data, object to processing, and withdraw consent at any time. Email privacy@crochets.app and we'll respond within 30 days. You may also lodge a complaint with your supervisory authority (in the UK: the ICO; in Italy: the Garante).

8. Children

Crochets is not directed at children under 13, and we don't knowingly collect their data. Crochet, however, is for everyone — parents can use Crochets together with younger crafters.

9. Changes

If we materially change this policy, we'll email account holders and note the new date above.