Privacy notice

Last updated: 10 November 2026

The short version

• Your patterns, photos, notes, yarn and progress stay on your device. We can't see them.
• No ads, no analytics, no tracking cookies. We never sell data.
• A few things leave your device, only when you use a feature that needs them. Every service involved is listed below.
• Today nothing is on sale, so no purchase records exist yet. When payments open and you buy a Founder spot or pay the founding deposit, we will keep a purchase record. Your card details go to Stripe, never to us.
• Privacy questions and delete requests: help@yuniyarn.com

Services that receive data

• Cloudflare hosts the site and the app. It sees your IP address and the pages you open (request logs), stores beta, form and Founders data in its D1 database, and runs Turnstile, the robot check on online forms.
• formsubmit.co forwards bug reports and survey answers you send from the app to our inbox.
• huggingface.co serves the voice model file when you switch on the better voice. Only the download; no text or audio is sent.
• Your browser's cloud speech service (for example Google in Chrome, Apple in Safari) hears your voice when you turn on Online speech. With it off, voice stays on your device.
• Stripe handles payments when you pay (the founding deposit or a Founder spot). It receives your card details, your email and the payment, and handles them under its own privacy notice. We never see or store your full card details.

What we store

• Form answers, including unfinished ones, when you answer an online Yuni form (also the Founding testers sign-up, with the optional birthday wish: a first name or handle and a day and month, never a year or an age).
• Your tester code label: the name or handle we wrote next to your invite code, so we know whose code it is. The code itself is only stored as a scrambled (hashed) value.
• Device sessions: one row per signed-in device with a hashed sign-in token and when it was created and last used. No device ID, no email.
• Founder spots and purchase records, when you claim a Founder spot or pay: your email address and the name you chose, your Founder spot (kept with an internal number so spots never mix up; Founders get no number or badge), what you paid (amount, currency and the Stripe payment reference), when, and any refund; the time you ticked the box to start your plan straight away, with the exact wording and the Terms version you agreed to; when you redeemed your pattern code or exported a pattern with the waiver box ticked, with that wording and the pattern name; your pattern code and your Founder Pattern choice. Stripe also gives us a customer reference and a card fingerprint (never the card number): we keep those and your email only as scrambled (hashed) values, so each person gets one Founder spot. We use all this to give you what you bought, keep the one-spot rule, handle refunds and chargebacks, and keep the records the law requires.
• Withdrawals: if you withdraw with the online form (Withdraw from contract here), we keep what you sent: your name, the purchase you named, the email for the acknowledgement and the time it arrived, and, if your device has a Founder key, which Founder spot it belongs to.
• App sign-in for Founders: when a paid Founder opens the app, we link this device's sign-in (a scrambled key, when it was last used) to the Founder spot, as an invite code does for beta testers.
• Unpaid checkouts: when you start a Founder checkout we hold a spot for 15 minutes with your email and the name you chose. If you don't pay, the hold expires and no number is given.
• Credits wall, only if you opt in: the name you choose is shown publicly on the credits wall and the Founders ticker. You can change or remove it at any time.
• Beta waitlist: if you join the beta waitlist, we store the email address you type, a scrambled (hashed) key made from it so each person is on the list once, the time you ticked the consent box and the version of its wording, and a short tag for where you joined (for example the link in our Instagram profile). We use it only to send you one email when the beta opens. We never share it, there is no newsletter and no tracker, and nothing is paid for on that page.
• Founders email lists: if you ask to be told when Founder spots open, or join the waitlist once the Founder spots are gone, we store the email address you type and, if you give one, a name. We use it only to send you that one email (when Founder spots open, or about your place on the waitlist). We never share it and never use it for anything else.
• Messages you send us: if you use “Contact us” in the app, we store your email address, the topic and your message, plus the app version, a short device line (for example “iPhone, Safari 18”) and a screenshot only if you leave them in. We use them only to reply to you and fix problems. We never share them and never use your email for anything else.
• Hashed IP addresses for rate limiting: short counters made from a salted hash of your IP address, to stop people guessing codes or spamming forms. They can't be turned back into your address.

Why we may use it

• To give you what you asked for: the beta, the forms, your Founder spot and your purchases (GDPR article 6(1)(b), a contract with you).
• To keep purchase and tax records (article 6(1)(c), a legal obligation).
• To keep Yuni safe and fair: rate limits, the robot check, one Founder spot per person and stopping refund abuse (article 6(1)(f), our legitimate interest).
• Things you choose to turn on: the Founders email list, the beta waitlist, your name on the credits wall, the birthday wish and Online speech (article 6(1)(a), your consent, which you can withdraw at any time).

How long we keep it

• Unfinished form answers: deleted automatically 30 days after your last change.
• Finished form answers: until you or the form's owner delete them, and at the latest when the beta ends.
• Tester code label: until the beta ends or you ask us to delete it.
• Device sessions: until you sign out, your code is revoked, or 180 days without use.
• Purchase records, Founder spots, consent and waiver times, waiver confirmations and withdrawal statements: 10 years, as Italian tax and accounting law requires. The scrambled one-spot values are kept with them.
• Unpaid checkout holds: up to 24 months, then deleted.
• Your name on the credits wall: until you remove it, or your Founder spot is retired after a refund.
• Beta waitlist: deleted once the one email has been sent, whenever you ask us to delete it, and at the latest 12 months after you signed up.
• Founders email lists: deleted once that email has been sent, and at the latest when the beta ends.
• Contact messages: kept for up to 90 days after we receive them, then deleted automatically, whether or not we have answered.
• Rate-limit counters: minutes to one day, then deleted.
• Bug reports and survey answers: in our inbox until the beta ends or you ask us to delete them.
• Cloudflare request logs: Cloudflare's own short retention.

How to delete your data

• On your device: Settings → Delete everything on this device in the app.
• Form answers: Delete my answers on the form, before or after sending.
• Beta sign-in: Sign out this device.
• Your name on the credits wall: remove it on your Founder card at any time.
• Founders email lists: we send you one email only, so there is nothing to unsubscribe from later. To be taken off the list before that, write to help@yuniyarn.com with “Remove me from the Founders list” and we delete your email.
• Anything else we hold: write to help@yuniyarn.com with “Delete my data”. We answer within one month. Purchase records that the law makes us keep stay until their time is up; we tell you which.

Your rights

You can ask to see, correct or delete your data, to restrict or object to how it is used, and to get a copy in a common format. Where you gave consent, you can withdraw it at any time; that doesn't change what was done before. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).

Also read: Terms of Service Refund policy Cookies Withdraw from contract here

Yuni homeOpen the app

Yuni – Crochet Patterns is run by Matteo Taroni (Nivation Solutions, a project name, not a registered company), the data controller for the data described here. Postal address: [TODO: postal address of the data controller - Matteo to supply]. Contact: help@yuniyarn.com.