Privacy Policy

Last updated: 10 July 2026 · Wersja polska

1. Data controller

The controller of your personal data is Elżbieta Klupsch, correspondence address: ul. Władysława Broniewskiego 14, 76-200 Słupsk, Poland. For matters concerning personal data you can contact us at contact@wooly-app.com.

2. What data we process

• Account data — the e-mail address and password (stored in encrypted form) provided during registration.
• Content saved in the app — your yarn stash, projects, notes and photos added to the progress timeline. They are private and visible only after signing in to your account.
• Content submitted to the shared library — stitches, techniques and yarns you submit voluntarily; once approved, they become visible to other Users.
• Payment data — information about the status of your trial and Premium subscription; payments are handled by the external operator Lemon Squeezy, and we do not store card details.
• Technical data — basic server logs (IP address, request time) necessary to ensure the security and stability of the service.

3. Purposes and legal bases of processing

• Providing the Wooly service (creating and operating an account, storing your content) — Art. 6(1)(b) GDPR (performance of a contract).
• Handling payments and settlements — Art. 6(1)(b) and (c) GDPR.
• Ensuring the security of the service and pursuing claims — Art. 6(1)(f) GDPR (legitimate interest).
• Responding to messages sent to the contact address — Art. 6(1)(f) GDPR.

4. Ravelry search

The "Search Ravelry" feature forwards the query you type to the Ravelry service (Ravelry LLC, USA) in order to fetch search results. Technical data (e.g. the IP address) may be transferred together with the query. The way Ravelry processes data is described in the privacy policy available at ravelry.com.

5. Data recipients

• Supabase Inc. — provider of the app's database and infrastructure. Data is stored on servers in the European Union region (Stockholm, Sweden — EEA), under a data processing agreement (DPA).
• Lemon Squeezy, LLC (USA) — the payment operator handling the Premium subscription. Data transfers to the USA take place on the basis of appropriate safeguards provided for in the GDPR (including standard contractual clauses). Details are described in the Lemon Squeezy privacy policy.
• Ravelry LLC — only to the extent described in section 4.

We do not sell your data and we do not share it for marketing purposes.

6. Retention period

Account data and saved content are stored until the account is deleted. After account deletion, data is erased promptly, at the latest within 30 days, except for data we are required to keep by law (e.g. billing documents) or until claims become time-barred.

7. Your rights

You have the right to: access your data, rectify it, erase it, restrict processing, data portability, and to object to processing based on legitimate interest. You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or with your local supervisory authority.

8. Voluntary provision of data

Providing data is voluntary, but necessary to create an account and use the app — the entire app is available after signing in.

9. Automated decision-making

We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects.

10. AI-generated images

Some stitch photos in the Stitch Catalogue are generated by artificial intelligence — such photos are clearly labelled in the app. We do not use your content (stash, projects, photos) to train AI models.

11. Changes to this policy

We will announce material changes to this policy in the app or by e-mail. The current version is always available on this page.