Privacy Policy

1. Information We Collect

Information you provide directly:

• Email address (required to create an account)
• Project details you enter: project names, patterns, yarn details, needle sizes, target completion times, notes
• Photos you upload of your projects
• Counter labels and values for row counting
• Marketing consent preferences for each photo

Information collected automatically when you use the App:

• Knitting session data: start times, end times, pause durations, project associations
• Usage data: which screens you view, which actions you take, when you open the app
• Device information: device model, operating system version, app version
• Crash and error reports

We do not collect:

• Location data
• Contacts from your device
• Microphone or audio data
• Health or fitness data from other apps
• Advertising identifiers

2. How We Use Your Information

We use the information we collect to:

• Provide the App's core functionality (tracking your knitting projects, sessions, stats, and photos)
• Calculate your personal statistics, streaks, and achievements
• Sync your data across your devices
• Communicate with you about your account (such as sign-in codes)
• Improve the App by understanding how it is used
• Respond to your support requests
• Use photos in our marketing only where you have explicitly granted marketing consent for that specific photo

3. Legal Basis for Processing

For users in the UK and European Economic Area, we process your personal data under the following legal bases under the UK GDPR and EU GDPR:

• Contract: to provide the App's services to you
• Consent: for marketing use of your photos (you can withdraw consent anytime in the Account screen)
• Legitimate interests: to improve the App, prevent fraud, and ensure the App's security
• Legal obligation: to comply with applicable laws

4. Who We Share Information With

We do not sell your personal data to anyone.

We share data only with the following service providers, who help us operate the App:

• Supabase (database and authentication): stores your account data and project data on secure servers in the European Union
• Resend (email delivery): processes your email address to deliver sign-in codes
• Expo / EAS (app distribution): for build and deployment infrastructure

These providers are contractually required to protect your data and use it only to provide services to us.

We may also disclose information if required by law, court order, or to protect the rights, property, or safety of Cabled, our users, or others.

5. International Data Transfers

Cabled is operated from the United Kingdom. Your data is primarily stored on servers within the European Union. If you access the App from outside the UK or EU, you understand that your information will be transferred to and processed in these locations.

For transfers from the UK or EU to other countries, we rely on appropriate safeguards including Standard Contractual Clauses approved by the UK Information Commissioner and European Commission.

6. Data Retention

We retain your account data and content for as long as your account is active. If you delete your account, we permanently delete your projects, sessions, photos, and counters within 30 days, except where we are legally required to retain certain information.

You can delete your account at any time from the Account screen within the App.

7. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to erasure")
• Object to or restrict our processing
• Receive your data in a portable format
• Withdraw consent (where consent is the legal basis for processing)
• Lodge a complaint with a supervisory authority (the Information Commissioner's Office in the UK)

Under the California Consumer Privacy Act (CCPA), California residents have rights including the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising these rights.

To exercise any of these rights, contact us at liane@cabled.app.

8. Children

Cabled is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete that information.

For users in the European Economic Area, the minimum age to use Cabled is 16, unless local law allows a lower age with parental consent.

9. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), encrypted database storage, and access controls. No method of transmission over the internet is 100% secure, however, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by email. The "Last updated" date at the top of this policy indicates when it was last revised.