This page is used to inform users of the Crochet App mobile application, the website newcrochet.store and its pattern shop, and the creator console at admin.newcrochet.store (together, the “Service”) about how we collect, use and disclose personal data. The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, unless otherwise defined here.
Who is responsible for your data
The controller of your personal data is SIA “Crochet App”, registration number 40203493865, Čiekurkalna 2. līnija 4-1, Rīga, LV-1026, Latvia (“we”, “us”, “our”). You can contact us about privacy at hello@newcrochet.store.
Information we collect
Account data. Your email address and, if you sign in with Google, Apple or Facebook, the identifier and basic profile details that provider shares with us. Your name is optional. If you sign in with a password, it is stored only in hashed form by our authentication provider.
Your content. The projects, yarn stash, hooks, notes, photos and PDF files you save in the app, so that they are available on your devices.
Subscriptions. Whether you have an active subscription or trial, and its history. Payment for subscriptions is handled by the Apple App Store or Google Play; we do not receive your card details.
Shop purchases. When you buy a pattern on our website: your account identifier and email, the pattern bought, the price, tax and fees, your billing country, the time of purchase, and the record that you consented to immediate delivery and the waiver of your right of withdrawal. Card details are entered directly with Stripe; we never receive or store your full card number.
Creator data. If you become a Creator: your public creator name and any profile details you add, the patterns, images and PDFs you submit, your sales and earnings, and your payout status. To pay you, our payment partner Stripe collects identity, address, date of birth, bank account and tax details from you directly; we receive the information we need to run payouts and to meet our tax reporting duties (see “Tax reporting” below).
Complaints and messages. If you contact us or report content, we keep your message, your contact details and what we did about it.
Usage and device data. Information about how you use the app, such as screens viewed and features used, your device type, operating system, app version, language, approximate location derived from your IP address, and advertising or device identifiers where you allow it.
Log and crash data. Whenever you use our Service, in a case of an error in the app we collect data and information (through third party products) on your phone called Log Data. This Log Data may include information such as your device Internet Protocol (“IP”) address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics.
Notifications. If you allow push notifications, a token that lets us send them to your device.
Why we use your data, and on what legal basis
- To provide the Service — create your account, sync your content, unlock your subscription and the patterns you own, and run the creator console. Legal basis: performance of our contract with you.
- To sell patterns and pay Creators — process payments, deliver purchases, keep a ledger of sales, calculate and pay Creators’ earnings, and handle refunds and chargebacks. Legal basis: performance of a contract, and our legal obligations under accounting and tax law.
- To publish community patterns — show a Creator’s name and patterns publicly in the app and the shop, and review submissions before publication. Legal basis: performance of our contract with the Creator.
- To handle complaints about content — including copyright notices, which we may share with the Creator concerned. Legal basis: our legal obligations as a hosting service, and our legitimate interest in keeping the marketplace lawful.
- To report to tax authorities — see “Tax reporting”. Legal basis: legal obligation.
- To send you emails — essential messages about your account, purchases and payouts; messages that help you use the app, such as learning tips, reminders and progress updates; announcements of changes to the Service; and announcements of new products, offers or research opportunities. Legal basis: performance of a contract for essential messages; our legitimate interest or your consent for the others. You can unsubscribe from non-essential emails at any time.
- To understand and improve the Service, and to fix errors — analytics and crash reports. Legal basis: our legitimate interest, or your consent where the law requires it.
- To measure our marketing and show advertising — attribution of app installs to our campaigns, and ads in the app. Legal basis: your consent, which we ask for in the app and which you can withdraw at any time in the app’s settings or your device settings.
- To prevent fraud and abuse, and to enforce our terms. Legal basis: our legitimate interest, and our legal obligations.
Service providers and other recipients
We do not sell your personal data. We share it only with the following, and only as needed for the purposes above:
- Google (Firebase and Google Cloud) — authentication, databases, file storage, hosting, cloud functions, push notifications, remote configuration, Google Analytics for Firebase, Firebase Crashlytics, and data analysis.
- Google Gemini — when a Creator imports a pattern from a PDF in the creator console, the PDF is sent to Google’s Gemini AI service to convert it into a pattern draft. It is not used for any other purpose.
- Amazon Web Services — storage of pattern images and sending of emails.
- Stripe — payments in the shop, tax calculation, fraud prevention, and Creator payouts and identity checks. Stripe acts as an independent controller for some of this data; see Stripe’s privacy policy.
- RevenueCat — management of app subscriptions.
- Apple App Store and Google Play — app distribution and subscription billing.
- AppsFlyer and Meta (Facebook App Events) — measuring which marketing campaigns lead to app installs, with your consent.
- Google AdMob — showing ads in the app, with your consent where required.
- The State Revenue Service of Latvia and other public authorities — where the law requires it, including tax reporting and responding to lawful requests.
- Buyers and the public — a Creator’s public creator name and published patterns are visible to everyone. Buyers do not receive a Creator’s contact or payment details, and Creators do not receive Buyers’ personal data.
- Creators — if you send us a copyright or content complaint, we may share it with the Creator concerned, unless you ask us not to share your contact details.
These service providers have access to your personal data only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose.
International transfers
Some of these providers process data outside the European Economic Area, including in the United States. Where they do, the transfer is protected by an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework) or by the European Commission’s Standard Contractual Clauses.
Tax reporting (DAC7)
EU law requires marketplaces to collect information about sellers and report their earnings. If you are a Creator who earns money through the marketplace, we report your name, address, date of birth, tax identification number, bank account and the amount you earned in each quarter to the State Revenue Service of Latvia, which may pass it to the tax authority of your country. We keep this information for 10 years, as the law requires.
How long we keep your data
- Account data and your content: for as long as your account exists.
- Purchase records, Creator earnings and payout records: for as long as required by accounting and tax law — up to 10 years — even after an account is deleted, because they are financial records.
- Complaints about content and our decisions on them: for as long as needed to handle them and defend legal claims.
- Analytics and crash data: for the retention periods set in the respective services, generally no longer than 14 months.
Account and data deletion
In order to delete your Crochet App account from the app - navigate to the app → Profile → Account Details → Delete Account. Should you ever decide to delete your Account and all the stored data on our systems, you may also do so by emailing hello@newcrochet.store. When we receive these requests, we delete your user information from all our systems within 30 days, and we will inform you via email once it is done.
The only exception is information we must keep by law, such as the purchase, earnings and tax records described above. We keep those separately, for the period the law requires, and use them for no other purpose. Deleting your account also removes your access to patterns you have bought.
Your rights
You have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you gave at any time. To exercise these rights, contact us at hello@newcrochet.store. You also have the right to lodge a complaint with a supervisory authority — in Latvia, the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv) — or with the authority in the country where you live.
Cookies and similar technologies
The app does not use cookies itself, but it uses third-party software development kits (for analytics, crash reporting, marketing attribution and ads) that collect device identifiers as described above. Where these require your consent, we ask for it in the app.
Our website and creator console use storage in your browser to keep you signed in, and analytics to understand how the website is used. When you pay, Stripe’s checkout page uses its own cookies to process the payment and prevent fraud. You can control cookies in your browser settings; if you refuse some of them, parts of the Service may not work.
Security
We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. Access to personal data is limited to those who need it, data is encrypted in transit, and payment data is handled only by Stripe. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.
Links to other sites
This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.
Children’s privacy
These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.
Changes to this Privacy Policy
We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page, and we will notify you directly of significant changes.
Contact us
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at hello@newcrochet.store, or write to SIA “Crochet App”, Čiekurkalna 2. līnija 4-1, Rīga, LV-1026, Latvia.