Privacy Policy

Last updated: 2026-07-22

Who we are

NumKnit ("NumKnit", "we", "us") is a mobile application operated by an independent developer based in Japan. For anything related to this policy or to your personal data, contact us at [email protected]. We are the controller of the personal data described below.

This policy applies to the NumKnit mobile app and to numknit.com.

What we collect

We designed NumKnit to keep as much as possible on your device. In practice we handle four kinds of data:

  • Account data. When you sign in with Google, Firebase Authentication provides us with a user ID, your email address, your display name and your profile picture URL. We do not receive your Google password.
  • Measurements and gauge. The numbers you enter to generate a knitting chart are sent to our server, used to calculate the chart and pattern, and returned to you. They are not stored on our server afterwards.
  • Data that never leaves your device. Your projects, row counters, colourwork designs and any photo you import are stored only in your phone's local storage and processed on the device. They are never uploaded to us.
  • Advertising and technical data. Google AdMob, our advertising partner, processes your advertising identifier, IP address, device and app information and your interactions with ads. Our servers and delivery network also keep short-lived technical logs (such as IP address and request time) for security and troubleshooting.

We do not use analytics or crash-reporting SDKs, and we do not build advertising profiles ourselves.

Why we use it, and our legal basis

If you are in the European Economic Area or the United Kingdom, the General Data Protection Regulation requires us to name a legal basis for each purpose:

  • Providing the app — creating and maintaining your account, generating charts and patterns from your measurements. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • Personalised advertising and access to your device's advertising identifier — only where you have agreed through the consent form shown in the app. Legal basis: consent (Art. 6(1)(a) GDPR and the ePrivacy Directive).
  • Non-personalised advertising, security, abuse prevention and troubleshooting — keeping the free app running and safe. Legal basis: our legitimate interests (Art. 6(1)(f) GDPR).
  • Answering your requests — replying to emails you send us and handling privacy requests. Legal basis: legitimate interests and legal obligation (Art. 6(1)(c) and (f) GDPR).

Advertising

NumKnit is free and is funded by advertising delivered by Google AdMob. Google acts as an independent controller for the data it processes for advertising purposes; its practices are described in the Google Privacy & Terms site and in "How Google uses information from sites or apps that use our services".

If you are in the EEA, the UK or Switzerland, the app shows a consent form before any personalised advertising is enabled, and you can change your choice at any time from Settings → Privacy settings inside the app. On iOS, we also ask for your permission before any tracking through Apple's App Tracking Transparency prompt. If you decline, you will still see ads, but they will be non-personalised.

You can also reset or delete your advertising identifier in your device settings at any time.

Who we share data with

We do not sell your personal data and we do not share it for money. We rely on the following providers:

  • Google — Firebase Authentication (sign-in), Google Cloud (hosting our chart generation service) and Google AdMob (advertising).
  • Cloudflare — delivery of numknit.com and of the proxy that forwards app requests to our service.

We may also disclose data where we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims.

International transfers

We operate from Japan, which the European Commission has recognised as providing an adequate level of data protection. Our providers may process data in other countries, including the United States. Where data leaves the EEA or the UK to a country without an adequacy decision, the transfer is covered by the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) agreed with those providers.

How long we keep it

  • Account data: until you delete your account, after which it is removed immediately.
  • Measurements and gauge: not retained after the chart is generated.
  • Technical logs: a short period, normally no longer than 90 days.
  • Projects, designs and imported photos: kept on your device until you delete them or uninstall the app.

Your rights

Depending on where you live, you may have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw a consent you have given without affecting processing carried out before the withdrawal.

You can delete your account and the data linked to it directly in the app, or ask us to do it — see our account deletion page. For any other request, write to [email protected]. We answer within one month and never charge for a first request. We may ask you to confirm the email address linked to your account before acting on a request.

If you are in the EEA or the UK, you also have the right to lodge a complaint with your national data protection authority (Art. 77 GDPR).

United States privacy rights

If you are a resident of California, Colorado, Connecticut, Virginia or another US state with a comprehensive privacy law, you may have the right to know what personal information we collect, to obtain a copy of it, to have it deleted or corrected, and to opt out of "sales" and of "sharing" or "targeted advertising".

We do not sell personal information for money, and we do not knowingly sell or share the personal information of anyone under 16. However, personalised advertising may qualify as "sharing" for cross-context behavioural advertising under those laws. To opt out, open Settings → Privacy settings in the app and turn off personalised advertising; on iOS you can also deny tracking permission. We do not collect sensitive personal information, and we do not use it to infer characteristics about you. We will not discriminate against you for exercising these rights.

Other regions

Users in Japan (Act on the Protection of Personal Information), Brazil (LGPD), Canada (PIPEDA), South Korea (PIPA), Türkiye (KVKK) and other countries have comparable rights under their local law. We handle all such requests through the same contact address, [email protected], without distinguishing between jurisdictions.

Children

NumKnit is not directed at children. We do not knowingly collect personal data from anyone under 13, or under 16 in the European Economic Area. If you believe a child has provided us with personal data, contact us at [email protected] and we will delete it.

Security

Traffic between the app and our service is encrypted in transit, sign-in is delegated to Firebase Authentication so that we never handle your password, and access to our systems is limited to the operator of the service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy as the app evolves or as the law changes. The date at the top of this page always shows the current version. If a change is significant, we will make it visible in the app before it takes effect.

Language

This policy is published in every language NumKnit supports. If there is any inconsistency between versions, the English version prevails.

Back to home