privacy policy

Draft — pending legal review.

This policy explains what personal data knyt collects, why we need it, and what you can decide about it. It covers knyt.studio and the knyt app.

Who is responsible

[Company legal name], [Org. no.], [Postal address], Sweden, is the controller of the personal data described here. Privacy questions go to hello@knyt.studio.

What we process, and why

Your account — name, email address, your password as a hash, your language and other preferences, and when you signed in. We need it to give you an account and keep it secure. Legal basis: performance of our contract with you.

The patterns you import — the PDF or the photos you upload, the text and structure our AI extraction reads out of them, and the projects, row counters and notes you build on top. Your imports are private to you. We never publish them, never share them with other users, never sell them, and never use them to train AI models. Legal basis: performance of our contract with you.

The newsletter — your email address and whether you confirmed it. Legal basis: your consent. Every newsletter has an unsubscribe link, and unsubscribing takes effect immediately.

Usage statistics — page views and a few key events (sign-up, log in, newsletter sign-up), collected on our own server and passed to Google Analytics 4. Nothing is collected until you accept analytics cookies, and you can withdraw that at any time on the cookie policy page. Legal basis: your consent.

Messages you send us — whatever you write in the contact form or by email, so that we can answer. Legal basis: our legitimate interest in replying to the people who write to us.

Server logs — IP address, browser and the pages requested, kept briefly so we can operate the service and investigate abuse. Legal basis: our legitimate interest in running a secure service.

Who else handles your data

We use a small number of suppliers to run knyt. Each of them processes data on our instructions under a data processing agreement.

• Hosting and database — HostUp, on servers in Sweden.
• File storage for the patterns you upload — HostUp S3-compatible object storage, in Sweden.
• Transactional email (confirmations, password resets) — Lettermint, in the EU.
• Pattern extraction — Anthropic (the Claude API). The pattern file you import is sent there to be read and structured; no account data goes with it beyond what the pattern itself contains. Anthropic is a US company, and the transfer rests on the European Commission's Standard Contractual Clauses. Your patterns are not used to train models.
• Usage statistics — Google Analytics 4, and only if you accept analytics cookies. The data is sent from our server, not from your browser.
• Error monitoring — where enabled, technical error reports that can contain your user id and the page you were on.

We do not sell personal data, and we use no third-party advertising cookies.

How long we keep it

• Account data stays until you delete your account.
• When you ask us to delete your account, a seven-day cooling-off period starts. The account is deactivated during it and you can still change your mind. After that your personal data and your imported patterns are erased.
• Your email address stays reserved after deletion, so that nobody else can register an account in your name. Nothing else is kept with it.
• Newsletter subscriptions stay until you unsubscribe.
• Server logs are kept briefly, for operations and security.

Your rights

Under the GDPR you can:

• See your data — download everything we hold about you as a JSON file, from the account area.
• Correct it — change your details in the account area, or write to us.
• Have it erased — delete your account from the account area.
• Object to the processing we base on legitimate interest, and withdraw your consent to the newsletter or to analytics at any time.
• Take it with you — the JSON export is machine-readable and portable.

Write to hello@knyt.studio and we answer within a month. If you believe we handle your data wrongly, you can complain to the Swedish supervisory authority, Integritetsskyddsmyndigheten (IMY), at imy.se.

Cookies

Every cookie knyt sets, and how to change your choices, is listed in the cookie policy.

Changes to this policy

We update this policy as the service changes. The date at the top says when it last changed, and material changes are announced in the app or by email.

Contact

[Company legal name], [Postal address] — hello@knyt.studio