Privacy Policy

Effective 13 August 2026

This policy explains what RowTally does with your data. The short version: your knitting and crochet projects stay on your device, we never ask for an account, and the only thing we receive is anonymous usage data that tells us which parts of the app people use.

Placeholders below marked [[ … ]] must be completed before publishing, and this draft should be reviewed by a lawyer in your jurisdiction. It was written from the app's actual data flows, but it is not legal advice.

1. Who is responsible

The controller responsible for processing your data is:

Aglo Solutions s.r.o.
Lužná 5
851 04 Bratislava
Slovakia
IČO: 35 973 072
DIČ: 2022129714
IČ DPH: SK2022129714

For anything relating to this policy or your data, contact us at rowtally@fringelo.com. [[If you are required to appoint a data protection officer, add their contact details here.]]

2. Data that stays on your device

Everything you create in RowTally is stored locally on your iPhone or iPad using Apple's Core Data framework:

• Project details: name, yarn name, needle or hook size, pattern name, your notes, target row count and colour
• Row counts and any additional stitch counters
• Session times recorded by the session timer
• App settings such as whether haptics and reminders are switched on

We do not upload this content to any server we operate, and we cannot see it. There is no account and no login, so this data is not linked to an identity at all.

If you have iPhone or iCloud backups enabled, your RowTally data is included in those backups. Those backups are handled by Apple under Apple's own privacy policy, not by us. If you delete the app without a backup, the data is gone — we have no copy and cannot restore it for you.

3. Usage analytics

RowTally uses PostHog to understand how the app is used. Our PostHog instance is hosted in the European Union (eu.i.posthog.com), operated by PostHog, Inc. as our processor under a data processing agreement.

Events we record. These are product events, not content:

• App opening, closing and moving to the background
• Which screens you view
• Creating, updating or deleting a project (including whether a row target was set — not the target itself)
• Incrementing a row, and the row number reached
• Starting and ending a counting session, and its duration
• The purchase screen being shown and where it was opened from
• A purchase or restore completing, and whether the subscription is active
• A rating prompt being shown
• Switching haptics or notifications on or off

Screen recordings. PostHog's session replay is enabled, which periodically captures screenshots of the app so we can see where people get stuck. Text input fields and images are masked before the screenshot leaves your device, so what you type into a field is not transmitted. Be aware of the limitation: masking applies to input fields and images, so text you have already saved and which the app displays back to you on screen — a project name in a list, for example — can still appear in a recording.

Device data. PostHog also receives technical information: device model, operating system version, app version, locale, timezone and a randomly generated identifier that distinguishes one installation from another. That identifier is not your Apple ID and is not linked to your name or email address, because we never collect either. Your IP address is processed transiently to deliver the request.

What we do not do. We do not collect your location. We do not use the Advertising Identifier (IDFA), do not show advertising, and do not ask for App Tracking Transparency permission because we do not track you across other companies' apps or websites. We do not sell your data and we do not share it for advertising.

Opting out. The app does not currently include a switch to turn analytics off. [[This is a gap you should close — see the note in the project README. Until an in-app control exists, state honestly how a user can object, e.g. by email, and how quickly you will act on it.]] You can object to this processing at any time by emailing rowtally@fringelo.com.

4. Purchases and subscriptions

RowTally Premium is sold through Apple's App Store. Apple processes your payment; we never see your card details, billing address or Apple ID.

We use RevenueCat (RevenueCat, Inc., United States) to check whether a subscription is active. RevenueCat receives a randomly generated app user ID, the transaction and receipt data Apple provides, and your subscription status. Because RevenueCat is based in the United States, this involves a transfer of data outside the EEA, which is covered by the European Commission's Standard Contractual Clauses. [[Confirm the current transfer mechanism in your RevenueCat data processing agreement.]]

Apple's own handling of your purchase is governed by Apple's privacy policy.

5. Notifications

If you enable reminders, RowTally schedules them locally on your device using iOS notifications. There is no push server involved: the reminder is created on your device and delivered by iOS, and the project name it mentions never leaves your phone. You can withdraw permission at any time in the iOS Settings app.

6. Rating prompts

After you have used the app a few times, RowTally may ask Apple to show its standard rating prompt. The prompt is displayed by iOS, and anything you write in a review goes to Apple, not to us. We only record that a prompt was shown.

7. This website

This website sets no tracking cookies and runs no analytics. We do not know who visits it.

The one exception is the online row counter. It saves your counters in your browser's local storage so they are still there when you come back. That data stays in your browser on your device, is never sent to us, and is not linked to any identifier. Clearing your browsing data deletes it. Nothing else on the site stores anything.

The site is hosted by Vercel Inc. (United States), which processes server log data including your IP address in order to deliver the pages and defend against abuse. Because Vercel is based in the United States, this can involve a transfer of data outside the EEA. [[Confirm the transfer mechanism in your Vercel data processing agreement — normally the Standard Contractual Clauses — and name it here.]]

8. Legal bases for processing

If the GDPR applies to you, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b) GDPR) — providing the app's functionality, and verifying your subscription so you get what you paid for.
• Legitimate interests (Art. 6(1)(f) GDPR) — usage analytics and screen recordings, to find bugs and understand which features are worth maintaining. [[Take advice on this: for session replay in particular, several EU supervisory authorities take the view that consent is required rather than legitimate interest. If you keep replay enabled, an opt-in is the safer route.]]
• Consent (Art. 6(1)(a) GDPR) — notifications, which only work if you grant permission, and which you can withdraw at any time.

9. How long we keep data

Project data lives on your device until you delete it or delete the app. We have no copy, so we cannot delete it for you.

Analytics events and screen recordings are retained in PostHog for [[retention period configured in your PostHog project, e.g. 12 months]], after which they are deleted automatically. Subscription records are kept for as long as needed to support your purchase and to meet statutory record-keeping obligations [[typically 7–10 years for tax purposes — confirm for your jurisdiction]].

10. Your rights

If the GDPR applies to you, you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted
• Restrict how we process your data
• Object to processing based on legitimate interests, including our analytics
• Receive your data in a portable format
• Withdraw consent at any time, without affecting processing that already happened

Write to rowtally@fringelo.com to exercise any of these. One practical limitation, stated plainly: because we deliberately never collect an identifier that points to you as a person, we usually cannot connect an analytics record to you. If you want us to delete analytics data relating to your installation, we will need the device identifier PostHog generated, which we can help you locate.

You also have the right to complain to a data protection supervisory authority. Because we are established in Slovakia, the authority responsible for us is the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky, dataprotection.gov.sk). If you live or work in another EU country, you may complain to your local authority instead.

11. Children

RowTally is not directed at children and we do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

If we change how the app handles data, we will update this page and change the effective date at the top. For material changes we will also note them in the app's release notes on our updates page, so the change is visible rather than silent.