DRAFT for review by the operator. Not legal advice.
Privacy notice for the Yuni beta
Last updated: 20 October 2026
Who runs Yuni
Yuni – Crochet Patterns is operated by Matteo Taroni (Nivation Solutions). Nivation Solutions is a project name, not a registered company. VAT number: [VAT number pending].
Contact for privacy questions and delete requests: [email protected]
The short version
- Your patterns, photos, notes, yarn and progress stay on your device. We can't see them.
- No ads, no analytics, no tracking cookies. We never sell data.
- A few things leave your device, only when you use a feature that needs them. Every service involved is listed below.
Services that receive data
- Cloudflare hosts the site and the app. It sees your IP address and the pages you open (request logs), stores beta and form data in its D1 database, and runs Turnstile, the robot check on online forms.
- formsubmit.co forwards bug reports and survey answers you send from the app to our inbox.
- huggingface.co serves the voice model file when you switch on the better voice. Only the download; no text or audio is sent.
- Your browser's cloud speech service (for example Google in Chrome, Apple in Safari) hears your voice when you turn on Online speech. With it off, voice stays on your device.
- Stripe handles payments, but only once payments are switched on. During this beta Stripe is in test mode: no real payments are taken.
What we store
- Form answers, including unfinished ones, when you answer an online Yuni form (also the Founding testers sign-up).
- Your tester code label: the name or handle we wrote next to your invite code, so we know whose code it is. The code itself is only stored as a scrambled (hashed) value.
- Device sessions: one row per signed-in device with a hashed sign-in token and when it was created and last used. No device ID, no email.
- Hashed IP addresses for rate limiting: short counters made from a salted hash of your IP address, to stop people guessing codes or spamming forms. They can't be turned back into your address.
How long we keep it
- Unfinished form answers: deleted automatically 30 days after your last change.
- Finished form answers: until you or the form's owner delete them, and at the latest when the beta ends. [operator to confirm]
- Tester code label: until the beta ends or you ask us to delete it.
- Device sessions: until you sign out, your code is revoked, or 180 days without use.
- Rate-limit counters: minutes to one day, then deleted.
- Bug reports and survey answers: in our inbox until the beta ends or you ask us to delete them.
- Cloudflare request logs: Cloudflare's own short retention.
How to delete your data
- On your device: Settings → Delete everything on this device in the app.
- Form answers: Delete my answers on the form, before or after sending.
- Beta sign-in: Sign out this device.
- Anything else we hold: write to [email protected] with “Delete my data”. We answer within one month.
Your rights
You can ask to see, correct or delete your data, or object to how it is used. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).