Privacy policy
Last updated: 25 October 2026
The short version: your patterns stay private to you. Your friends see only the progress you choose to share. We don't sell your data, show ads, use tracking or put your patterns through AI. You can download or delete everything at any time.
Who we are
ktog is run by Natalie Guerra in Denmark, who is the data controller for your personal data. Contact: hello@ktog.app.
What we collect and why
| Data | Why we need it | Legal basis (GDPR) |
|---|---|---|
| Email, username, display name, password (stored encrypted), avatar (pixel motif and colour) | To create and secure your account and show who you are | Contract |
| Instagram and Ravelry handles, if you add them | To show on your profile | Contract |
| Your birth month and year, checked at sign-up and not kept (we keep only that you're 13 or older) | To meet the minimum age | Legal obligation |
| Patterns you upload or link, notes, highlights, row counts, sections, milestones, knitting time, your yarn stash | To run your private pattern workspace | Contract |
| A fingerprint of each pattern file (not the file itself) | To show you which friends are knitting the same pattern | Contract |
| Friends and people you follow | To connect you with other knitters | Contract |
| Your Ravelry username and an encrypted access key, if you connect Ravelry | To show your Ravelry profile as verified and import your stash and patterns when you ask | Contract (you ask us to connect it) |
| Progress (section name, % complete), photos and posts you share | To share with the friends, Loops and KALs you choose | Contract |
| Messages and comments in Loops, KALs and test knits, and on posts | To let you talk with your group | Contract |
| Reports you make and moderation decisions | To keep ktog safe and meet our legal duties | Legal obligation / legitimate interest |
| Basic technical data (device and browser type, server logs, anonymous page-speed measurements) | To fix bugs, keep the service secure and keep it fast | Legitimate interest |
We remove location data from photos when you upload them.
Who can see what
- Only you: pattern files, pattern text, charts, markup, private notes, row and stitch counts, knitting time, your yarn stash, and progress photos on your projects.
- Your friends: the titles and % complete of projects you've started, whether you're knitting the same pattern as them, and posts you share with friends.
- Members of your Loops, KALs and test knits: your username, avatar, pattern name and designer, current section and % complete, and the posts, photos and messages you share with them.
- Anyone signed in to ktog: your profile (username, avatar and any Instagram or Ravelry handles), who you follow, which KALs you've joined, and posts you choose to make public. Your friends list is visible only to you.
- Nobody else. Nothing on ktog is visible without signing in. Loops and test knits are private and join by invite link only; KALs are open for anyone on ktog to join.
Services we use
We use a small number of providers to run ktog. They process data only on our instructions, under data processing agreements: Supabase (database, file storage and sign-in, on servers in Ireland), Vercel (runs the website and measures anonymous page speed, on servers in Ireland) and Google (sends account emails through Google Workspace). All three are US companies, so although your data is stored in the EU, we rely on safeguards approved under GDPR, such as the EU–US Data Privacy Framework or standard contractual clauses.
If you connect your Ravelry account, ktog only reads from Ravelry: your username, and your stash and pattern library when you choose to import them. We never post or change anything on Ravelry. Pattern details you fill in from Ravelry come from Ravelry's public pattern database. You can disconnect at any time in Settings, which deletes the stored access key.
Pictures from Ravelry (pattern and yarn photos you pick from Ravelry) load straight from Ravelry's servers, so Ravelry sees your IP address when they show, as with any website.
We don't sell your data, share it with advertisers or use it to train AI.
AI
ktog doesn't use AI. When you upload a pattern, our own code on our own servers reads the text out of the PDF to find its sections and rows. Your patterns, photos and messages are never sent to an AI service.
Cookies and tracking
ktog has no analytics, advertising or tracking cookies, no tracking pixels and no third-party scripts. The cookies we set are only the ones the app needs to work, so there's no cookie banner:
- Sign-in cookies (from Supabase), so you stay signed in.
- A short-lived check that your account is in good standing, so pages load faster.
- A one-time code while you connect Ravelry, so nobody else can finish that for you.
- Two choices you make: how a pattern's instructions are shown, and that you closed the project tips.
Your browser also keeps a few of your own choices on your device (light or dark mode, where you were in a pattern, who you last shared a post with). These never leave your device. The page-speed measurement mentioned above uses no cookies and nothing that identifies you.
How long we keep it
We keep your data while you have an account. When you delete something (a pattern, a project, a photo, a post or a message), its files are deleted with it. When you delete your account, we delete your data and every file you uploaded straight away; copies in our backups are gone within 30 days. The exception is where the law requires us to keep something longer (for example, records of reports we've handled).
Your rights
You can access, correct, download or delete your data, object to or restrict how we use it, and move it elsewhere. Most of this you can do yourself in Settings → Your data. For anything else, email hello@ktog.app and we'll reply within one month.
If you're unhappy with how we handle your data, you can complain to the Danish Data Protection Agency (Datatilsynet) or the data protection authority where you live.
Children
ktog is for people aged 13 and over. If we learn that someone under 13 has an account, we'll delete it.
Changes
If we change this policy in a way that matters, we'll email you before it takes effect.