Privacy Policy

1. Who we are

Miiitime is a crochet and knitting app for tracking projects, making and reading patterns, keeping a yarn library, and meeting other crafters at craft parties. It's available as an iPhone app and on the web at miiitime.com.

Miiitime is operated by [LEGAL ENTITY NAME], [REGISTERED ADDRESS]. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the controller of the personal information described in this policy. [ICO REGISTRATION NUMBER, IF REGISTERED]

If you have a question about this policy or your information, contact us at create@miiitime.com.

2. The short version

3. What stays on your device

Miiitime keeps your projects, patterns, yarn library, swatches, dashboard layout, settings and profile on your device (or in your browser's storage if you use the website). We don't receive any of it unless you sign in, use a social feature, or share a pattern, as described below.

Some features process your information on your device without sending it to us:

• Pattern import. Reading text from a pattern photo or PDF happens on your device. The files you import aren't uploaded. To do this, the app downloads its text-recognition and PDF-reading components from public content delivery networks (see section 7).
• Photo background removal uses Apple's on-device image tools.
• The home screen widget reads project information from storage on your iPhone.
• Calendar. If you add a party to your calendar, Miiitime asks for calendar permission and writes the event to your calendar on your device. We don't upload your calendar.
• Party reminders are scheduled on your device, about an hour before a party you've joined.
• Your country. During setup, Miiitime suggests a country based on your device's region setting. It's only saved if you confirm it.

Signing out of your account clears your Miiitime data from that device. Deleting the app removes everything stored on the device.

4. What we collect and why

4.1 Your account

An account is optional. You need one to sync your data between devices and to share patterns by link. You can sign in with Apple, with Google, or with an email address and password.

• What we collect: your email address; an account ID; which sign-in method you use; your name if Apple or Google provides it (we use it as your starting display name); when your account was created and when you last signed in. If you sign in with Apple and choose to hide your email, we receive Apple's relay address instead.
• Passwords: if you use email and password, your password is handled by our authentication provider and stored in hashed form. We never see it in plain text.
• Emails: we send an email to confirm your address when you sign up with email, and when you ask to reset your password.
• Why: to create and secure your account, sign you in, and recover access if you forget your password.

4.2 Your profile

• What we collect: the display name, short bio, country, and profile photo or avatar you choose. These live on your device, and are synced to your account when you're signed in. Your display name is also stored with your account record.
• Why: to show your profile in the app and to fill in the host and join forms for craft parties. Your profile isn't published on its own. The details you use for a party become visible to others; see 4.4.

4.3 Your projects, patterns and library

• What we collect when you're signed in: your projects (including any project photos you add), patterns and their details, yarn library, dashboard layout, settings, and a record of the parties you host or have joined, including the private codes that let you manage them. This is synced automatically while you're signed in.
• Swatches currently stay on your device and aren't synced. [UPDATE WHEN SWATCH SYNC IS ENABLED]
• Why: to back up your data and keep it the same across your devices.
• Access: only you can read your synced data through the app. Authorised Miiitime staff can see summaries of it and, when needed for support or safety, open its contents. Every time they do, it's recorded in an audit log.

4.4 Craft parties

You don't need an account to host or join a party.

• Hosting: we store the party's title, description, date and time, venue (name, address and map coordinates), craft type, maximum number of guests, whether it's public, its icon, your announcements, and the host name, country, city, bio and photo you use. We also create a join code and a private management code, which is saved on your device (and in your synced data if you're signed in).
• Finding the venue: when you enter a venue address or a map link, we send that text to OpenStreetMap's Nominatim service to find its location. When a party's map is shown, the map image is loaded from Google Maps, which receives the venue's coordinates and the viewer's IP address.
• Joining: we store the name, and optionally the country, bio and photo, you enter when you join, plus a private code that lets you cancel. Cancelling deletes your sign-up.
• Why: to let people create, find and join parties, and to show hosts who's coming.

4.5 Party chat

• What we collect: the messages you send in a party's chat (up to 1,000 characters each), with the name and photo you used for that party and the time you sent it.
• Who can read it: the host and the people who joined that party through Miiitime. Chat isn't end-to-end encrypted, so please don't share sensitive information in it.
• Deleting messages: you can delete your own messages while you're signed up, and the host can delete any message. If you cancel your sign-up, messages you've already sent stay in the chat with your name and photo unless the host deletes them. All of a party's messages are deleted when the party is deleted.
• Why: so people going to a party can talk to each other.

4.6 Shared pattern links

• What we collect: when you share a pattern by link, we store a copy of that pattern (including its photo, or a preview image we generate), the creator name you choose to show, and when it was shared. This needs an account.
• Who can see it: anyone with the link, without signing in, on miiitime.com or in the app.
• Stopping sharing: you can stop sharing at any time, and the link stops working straight away. The stored copy is kept until you delete your account. [OR: RETENTION PERIOD FOR STOPPED LINKS]

4.7 Location

We use your device's location for one thing only: the Nearby search on the Social tab of the iPhone app.

• iOS asks for permission the first time you tap "Use my location". If you've already given permission, Miiitime uses your location when you open the Social tab's Explore view in Nearby mode.
• Your coordinates are used to search for public parties within about 60 km. They're sent to our database provider as part of that search, and they're not saved to your account, to any party, or anywhere else by Miiitime. Our providers' technical request logs may briefly include them; see section 9.
• The website doesn't use your device's location.
• You can turn location access off at any time in iOS Settings. You can still search parties by country or city.

Separately, party venues are locations that hosts enter themselves, and they're visible to others (see 4.4).

4.8 Notifications

• Push notifications: when you host or join a party on iPhone and allow notifications, we store the push token Apple gives your device with that party or sign-up.
• What we use them for: to tell hosts when someone joins; to tell guests about announcements, time or place changes and cancellations; and to tell party members about new chat messages. Notifications are delivered by Apple Push Notification service, so the notification's text passes through Apple. That text includes the party's name and, for chat, the sender's name and the start of the message.
• When tokens are deleted: a token is deleted when you cancel your sign-up or the party is deleted.
• Turning them off: you can stop push notifications at any time in iOS Settings. Miiitime's own Notifications switch stops new reminders and new sign-ups from registering for notifications.

4.9 Error reports

• What we collect: when something goes wrong, the app may send us an error report. It contains the type and severity of the error, its message and technical details (a "stack trace"), the app version, a small amount of context (for example, which kind of data was syncing), the time, and your account ID if you're signed in. The app doesn't add your device model or any advertising identifier to these reports.
• Why: to find and fix problems.
• Access: only authorised Miiitime staff can read them.

4.10 Staff access and moderation

A small number of authorised Miiitime staff can see a list of accounts (email, display name, when each was created and last signed in, and whether it's suspended). They can suspend or restore accounts, and view synced data as described in 4.3. Staff actions like these are recorded in an audit log. We use this access to provide support, keep Miiitime safe, and enforce our Terms of Service.

4.11 The website

When you visit miiitime.com, our hosting provider and the content delivery networks the site loads from receive standard technical information such as your IP address and browser details. The website stores your Miiitime data and sign-in session in your browser's local storage so the app can work. It doesn't use advertising or analytics cookies.

5. What other people can see

Only put information in a party, or in the name, bio and photo you use for one, that you're comfortable with anyone seeing.

6. Our lawful bases

UK data protection law requires us to have a lawful basis for each way we use personal information.

We don't use your information for automated decisions that have legal or similarly significant effects on you. We don't ask for special category information (such as health or religious beliefs). Please don't include it in your profile, parties or chat.

7. Service providers we use

We use these providers to run Miiitime. They process information on our behalf, or, where noted, provide a service you choose to use under their own terms.

If you open a party's location in Apple Maps or Google Maps, you leave Miiitime, and that service's own privacy policy applies.

8. International transfers

Our main database is hosted in the European Union (Ireland). Some of the providers listed above may process information in other countries, including the United States. Where personal information is transferred outside the UK, we rely on [TRANSFER SAFEGUARDS FOR EACH PROVIDER, e.g. UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or the UK-US data bridge]. Contact us for more detail.

9. How long we keep information

10. Deleting your account

You can delete your account in the app at Settings → Account → Delete Account. This permanently deletes:

• your account and sign-in details;
• your profile and display name;
• all your synced data (projects, patterns, yarn library, settings, dashboard layout, and your record of parties);
• your shared pattern links and the copies behind them.

It also signs you out, which clears your Miiitime data from that device.

What isn't deleted automatically: parties, sign-ups and chat messages aren't linked to your account. That lets people take part without signing in, but it also means deleting your account doesn't remove them. Before deleting your account, please delete any parties you host and cancel any sign-ups in the Social tab. If you've already deleted your account, contact us and we'll help remove them. Error reports are kept for the period above with the link to your account removed.

11. Security

We use access controls so that only you can read your synced data through the app. Party management and chat rely on private codes stored on your device. Staff access is limited to authorised people and logged. No online service can be completely secure, though. Please keep your devices and sign-in details safe. If you think your account has been misused, contact us.

12. Children

Miiitime isn't intended for anyone under [MINIMUM AGE]. Craft parties involve meeting people in person, and are only for people aged [MINIMUM AGE FOR PARTIES] or over. If you think a child has given us personal information, contact us and we'll delete it.

13. Your rights

Under UK data protection law you have the right to:

• access the personal information we hold about you and get a copy of it;
• correct information that's wrong. You can edit most of it yourself in the app;
• erase your information. You can delete your account in the app;
• restrict or object to certain uses of your information;
• data portability: receive information you gave us in a reusable format;
• withdraw consent where we rely on it, for example by turning off location or notifications in iOS Settings.

To use any of these rights, email create@miiitime.com. We may need to confirm it's you. We'll respond within one month, which can be extended in some cases, as the law allows.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk. We'd appreciate the chance to help first, so please contact us.

14. Changes to this policy

We'll update this policy when Miiitime changes how it uses personal information, and change the "Last updated" date at the top. If a change is significant, we'll tell you in the app [OR OTHER NOTIFICATION METHOD] before it takes effect.

15. Contact us

[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
Email: create@miiitime.com