Privacy Policy

Last updated: 9 June 2025

This Privacy Policy explains how Carlos Fernandez ("we", "us", "our") collects, uses, stores and protects your information when you use the Knottie iOS application (the "App") and its accompanying website https://cacauapps.com/knottie/ (the "Site").

If you do not agree with any part of this Policy, please do not use the App or Site.

1. Who We Are

Controller: Carlos Fernandez, sole trader (autónomo) registered in Spain.
Address: GV Corts Catalanes 460, Pral 1B, 08015 Barcelona, Spain.
Email: cfm@fastmail.com

2. What Data We Collect

Category	Examples	Source	Purpose
Crash & Usage Analytics	Session counts, knots viewed, anonymised crash reports	Apple’s App Analytics and on‑device diagnostics	Improve and debug the App
Purchase Receipts	Apple receipt token, product ID, transaction date	Generated by Apple & stored on our VPS	Verify in‑app purchases and provide paid features
Device Information	Identifier for Vendor (IDFV), OS version, language	Sent by the device when using the App	Fraud prevention, analytics

We do not collect location data, photos, microphone, contacts or any other personal data.

3. How We Use Your Data

Provide core functionality — display content you request and unlock in‑app purchases.
Process payments — confirm that your subscription or lifetime unlock is valid.
Improve the App — analyse aggregated, anonymous usage and crash statistics.

4. Legal Bases (GDPR)

Purpose	Legal Basis
Provide core functionality & process payments	Performance of contract (Article 6(1)(b))
Improve the App via anonymous analytics	Legitimate interest (Article 6(1)(f))

5. Data Sharing & Processors

We do not sell or rent your data. Your data is shared only with:

Apple Inc. — for in‑app purchase processing and crash analytics.
Our own VPS located in Barcelona (EU) — stores purchase receipt tokens for up to one year.

No other third parties receive your data.

6. International Transfers

All personal data is processed and stored within the European Union. We do not transfer data outside the EU/EEA.

7. Data Retention

Data Type	Retention Period
Crash & usage analytics	1 year then deleted or fully anonymised
Purchase receipt tokens	1 year then deleted
Support emails	1 year after last correspondence

8. Security Measures

All network traffic is transmitted over HTTPS/TLS.
Receipt tokens are stored on a secured VPS with firewall protection and least‑privilege access controls.

9. Your Rights (EU/EEA)

You have the right to access, rectify, erase, restrict or object to processing of your personal data, and to data portability. You can also withdraw consent where processing is based on consent. To exercise any of these rights, email cfm@fastmail.com. We will respond within 30 days.

If you believe your data protection rights have been violated, you may lodge a complaint with your local supervisory authority (in Spain, the AEPD).

10. Children

The App is suitable for all ages; however, we do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so we can delete it.

11. Cookies & Tracking on the Site

The Site is informational only and uses no cookies or tracking technologies.

12. Changes to This Policy

We may update this Policy occasionally to reflect changes in the App, legal requirements or processing practices. We will notify you via the App or Site before significant changes take effect. Continued use of the App after the update date constitutes acceptance of the new Policy.

13. Contact

For any questions about this Privacy Policy or your personal data, please contact:
Email: cfm@fastmail.com
Postal Address: GV Corts Catalanes 460, Pral 1B, 08015 Barcelona, Spain