Privacy Policy

Who publishes the app

Mustri is made and published by 123 Tuhk ja Tolm OÜ, registered in Estonia at Tuuleveski tn 16, 10618 Tallinn, with Anni Kiil answering for it. Under the General Data Protection Regulation the company is the controller for this app, which here is a title covering almost nothing, because the app hands the company no personal data at all.

The company's main business is building materials, and that side of it has no connection to this app whatsoever: no customer list, no order record and no commercial database comes anywhere near a knitting chart.

Write to stitch@tuhkjatolm.store.

What you design belongs to you

This matters more in a design tool than in most apps, so it is said early and plainly. The charts you make in Mustri are yours. The company takes no licence over them, claims no rights in them, and could not exercise any if it wanted to — it never receives them. There is no gallery to upload to, no sharing feature, no community feed and no "featured pattern of the week" fed by other people's work.

Your charts sit in the app's private folder with their palettes and grids, exactly where you left them, and the only person who has ever seen them is you.

What the app stores

Four things, none of which describe a person:

• your charts — the grid itself, the stitches you placed, and the palette each one was drawn with;
• the palettes you have mixed, so a set of yarn colours can be reused;
• which chart you had open, so that closing the app does not lose your place;
• your settings, including whether the app is running in English or Estonian.

No name, no email address, no account, no device identifier and no advertising ID appears anywhere in that, because the app neither asks for nor generates one. Android keeps each app's private folder out of reach of every other app on the phone.

The permission that is absent

Mustri declares no internet permission. Android enforces that in the operating system rather than relying on the app to behave: without the permission a connection cannot be opened at all. It is also checkable from outside — the permission list is on the store page and on the handset, and a version that wanted to talk to anything would have to add a line there in plain sight.

There is likewise no camera, no microphone, no location, no contacts, no photo library and no access to your wider storage. The grid is drawn by the app itself, so there is nothing to fetch and nothing to load from anywhere.

The motif library, and whose patterns those are

The traditional blocks in the library — stars, roses, braids, zigzags, eight-pointed blooms — come out of a living folk tradition that belongs to the people who have knitted it for generations, not to this company. They are offered as starting points because that is how such patterns have always travelled: copied off a relative's mitten, adapted, passed on.

Nothing in the app asserts ownership over them, and nothing you adapt from them becomes anyone else's. If you are charting a pattern from your own family, that record stays on your phone, under your hand, which seems the right place for it.

Nothing is advertised and nothing is measured

No ad network, no analytics library, no crash reporter, no attribution kit and no social sign-in. Nothing here is funded by watching anybody work, which is why the list two sections up is as short as it is and why the app has no interest in what you happen to be designing.

Should a later release ever add any of that, this page is rewritten before the release goes out, and the Data safety entry in Google Play is corrected to match. Replacement wording is already written and kept in the source of this page, commented out, so that nothing has to be improvised.

Android's backup, and why it is worth a thought here

One thing happens above the app's head. With backup to Google Drive switched on, Android may copy the app's data — your charts included — into your own Google account alongside the backups of everything else installed. That copy is yours and runs under Google's terms rather than ours; it never comes near the company, which has no account there to open.

In most apps this is housekeeping. In a design tool it is the difference between keeping a year of charts and losing them with a handset. The switch is in Android's own settings, for the whole phone or for this app alone, and either answer is a reasonable one to give deliberately.

What Google Play sees

Installing is a transaction between you and Google, recorded against your Google account. What reaches a developer afterwards is a console of totals: installs by country, which Android versions are in use, how a rating is moving. No individual row sits beneath those figures for anyone here to open, and nothing in them touches a chart.

Google's own part runs under Google's privacy policy at policies.google.com/privacy.

Removing it, and what that costs

Everything is in one folder, so there is one action and nobody to ask. Uninstalling Mustri takes the charts, the palettes and the settings with it, and Android's app settings will clear its storage while leaving the app installed, which empties the gallery and returns it to a blank grid.

Both are immediate and neither can be undone. Since nothing is kept anywhere else, a chart you would be sorry to lose is worth treating the way you would treat the only paper copy of one — there is no second copy here, and that is the whole point of the design rather than an oversight.

If you write to us

Everything above concerns data that never arrives. This is the exception. An email leaves the company holding an address and whatever the message says, kept while the matter is open and for a reasonable while afterwards in case it returns, then deleted.

It is used to reply and for nothing else: no list, no onward sharing, no marketing, and nothing connected to the company's other line of business. The lawful basis is legitimate interests in answering correspondence. Nothing in an email can be matched to anything in the app, because the app carries no identifier to match it against.

Your rights, and the Estonian regulator

The General Data Protection Regulation applies in Estonia alongside the Personal Data Protection Act, the isikuandmete kaitse seadus. Between them you may ask what personal data is held about you, receive a copy of it, have it corrected or erased, restrict its use, object to that use, or have it handed over in a portable form. Directed at this app those requests find nothing to act on; directed at the mailbox above they work in full, free of charge, within one month.

Ask at stitch@tuhkjatolm.store. The supervisory authority in Estonia is the Data Protection Inspectorate, Andmekaitse Inspektsioon, at aki.ee, which will hear a complaint whether or not you have raised the matter here first. Anyone living elsewhere in the EEA may go to their own national authority instead.

Later versions of this page

One date appears on it, under the title, and that is the version in force. For a change that genuinely alters what happens to data — anything collected at all, any third-party component, anything leaving the handset — the order never varies: this page is rewritten, the Play Console's Data safety declaration is corrected in the same sitting, and only afterwards does the release that caused it go out.

A sentence rewritten to read better is not such a change, and arrives with nothing but a newer date.