Privacy Policy

1. Data Controller

The Patterna mobile application (the "Service") is published by Patterna, currently being registered as a sole proprietorship in France. The data controller for the personal data processed through the Service is Patterna, reachable at patterna.pro@gmail.com. Database and authentication hosting: Appwrite Cloud (NYC region, United States). App distribution: Google Play.

2. Data We Collect

When you use Patterna, we collect the following categories of personal data:

• Account data: email address, username, hashed password, Google ID (for Google Sign-In)
• Profile and preferences: language, profile picture (optional)
• User-created content: SBS guides, comments, reviews, ratings, photos of finished projects, sewing inventory, shopping list
• Activity: favourites, daily streak, financial savings
• Technical data: app version, device model, OS, anonymised crash logs (Sentry)
• Payment data: Premium subscription status (card numbers are never processed by Patterna — they only transit through Google Play / RevenueCat)

3. Purposes and Legal Bases

Your data is processed for the following purposes:

• Provide the Service (account, content, sewing tools) — legal basis: performance of the contract (Art. 6.1.b GDPR)
• Improve the Service (anonymised crash logs, multilingual search) — legal basis: legitimate interest (Art. 6.1.f GDPR)
• Premium subscription management — legal basis: performance of the contract (Art. 6.1.b GDPR)
• Comply with legal obligations (accounting, content moderation under DSA) — legal basis: legal obligation (Art. 6.1.c GDPR)

4. Subprocessors and Recipients

Your data is shared only with technical subprocessors necessary for the Service, under data processing agreements compliant with Article 28 of the GDPR:

• Appwrite Cloud — database and authentication hosting (NYC region, USA; EU Standard Contractual Clauses)
• Google Play (Google LLC) — app distribution and payment processing
• RevenueCat — subscription management (USA; EU Standard Contractual Clauses)
• Sentry — anonymised crash log collection (EU servers)
• Cloudflare Workers — RevenueCat webhook proxy (EU/US, EU Standard Contractual Clauses)
• Hugging Face — embedding computation for multilingual search (text only, no directly identifying personal data)
• Anthropic (Claude) — automatic translation of educational content (text only, no directly identifying personal data)

Patterna does not sell, rent, or trade your personal data with third parties for commercial or advertising purposes.

5. Transfers Outside the EU

Some processors (Appwrite, Google, RevenueCat, Anthropic) are based in the United States. These transfers are governed by the Standard Contractual Clauses adopted by the European Commission (decision 2021/914) and, where applicable, the EU–US Data Privacy Framework.

6. Retention Period

• Account and user-created content: as long as your account is active
• Anonymised crash logs: 90 days
• Premium subscription billing data: legal retention period (10 years for accounting records)
• Account deletion: all data is erased within 30 days of your deletion request (right to erasure)

7. Your GDPR Rights

You have the following rights regarding your personal data:

• Right of access — request a copy of your data
• Right to rectification — fix inaccurate data
• Right to erasure — delete your account and all associated data
• Right to portability — receive your data in a structured, machine-readable format
• Right to object — to processing based on legitimate interest
• Right to restriction — limit the processing of your data
• Right to lodge a complaint with the French data protection authority: CNIL (www.cnil.fr)

To exercise these rights, contact us at patterna.pro@gmail.com or use the in-app "My data" screen (Settings → My data).

8. Security

We implement appropriate technical and organisational measures to protect your data: encrypted communications (HTTPS/TLS), hashed passwords, server-side authentication, role-based access controls, audit logs.

9. Cookies and Identifiers

The mobile application does not use advertising cookies or marketing trackers. Only strictly necessary technical identifiers are used (session token, local preferences stored on your device via AsyncStorage). Sentry error logs are anonymised (no IP address, no direct user identifier).

10. Children

Patterna is intended for users aged 13 and over. We do not knowingly collect personal data from children under 13. If you become aware that a child has provided us with personal data, contact us so we can promptly delete it.

11. Changes to This Policy

We may update this privacy policy from time to time. Any significant changes will be communicated through the app or by email. The "Last updated" date above reflects the most recent revision.

12. Contact and Data Protection Officer

For any question, complaint, or request related to your personal data, contact us at: patterna.pro@gmail.com

You also have the right to lodge a complaint with the CNIL: www.cnil.fr.