Privacy policy

Last updated November 4, 2026

1. Who is responsible

The controller for woolstep.com and the WoolStep app on the web is Interactive Ecommerce LLC, 1309 Coffeen Avenue STE 10801, Sheridan, WY 82801, USA, email: support@woolstep.com. The app is operated on our behalf by Viral Apps LLC (1309 Coffeen Avenue, Sheridan, WY 82801, USA).

2. What data we process and why

For customers in Ireland and the United Kingdom, the legal bases below are those of the GDPR and the UK GDPR.

• Quiz and subscription: your answers in the quiz, email address, name, payment details (through Stripe) and subscription status. Purpose: to conclude and perform your subscription, give you access, remind you before the first full charge, and handle cancellation. Legal basis: Art. 6(1)(b) GDPR.
• Payment and fraud prevention: Stripe processes your card details and, to prevent fraud, technical signals from your device and browser on the checkout page. If you pay with Apple Pay or Google Pay, Apple or Google also process the payment. Art. 6(1)(b) and (f) GDPR (legitimate interest in preventing fraud).
• Signing in: your email address, to send you a sign-in code or link. Art. 6(1)(b) GDPR.
• Using the app: your progress in patterns and the row counter, stored in your browser and with your account. Art. 6(1)(b) GDPR.
• Knitting Helper: questions and photos you send to the Knitting Helper are passed to Anthropic (the AI model Claude), through OpenRouter or directly, to answer you; they are not used to train the model. Art. 6(1)(b) GDPR.
• Emails: confirmations, sign-in codes and links, the reminder before the first full charge, notices about failed payments and cancellation confirmations, sent through Resend. Art. 6(1)(b) and (c) GDPR.
• Servers and security: IP address and technical data when you open our pages (Cloudflare), to protect against abuse. Art. 6(1)(f) GDPR (legitimate interest in running the service securely).
• Measuring our offer: the start of your subscription and its charges are counted pseudonymously with PostHog from our server, so we can see which parts of the offer work. We set no browser cookies for this. Art. 6(1)(f) GDPR (legitimate interest in improving our offer); you can object at any time.
• Ad measurement with Meta: on the quiz and checkout pages we use the Meta Pixel of Meta Platforms Ireland Ltd. It sets cookies (_fbp, and _fbc if you came from an ad) and tells Meta which of these pages you view and when you start a checkout or buy. After each payment, including the monthly renewals, our server also sends the payment to Meta (Conversions API), with your email address and customer number in encrypted (hashed) form, your IP address, your browser type and those cookie values, so we can measure whether our ads work. Art. 6(1)(f) GDPR (legitimate interest in measuring our advertising). You can object at any time by email, and you can block these cookies in your browser.

3. Recipients and transfers outside your country

We use these service providers: Stripe (payments and fraud prevention), Cloudflare (hosting, delivery of the pages and videos), Resend (email), OpenRouter and Anthropic (Knitting Helper), PostHog (measurement) and Meta (ad measurement). Apple and Google also receive payment data if you pay with Apple Pay or Google Pay. Several of them, and we ourselves, are based in the USA. Transfers from the EU and the UK are based on the EU-US Data Privacy Framework and its UK Extension where the recipient is certified, and otherwise on the EU Standard Contractual Clauses with the UK Addendum (Art. 46(2)(c) GDPR).

4. How long we keep data

We keep your data while your subscription runs, and afterwards for as long as tax and accounting rules require (invoices and payment data for up to 10 years). We do not store questions and photos sent to the Knitting Helper on our servers; they are only passed on to create the answer.

5. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object (Art. 15–21 GDPR), and to withdraw a consent at any time with effect for the future. Write to support@woolstep.com.

You can complain to a data protection authority, for example the Data Protection Commission in Ireland or the Information Commissioner's Office (ICO) in the UK.

Wherever you live, including the United States, Canada and New Zealand, you can ask us what data we hold about you, and ask us to correct or delete it. We do not sell your personal data. You can ask us at any time to stop sending your data to Meta for ad measurement.

6. What you have to provide

We cannot set up a subscription without an email address and payment details. Everything else is voluntary.