Privacy Policy

How we handle data in the WzorAI and ShiftLens apps, in our newsletter and on paradrutow.com.

Newsletter

Last updated: 19 October 2026

This policy explains what data we process when you use the WzorAI and ShiftLens mobile apps (the “Apps”), sign up for our newsletter or visit paradrutow.com. We process data in accordance with Regulation (EU) 2016/679 (the GDPR).

In short

  • Neither App requires an account or registration. We never ask for your name, email address or phone number.
  • WzorAI sends our server only what it needs to create a pattern: your description and an anonymous identifier. Finished charts stay on your phone.
  • ShiftLens runs entirely on your phone — photos and work rotas are never sent anywhere.
  • The website uses no cookies and no ads, and visitor statistics are aggregated.
  • We do not sell data or use it for advertising.

1. Data controller

The data controller is Para Drutów, based in Poland — the maker of the WzorAI and ShiftLens apps and of paradrutow.com.

For anything related to personal data, write to: 📧 kontakt@paradrutow.com

2. The WzorAI app

WzorAI creates knitting charts from a description you type in your own words. To generate a pattern, the app connects to the Controller's server, which uses an artificial intelligence model.

2.1. What data we process

  • Anonymous identifier (UID) — created by Firebase Authentication on first launch (anonymous sign-in, no email or password). It links your device to your pattern balance and purchases. You can find it in the app under “About”.
  • Balance and activity — how many patterns you can still generate and the date of your last activity.
  • Purchases — when you buy a pattern pack on Google Play: the purchase token, product ID and purchase status. We never receive payment details such as card numbers — those are handled by Google Play alone.
  • Pattern description — the text you type, together with the technical data needed to process it. It goes to our server and to the AI model (section 2.4). Once the pattern is generated, we do not store it in our database.
  • Technical data — device model, system version and app error reports. Used only to improve stability.

2.2. What stays only on your phone

Generated charts, your pattern history, the names you give them, favourites, notes, your place in the row counter, calculator results and the PDF files you create are stored only on your device. We have no access to them. Deleting a pattern from the history or uninstalling the app removes them permanently. When you share a chart image or a PDF, you decide who receives it.

2.3. Purposes and legal bases

PurposeLegal basis
Generating patterns and keeping your balanceArt. 6(1)(b) GDPR — performance of a contract
Processing pattern pack purchasesArt. 6(1)(b) GDPR — performance of a contract
Verifying purchases with Google Play and preventing abuseArt. 6(1)(f) GDPR — legitimate interest
Diagnosing errors and improving qualityArt. 6(1)(f) GDPR — legitimate interest

2.4. Who processes data on our behalf

Google Ireland Limited / Google LLC:

  • Firebase Cloud Functions (region us-central1, USA) — the app's server,
  • Cloud Firestore (USA) — database of identifiers, balances and purchase statuses,
  • Firebase Authentication — anonymous sign-in,
  • Google Cloud Pub/Sub — Google Play purchase notifications,
  • Google Cloud Secret Manager — secure storage of access keys,
  • Google Play Billing — payments.

Google Privacy Policy: policies.google.com/privacy

Anthropic, PBC (USA) — provider of the Claude language model, which creates the pattern from your description. It receives the pattern description together with the technical data needed to process it. Under Anthropic's commercial terms, content sent this way is not used to train models by default.

Anthropic Privacy Policy: anthropic.com/legal/privacy

2.5. How long we keep data

DataRetention period
Identifier, balance, date of last activityUntil you ask us to delete it
Purchase tokens and statusesFor as long as the law requires and as needed to handle complaints
Google Play purchase notifications30 days, then deleted automatically
Pattern descriptionsNot stored once the pattern is generated
Charts and historyOnly on your device
Technical and diagnostic logsUp to 90 days

2.6. Security

  • all communication with the server is encrypted (TLS/HTTPS),
  • access keys are kept in Google Cloud Secret Manager,
  • only authorised server services can access the database (Firestore security rules),
  • every purchase is automatically verified with Google Play.

2.7. Deleting your data from the server

Write to kontakt@paradrutow.com and include the ID shown under “About” in the app. We will delete the data linked to it: the identifier, balance and activity date. We keep purchase records only to the extent the law requires.

3. The ShiftLens app

ShiftLens turns a photo or file of your work rota into alarms. It runs entirely on your phone: it needs no account, has no server and does not send photos or rotas to the Controller or to anyone else. The only exception is your choice — a report about a misread rota, which you can send by email (section 3.7).

3.1. Permissions

  • Camera — to take a photo of the rota.
  • Photos and files — to pick a photo from your gallery or an Excel or PDF file. You choose the file in the system picker, and the app gets access to that file only.
  • Notifications and exact alarms — so the alarm rings at the right time before your shift, to remind you that your rota is running out and to warn you if the phone turns alarms off. Android asks for separate permission for exact alarms.
  • Running after a restart — to restore the alarms you have set.

3.2. Data stored on your phone

  • recognised shifts (dates, times, type of day) and your manual corrections,
  • your surname, if you enter it (separately for each job if you have two) — used only to find your row on the rota,
  • company names and colours if you have two jobs, and the date from which a new job takes over the rota,
  • time to get ready and commute, unpaid break, alarm sound, extra alarms and other settings,
  • counted hours, overtime and the history of previous months,
  • the app language you chose.

The home-screen widget uses the same data. All of it stays only on your device and is not sent to the Controller or to third parties unless you send a report yourself (section 3.7).

3.3. Team rotas and coworkers' data

If the rota includes other employees, the app reads their rows only in the device's memory — for example, to recognise shift codes — and discards them straight away. Only your own shifts are saved, never your coworkers' data. The exception is a rota photo you attach to a report yourself (section 3.7) — it may contain other people's names.

3.4. Google services

  • Google ML Kit — text recognition. The model is downloaded once by Google Play services during installation; recognition then happens offline, on the device.
  • Google Play — the one-time purchase of the app. Payment is handled by Google alone; we receive no payment details.

The app itself sends no data to the Controller or to anyone else, and apart from these cases it does not need the internet.

Google Privacy Policy: policies.google.com/privacy

3.5. What the app does not do

  • it does not require an account or sign-in,
  • it does not send photos, files or recognised text to any server,
  • it shows no ads,
  • it contains no analytics or tracking tools,
  • it does not sell or share data with third parties.

3.6. Sharing your rota

When you share your rota as an image, the app creates it on your phone and passes it to the app you choose (for example, a messenger). You decide who gets it; we do not receive it.

3.7. Recognition report sent by email (optional)

If a rota was read incorrectly, you can send a report to the app's developer. ShiftLens opens your own email app with a ready-made message to app@paradrutow.com. Nothing is sent automatically — the message goes out only when you tap “Send” yourself. Before that you can review it, change it or remove attachments.

The report contains:

  • the photo or photos of the rota, uncompressed — they may show coworkers' names,
  • the recognised text with word positions on the photo and a description of how recognition went,
  • the app version, phone model and Android version,
  • a numeric summary of the recognition (e.g. how many days were found) and, if the app hit an error, its technical description.

Purpose: solely to improve recognition of this and similar rotas in future versions of the app. Legal basis: your consent, given by sending the message (Art. 6(1)(a) GDPR). Other people's data visible in the photo is processed only to fix the error, on the basis of legitimate interest (Art. 6(1)(f) GDPR).

Retention: photos and recognition data are deleted right after analysis. The message passes through your email provider and ours, under those providers' terms. You can ask us to delete a report you sent at any time.

3.8. Control over your data

Because rota data lives only on your phone, you have full control over it without contacting us. At any time you can:

  • delete a single history entry or a day correction,
  • clear the whole history (Menu → History),
  • clear the cache, including temporary photos (Menu → Settings → Clear cache),
  • delete all data at once by uninstalling the app.

4. Newsletter

On paradrutow.com you can sign up for our newsletter voluntarily. Using the Apps does not require signing up.

4.1. Data and purpose

We process the email address you enter in the form and the language of the page you sign up from (so we write to you in the right language). We send only news about new patterns, books, videos and Para Drutów app updates.

4.2. Legal basis and confirmation

The legal basis is your consent (Art. 6(1)(a) GDPR), which also covers receiving commercial information by electronic means under the Polish Electronic Communications Law. Sign-up must be confirmed (double opt-in): after you fill in the form we send you an email with a link, and the subscription starts only once you click it. Unconfirmed addresses are deleted automatically.

4.3. Who runs the newsletter

Emails are sent by Kit (formerly ConvertKit) — Kit.com, Inc., USA.

Kit Privacy Policy: kit.com/privacy

4.4. Unsubscribing

We keep your address until you withdraw consent. You can withdraw it at any time without giving a reason — by clicking “Unsubscribe” at the bottom of any email or by writing to us. Withdrawing consent does not affect the lawfulness of emails sent before.

5. Website

5.1. Hosting

The website is hosted on GitHub Pages (GitHub, Inc., USA). On every visit the server automatically logs technical data — IP address, date and time, and browser type — to keep the site running and secure (Art. 6(1)(f) GDPR).

5.2. Contact form and email

When you send a message through the form, you provide your name, email address and message; we receive the same data when you email us directly. We use it only to reply and continue the conversation (Art. 6(1)(f) GDPR). The form is run by Formspree, Inc. (USA), which forwards the message to our mailbox. We keep the data for as long as the correspondence lasts and no longer than necessary.

5.3. Visitor statistics

We measure traffic with Cloudflare Web Analytics (Cloudflare, Inc., USA). It uses no cookies, stores nothing on your device and does not track individuals. It collects only aggregated data: page views, pages visited, referral source, country, and device and browser type (Art. 6(1)(f) GDPR).

5.4. YouTube videos

Videos are embedded in YouTube's privacy-enhanced mode (youtube-nocookie.com). The player loads only after you click play — until then your browser does not connect to YouTube. Once a video starts, Google processes data under its own privacy policy.

5.5. Fonts

Typefaces are loaded from Google Fonts. When the page loads, your browser connects to Google's servers, which receive your IP address for that purpose.

5.6. External shops

We sell patterns and books through Payhip and Amazon. Orders and payments take place on their websites, and each shop processes the data as a separate controller under its own privacy policy. Payhip passes us the data needed to handle the order (the buyer's email address and details of the product bought); Amazon does not share buyers' data with us.

5.7. Remembering your language

When you choose a language, we save that choice in your browser's storage (localStorage) so it stays the same on your next visit. It is not a cookie, it is not sent anywhere, and you can remove it by clearing the site's data in your browser settings.

6. Transfers outside the EEA

Some of our providers — Google, Anthropic, Kit, GitHub, Formspree and Cloudflare — are based in the United States, so data may be processed outside the European Economic Area. This happens under the mechanisms of Chapter V GDPR: Standard Contractual Clauses approved by the European Commission and, for certified providers, the EU-U.S. Data Privacy Framework.

7. Your rights

Under the GDPR you have the right to:

  • access your data (Art. 15),
  • rectification (Art. 16),
  • erasure (Art. 17),
  • restriction of processing (Art. 18),
  • data portability (Art. 20),
  • object to processing based on legitimate interest (Art. 21),
  • withdraw consent at any time, without affecting earlier processing (Art. 7(3)),
  • lodge a complaint with the President of the Polish Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, or with the supervisory authority in the country where you live.

To exercise these rights, write to kontakt@paradrutow.com. We will reply without undue delay and within one month at the latest. For WzorAI data, please include the ID from the “About” section (section 2.7).

8. Cookies

The Apps use no cookies or similar tracking technologies. paradrutow.com sets no analytics or advertising cookies. YouTube may store its own data only after you start a video (section 5.4), and your chosen language is remembered in your browser's storage (section 5.7).

9. Children

The Apps and the website are not aimed at people under 16, and we do not knowingly collect their data. Minors should use the Apps with the consent and supervision of a parent or guardian. If we learn that we have received a child's data, we will delete it promptly.

10. Changes to this policy

This policy may change along with the Apps, the website or the law. The current version is always available on this page, with the date of the last change at the top. We will announce significant changes in the Apps or on the website.

11. Contact

For questions about privacy and personal data, write to:

📧 kontakt@paradrutow.com

This policy covers the WzorAI and ShiftLens apps, the newsletter and paradrutow.com. Google Play, Payhip, Amazon and YouTube have their own privacy policies. The Polish version of this policy is the binding one.

Stay in the loop

Sign up and we will write when new patterns, books, videos or app updates appear. A few messages a month — no spam.