Privacy policy

Last updated: September 25, 2026

Who we are

Lambie: Knit & Crochet (“the app”) is made and operated by Orbitex Lab. If you have a question about this policy or your data, email orbitex.techlab@gmail.com.

Using the app without an account

Your projects, row counts, yarn stash, journal entries and settings are stored only on your device. The Home Screen and Lock Screen widgets read this data on the same device. Nothing is sent to us, and the app contains no analytics or crash-reporting code.

If you create an account

An account is optional. It lets you back up your journal and keep it in sync across devices. When you have one, we store:

Account details

• Your email address and whether it has been verified.
• Your display name and the sheep avatar you pick.
• If you sign up with email, your password, stored only as a salted scrypt hash. We never store or see the password itself.
• If you sign in with Google or Apple, the account identifier they give us, plus the email address and name they share. We do not receive your Google or Apple password.

Your journal

• Projects and their sections, row counts and progress.
• Yarn in your stash.
• Journal entries: the date, rows knitted, time spent and any notes you write.
• Three settings: click sound, rest days per week and app language.

Security records

• Sign-in sessions, so you stay signed in. They are stored as hashes and last up to 60 days.
• Password reset codes. When you ask to reset your password, we email you a one-time code. We store only a hash of it, and it expires after 15 minutes.
• Your IP address is used briefly to limit repeated sign-in attempts. It is not saved with your account.

How we use it

Only to run the app for you: to sign you in, sync your journal, reset your password and protect the service against abuse. We do not build profiles of you, and we do not sell or rent your data to anyone.

Who else is involved

• Google and Apple, only if you choose to sign in with them. Their own privacy policies apply to that sign-in.
• Our hosting provider. Our server runs in a data center in Vietnam operated by VNPT (VDC). They host the machine but do not use your data.
• An email service, used only to deliver password reset codes to you.

We may disclose data if the law requires it. Otherwise we do not share it.

Where and how it is stored

Account and journal data is stored in a database on our server in Vietnam. All traffic between the app and the server is encrypted with HTTPS. Passwords, session tokens and reset codes are stored only as hashes, and access to the server is limited to us.

Keeping and deleting your data

We keep your account and synced journal for as long as the account exists. To delete it, open the app and go to Profile, then Account, then Delete account. This removes your account and everything synced with it from our database straight away. The copy on your phone stays until you remove it or delete the app.

Database backups we make for recovery are deleted within 30 days, so deleted data also disappears from them within that time.

Signing out does not delete anything. Your journal stays on the phone and in your account.

Your choices

• You can see and edit your name, email and password in the app.
• You can delete your account at any time, as described above.
• You can ask us for a copy of the data stored with your account, or ask any other question about it, by emailing orbitex.techlab@gmail.com.

Children

The app is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

If we change how we handle your data, we will update this page and the date at the top.