Legal

Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Noesis Trading Co. Ltd, trading as Tessa ("Tessa", "we", "us", or "our"), collects, uses, and protects your personal information when you use the Tessa mobile app (the "App"). We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We collect the following categories of information:

• Account information — the email address you use to sign in, and any name you choose to provide. If you sign in with Apple or Google, we receive a basic account identifier and email from that provider.
• Content you provide — the text descriptions you type and the photos you upload in order to generate a craft pattern.
• Patterns you create — the craft patterns generated for you, along with the settings used to create them, saved to your account.
• Purchase information — your subscription and purchase status. Payments are handled by the Apple App Store or Google Play; we do not receive or store your card or bank details.
• Usage and device information — app activity, device type and operating system, and crash or diagnostic data, used to keep the App working reliably.
• Notifications — if you enable push notifications, a device notification token so we can send them.
• Support communications — any messages you send us.

2. How We Use Your Information

We use your information to:

• Provide the core service — generating craft patterns from your text and photos
• Create and manage your account
• Process your purchases and manage your subscription entitlements
• Send notifications you have chosen to receive
• Keep the App secure, prevent abuse, and enforce usage limits
• Diagnose problems and improve the App
• Respond to your enquiries and comply with our legal obligations

3. Photos You Upload

When you upload a photo to generate a pattern, that photo is sent to our AI image provider solely to produce your pattern. We do not retain the uploaded photo after processing — only the generated pattern and its settings are saved to your account. Photos are not used to advertise to you and are not sold to anyone.

4. Legal Bases for Processing

Under the UK GDPR, we rely on the following legal bases:

• Performance of a contract — to provide the App and the features you request
• Consent — for optional features such as push notifications, which you can withdraw at any time
• Legitimate interests — to secure the App, prevent misuse, and improve our service
• Legal obligation — where we must process data to comply with the law

5. Third-Party Services

We use trusted third parties to operate the App. Each processes data only as needed to provide their service and under their own privacy terms:

• Supabase — account authentication and secure storage of your account data and saved patterns
• OpenAI — AI processing of your text and photos to generate patterns
• RevenueCat — managing subscriptions and purchase entitlements
• Apple App Store / Google Play — processing payments and distributing the App
• Expo — delivering push notifications and app updates
• Sentry — crash and error diagnostics

We do not sell, rent, or trade your personal information.

6. International Transfers

Some of our providers are located outside the United Kingdom, including in the United States. Where your data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Standard Contractual Clauses to protect it.

7. Data Retention

We keep your account information and saved patterns for as long as your account is active. Uploaded photos are deleted immediately after your pattern is generated. When you delete your account, we delete your personal data, except where we are required to retain limited records to comply with legal obligations.

8. Deleting Your Account

You can delete your account and its associated data at any time from within the App, under Settings. If you need help, contact us at hello@noesisco.com.

9. Your Rights

Under UK data protection law, you have the right to access, correct, delete, restrict, or object to our processing of your personal data, and the right to data portability. You may also withdraw consent at any time. To exercise these rights, contact us at hello@noesisco.com. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Children

Tessa is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Security

We take reasonable technical and organisational measures to protect your information from unauthorised access, disclosure, or loss. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects the most recent revision. Significant changes will be communicated within the App where appropriate.

13. Contact

Noesis Trading Co. Ltd (trading as Tessa)
Email: hello@noesisco.com