Privacy Policy

Effective Date: February 2026

1. Introduction

Knows ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services (collectively, the "Service").

By using Knows, you consent to the data practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

Account Information: Name, phone number
Profile Data: Age
Payment Information: Processed by Apple via the App Store (we do not store payment details)
Support Communications: Messages when you contact customer support

2.2 Conversation Data

Message Content: Text messages from connected platforms (Instagram), accessed only with your explicit authorization
Screenshots: Conversation screenshots you upload for analysis during onboarding
Text Input: Questions and text you type into AI features (Ask, Re-write, Self-reflect)
Questionnaire Responses: Relationship context questions (Q1–Q4) you answer during onboarding
Relationship Mapping: Contact information and relationship categorizations you provide

2.3 Usage Information

App Activity: Features used, interaction patterns
Device Information: Device type, operating system, unique identifiers
Analytics: App performance, crash reports, usage statistics

2.4 Automatically Collected Information

Technical Data: IP address, device identifiers, app version
Cookies and Tracking: App analytics and performance monitoring via third-party SDKs (see Section 5.2)

3. How We Use Your Information

3.1 Primary Service Functions

AI Analysis: Process conversations to provide personalized relationship insights via Anthropic, Inc. (Claude AI)
Personalization: Customize AI responses based on your communication patterns
Coaching: Deliver relationship guidance through the Ask, Re-write, and Self-reflect features
Proactive Insights: Generate relationship analysis and suggestions

3.2 Service Operations

Account Management: Create and maintain your account
Customer Support: Respond to inquiries and provide assistance
Payment Processing: Handle subscription billing via Apple
Service Improvement: Enhance app functionality and user experience
Legal Compliance: Meet regulatory requirements and enforce terms

3.3 Communications

Service Updates: App notifications about insights and suggestions
Account Information: Subscription status, billing notifications

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

Consent: Explicit permission for conversation analysis and AI processing, obtained via mandatory consent screen before app access
Contract Performance: Providing the subscribed services
Legitimate Interests: Service improvement and fraud prevention
Legal Obligations: Compliance with applicable laws

5. How We Share Your Information

5.1 Data We Do Not Sell

We do not sell your personal information to any third party. We do not share your data for advertising or marketing purposes. Data is shared only with the service providers listed in Section 5.2, solely to operate the App's features.

5.2 Third-Party Service Providers

We share personal information with the following third-party service providers, each of which is contractually required to provide the same or equal level of data protection as described in this Privacy Policy. These providers process data solely on our behalf and under our instructions. They do not use your data for their own independent purposes.

Anthropic, Inc. (Claude AI) — We share conversation messages, screenshots, text input, and questionnaire responses with Anthropic to power AI-driven relationship analysis, insights, and coaching features (Ask, Re-write, Self-reflect). Anthropic does not use your data to train their general AI models.
Amplitude, Inc. — We share anonymized usage events, feature interactions, and session data with Amplitude for product analytics to improve app functionality and user experience.
Adjust GmbH — We share device identifiers (IDFA), install source, and app events with Adjust for install attribution and campaign measurement.
RevenueCat, Inc. — We share subscription status and user identifier with RevenueCat for subscription management and billing.
Prelude (Clerk) — We share your phone number with Prelude for SMS-based phone verification during account creation.

5.3 Your Control Over Third-Party Data Sharing

Mandatory Consent: Before accessing any App features, you are presented with a mandatory consent screen that clearly discloses that your conversation data will be shared with Anthropic, Inc. (Claude AI) for AI processing. You must accept to use the App. If you refuse, you cannot access the App.

AI Data Sharing Toggle: You can disable AI Data Sharing at any time in the App's Settings. Disabling this toggle immediately stops all transmission of your data to Anthropic, Inc. and prevents AI features (Ask, Re-write, Self-reflect) from functioning. You may re-enable AI Data Sharing at any time.

Consent Withdrawal: Withdrawing consent via the AI Data Sharing toggle blocks all AI data processing. Core app functionality (viewing conversations, managing relationships) remains available. Disabling AI Data Sharing does not delete previously generated insights; to delete all data, use the Delete Account feature.

5.4 Other Sharing Scenarios

Legal Requirements: When required by law, court order, or to protect rights and safety
Business Transfers: In case of merger, acquisition, or asset sale (with user notification)

6. Data Security

6.1 Technical Safeguards

Encryption: Encryption for data transmission and storage
Access Controls: Strict employee access limitations
Secure Infrastructure: Industry-standard cloud security
Data Minimization: We only collect and retain necessary information

6.2 AI Processing Security

On-Demand Processing: AI analysis is performed on-demand by Anthropic, Inc. and results are stored on our servers. No personal AI models are created or stored.
No Human Review: AI insights are generated automatically without human access to your messages

7. Data Retention

7.1 Active Accounts

Conversation Data: Retained while your account is active and you use connected platforms
AI-Generated Content: Relationship insights and analysis results are retained while your account is active
Account Information: Maintained for the duration of your subscription

7.2 Account Deletion

Immediate: Access to your data is immediately revoked
30 Days: Complete deletion of personal data
Legal Requirements: Some data may be retained longer if required by law

7.3 Inactive Accounts

Accounts inactive for 2+ years may be deleted with 30 days' notice

8. Your Privacy Rights

8.1 Access and Control

View Data: Access all personal information we have about you
Download Data: Export your data in a machine-readable format
Correct Data: Update inaccurate personal information
Delete Account: Permanently remove your account and all associated data through the App
Opt-Out: Disable AI Data Sharing via the in-app toggle at any time

8.2 Platform Connections

Disconnect Platforms: Revoke access to Instagram at any time
Selective Access: Choose which conversations or contacts to analyze
Data Control: Delete specific conversation analysis without affecting your account

8.3 EU/UK Rights (GDPR/UK GDPR)

Right to Rectification: Correct inaccurate data
Right to Erasure: Delete personal data ("right to be forgotten")
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Transfer data to another service
Right to Object: Opt-out of certain processing activities

9. Third-Party Platforms

9.1 Platform Integration

Instagram: We access data only with your explicit authorization via your Instagram login
Platform Policies: Subject to each platform's privacy policies and terms
Data Scope: We only access conversation data you specifically authorize
Platform Changes: Third-party policy changes may affect our service

9.2 Our Responsibilities

We comply with all platform data usage requirements
We do not circumvent platform privacy controls
We provide clear disclosure of data access before connection

10. Children's Privacy

Age Restriction: Knows is only for users 18 years and older
No Minors: We do not knowingly collect data from anyone under 18
Parental Discovery: If we learn a minor has provided information, we will immediately delete it
COPPA Compliance: We fully comply with the Children's Online Privacy Protection Act

11. International Data Transfers

11.1 Data Location

Primary Storage: United States (with appropriate safeguards)
Processing: May occur in various countries where our service providers operate
Safeguards: All transfers use appropriate legal mechanisms (Standard Contractual Clauses, etc.)

11.2 EU/UK Users

Adequacy Decisions: We rely on approved transfer mechanisms
Additional Safeguards: Enhanced security measures for international transfers
Local Rights: EU/UK privacy rights apply regardless of data location

12. California Privacy Rights (CCPA)

12.1 Information Categories

Personal Identifiers: Name, phone number, device identifiers
Commercial Information: Subscription history
Internet Activity: App usage, AI interactions
Inferences: Relationship insights and AI-generated suggestions

12.2 Your Rights

Know: What personal information we collect and how it's used
Delete: Request deletion of personal information
Opt-Out: Opt-out of sale of personal information (we do not sell data)
Non-Discrimination: Equal service regardless of privacy choices

13. Changes to Privacy Policy

13.1 Notification Process

Material Changes: Advance notice via in-app notification
Minor Updates: Posted in app with updated effective date
Continued Use: Constitutes acceptance of updated policy

14. Contact Us

14.1 Privacy Questions

Email: paul@knows.app
Response Time: Within 72 hours for privacy requests

14.2 Exercising Your Rights

In-App: Use privacy settings in the app (AI Data Sharing toggle, Delete Account)
Email Requests: Send detailed requests to paul@knows.app
Identity Verification: May be required for security purposes

15. Apple App Store Compliance

15.1 App Store Requirements

This policy complies with Apple App Store privacy requirements
Data sharing with third parties is clearly disclosed before collection via a mandatory consent screen
Users can manage AI data sharing through the in-app Settings toggle

15.2 Platform Permissions

We request only necessary device permissions
All data access requires explicit user consent

This Privacy Policy is designed to be transparent about our data practices. If you have questions or concerns, please contact us at paul@knows.app.