Privacy Policy

1. Who Controls Your Data

Where GDPR applies, we provide the identity and contact details of the controller as required.

2. Information We Collect

A) Information You Provide

• Account information: such as email address and authentication-related data needed to create and access your account.
• Your Content: images you upload, links you save (URLs), collection names, notes, and other content you store in the App.
• Photo library: With your permission, the app accesses your device's photo library so you can select photos to add to your collections. We do not scan, analyze, or access photos beyond what you explicitly select.

B) Information Collected Automatically

• Device/app data: device type, operating system version, app version, language, and similar technical data.
• Logs and diagnostics: IP address (or derived region), timestamps, crash logs, and security logs used to operate, secure, and troubleshoot the Services.

C) Information From Third Parties (Only Where Needed)

• Apple subscription/purchase status: Apple provides purchase confirmations and subscription status needed to enable paid features (we do not receive your full payment card information).
• Link metadata for previews: when you save a link, we may send the URL to LinkPreview to retrieve title/description/preview image metadata.
• Google Drive export: if you export, Google processes the exported files under your Google account and Google's own policies.
• Social authentication: If you sign in using Google or Facebook, we receive basic profile information (name, email, profile photo) from that provider as needed to create or link your account. We do not receive your password. Their respective privacy policies govern their data practices:
  • Google: https://policies.google.com/privacy
  • Facebook: https://www.facebook.com/policy.php

3. How We Use Information

We use information to:

• Provide core functionality (account, storage, collections, syncing)
• Store and serve images you upload
• Generate link previews/metadata for saved links
• Process and enforce paid feature access using Apple purchase status
• Maintain security, prevent abuse, and troubleshoot
• Respond to support requests and communicate important service updates

4. Legal Bases (EEA/UK and Similar Regions)

When GDPR (or similar laws) applies, we process personal data based on:

• Contract necessity (to provide the Services)
• Legitimate interests (security, reliability, fraud prevention, improvement)
• Consent (where required for a specific feature or local law)

5. How We Share Information

We do not sell your personal data.

We share information only as needed to operate the Services:

Service Providers (Processors)

These providers process data on our behalf under contractual obligations and only for the purposes described here.

Legal, Safety, and Enforcement

We may disclose information if required to comply with law, protect rights/safety/security, or investigate abuse and fraud.

Business Transfers

If the Services are involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to this Policy.

6. International Transfers

Your data may be processed in countries other than your own depending on where we and our service providers operate and where infrastructure is located. Where required, we rely on appropriate safeguards for cross-border transfers.

7. Data Retention

We keep data only as long as necessary to:

• Provide the Services
• Comply with legal obligations
• Resolve disputes
• Maintain security and prevent abuse

Your Content is retained until you delete it or delete your account, subject to limited backup and legal/security retention.

8. Account Deletion and Your Choices

You can delete your account within the App. Apple requires in-app account deletion for apps that support account creation.

When deletion is completed, we delete or anonymize personal data and Your Content from our active systems, except where retention is legally required or necessary for security/dispute resolution.

You can also:

• Delete individual items/collections
• Export your data to Google Drive (user-initiated)

9. Security

We use reasonable technical and organizational safeguards to protect your data. No system is 100% secure, and you use the Services at your own risk.

10. Children's Privacy

The Services are not directed to children under 13. If you believe a child has provided personal data, contact us at app@knotstud.io and we will take appropriate steps.

11. Your Privacy Rights

Depending on where you live, you may have rights to:

• Access, correct, delete, or export your data
• Object to or restrict processing
• Lodge a complaint with your local data protection authority

To exercise your rights, contact: app@knotstud.io

12. Third-Party Services and Links

The Services may connect to third parties (e.g., LinkPreview, Google Drive, and websites you save). Their processing is governed by their own policies and terms.

13. Changes to This Privacy Policy

We may update this Policy from time to time. We will update the "Last updated" date and, where appropriate, provide notice in the App.

14. Contact

Privacy questions or requests: app@knotstud.io