Privacy

In short

• There are no accounts. We do not ask for a name, email, phone number or password. Your identity is a key kept on your phone.
• What you share with your group is end-to-end encrypted. Our server only sees ciphertext, public keys and random identifiers, so it cannot read your answers or hand them to anyone.
• We use no ads, no usage analytics and no crash reporting sent to third parties.
• Everything that can stay on your phone stays on your phone.

What stays on your phone

Your answers, notes, answer history, hidden categories and settings are kept in an encrypted database on the phone. The key is held in the phone's own secure storage.

They stay there until you delete them, leave the group, use the emergency wipe or uninstall the app.

What passes through our server

So that the phones in a group can find each other and exchange messages, we use a relay server on Cloudflare. Data is stored in the EU; traffic passes through Cloudflare’s global network. It holds only the following.

An invitation's secret travels in the link, after the # symbol, and is never sent to any server.

What we do not collect

• Name, email, phone number, location or device identifiers.
• Usage analytics, advertising or tracking of any kind.
• Push notifications in the first version. Notifications are generated on the phone itself.
• Images, video or audio. The app does not use them.

Third parties

Cloudflare hosts the relay server and this website. It is a US company, subject to requests from US authorities. We accept that because it only has access to encrypted data, public keys and random identifiers.

Apple and Google distribute the app and process purchases. They see that you installed or bought, but not which groups you belong to. Purchases are verified on your phone and our server never sees them.

This website

This site uses no cookies, has no forms, has no analytics and loads nothing from other domains. The fonts are served from the site itself.

To serve it, Cloudflare's network processes your IP address transiently, as for any website. We do not keep request logs or records of visits to the site.

The invitation page (knotwell.app/i) reads the code in the link, in your browser, to open the app. That code sits after the # symbol and therefore never reaches the server. The page does not store it or send it anywhere.

Good to know

• To find what you have in common, the other person's app receives your answers, including your "no" answers. Our app never shows them, but a tampered app could.
• If someone answers "yes" to everything, they learn everything you said yes to.
• If you leave a group or break up, the other person keeps on their phone what had already been revealed.
• There are no accounts and no backup. If you lose your phone, you start over.
• Invitation links are secret. Send them privately and always compare the safety code by voice or video.
• One person's purchase unlocks premium for your shared group. It cannot be taken back.
• We store only encrypted data that we cannot read, in the EU, on Cloudflare, a US company. The server sees which public keys share a group and when there is activity, but not the content.

Your rights

Because we do not know who you are, the rights of access, rectification, erasure and portability are exercised mostly on your phone: you can edit your answers, leave a group and erase everything with the emergency wipe.

When the last person leaves a group, the group's history is deleted from the server.

You can withdraw your consent at any time by leaving the group or deleting the app's data.

Age

Knotwell is for adults aged 18 and over. The app asks you to confirm your age before first use.