Privacy policy
Last updated 29 August 2026.
Knock is a small app made by one person. This policy says exactly what it stores, why, and how to get rid of it. There is no advertising, no analytics, no tracking, and nothing is sold or shared with anyone.
What Knock stores
- An anonymous identity. There is no account in Knock — no email, no password, no sign-up. The app creates a random identifier on your phone so your squads know which replies are yours. It is not connected to your name, Apple ID, or anything else.
- Your display name and emoji. The ones you pick during setup. Your squads see them.
- Your squads. Their names, icons, invite codes, and who is in them.
- Knocks and answers. Which squad, who knocked, the optional short note, and whether each person said in, in a bit, or can't.
- A notification token. Issued by Apple, so knocks can reach your phone. Without it the app cannot do the one thing it is for.
What Knock does not store
- No contacts. Knock never reads your address book.
- No location.
- No photos. The camera is used only to scan an invite code, and nothing from it is recorded or transmitted.
- No messages. There is no chat in Knock — the only text anyone types is their own name and a note of at most 60 characters attached to a knock.
- No email address — there is nothing to type one into.
- No advertising or analytics identifiers of any kind.
Who can see what
People in a squad can see that squad's members, their names and emoji, and their answers to that squad's knocks. Nobody outside a squad can see anything about it. An invite link reveals only the squad's name, icon and how many people are in it — never who they are.
Where it is stored
On Supabase, hosted in Frankfurt, Germany. Access is enforced by database row-level security: the server itself refuses to return rows belonging to squads you are not in. Notifications are delivered by Apple's Push Notification service, which necessarily sees the notification text.
How long
Knocks and answers are kept while they are useful and are not retained as a permanent history. A notification token that has not been used for 60 days is deleted automatically. Everything else is kept until you delete your account.
Deleting everything
Settings → Delete account. Your profile, squads you are the last member of, your knocks and your answers are deleted immediately and permanently. There is no recovery, and you do not have to email anyone to do it.
Children
Knock is not directed at children under 13 and does not knowingly collect information from them.
Changes
If this policy changes in a way that matters, the date at the top changes and the app's release notes will say so.