Privacy Policy

knoyu is operated by Flowstead LLC. This policy explains what data we collect, how we use it, and your rights regarding that data. By using knoyu you agree to the practices described below.

1. What we collect

Account information

When you sign up we collect your email address and, if you use social login (Google or Apple), a unique identifier from the provider. We do not store your social-login password.

Conversations & memories

knoyu stores the messages you send and receives during conversations. Key facts, feelings, decisions, and preferences are extracted as structured “memory” notes with timestamps, categories, importance scores, and emotional context. These memories are used to personalize future responses.

Profile data

We build and maintain a profile summary about you based on your conversations — traits, goals, and important people you mention. You can view and delete this at any time.

Device & push tokens

If you enable push notifications on mobile, we store an Expo push token associated with your account so we can deliver check-in reminders.

Payment information

Subscription billing is handled entirely by Stripe. We do not store credit card numbers or bank details. We store only your Stripe customer ID and subscription status.

Usage data

We track token usage per account for rate-limiting and billing purposes. We do not use third-party analytics or tracking pixels.

2. How your data is used

Your data is used exclusively to:

• Personalize your knoyu experience (memory recall, contradiction detection, emotional insights)
• Generate AI responses tailored to you
• Send push notification check-ins you've opted into
• Process subscription payments

We do not sell, share, or license your data to third parties for advertising or marketing. We do not train AI models on your conversations.

3. Third-party services

knoyu uses the following third-party services to operate:

• OpenAI — language understanding and response generation. Your messages and relevant memories are sent as context. See OpenAI's privacy policy.
• Together AI — alternative language model provider used for certain personality modes. See Together AI's privacy policy.
• AWS (Amazon Web Services) — authentication (Cognito), database (DynamoDB), and infrastructure. See AWS privacy policy.
• Elastic Cloud — semantic search and memory indexing. See Elastic privacy statement.
• Stripe — payment processing for subscriptions. See Stripe's privacy policy.
• Vercel — web hosting and deployment. See Vercel's privacy policy.
• Expo — mobile app push notifications. See Expo's privacy policy.

4. Data storage & security

Your data is stored in AWS DynamoDB and Elastic Cloud, both encrypted at rest and in transit. Authentication is handled by AWS Cognito with secure token-based sessions. We do not store passwords directly — authentication is managed through Cognito or social login providers.

5. Privacy modes

knoyu offers privacy controls within the app:

• Normal mode — conversations and memories are stored and visible.
• Secret mode — memories are stored but hidden from normal conversations. Only accessible when you open the vault.
• Forget mode — nothing is saved. The conversation exists only while it's happening.

6. Data retention & deletion

We retain your data for as long as your account is active. You can delete individual memories, entire conversations, or all of your data at any time from within the app. Deletion is permanent and irreversible — we do not keep backups of deleted data.

If you wish to delete your entire account and all associated data, you can do so from the Settings page or by contacting us at the email below.

7. Age requirement

knoyu is intended for users 17 years of age and older. We do not knowingly collect data from anyone under 17. If you believe a minor has created an account, please contact us and we will delete it.

8. Cookies & local storage

knoyu uses authentication cookies and tokens issued by AWS Cognito to maintain your session. We do not use tracking cookies, third-party analytics, or advertising pixels.

9. Your rights

You have the right to:

• Access all data we store about you (via the Memories and Settings pages)
• Export your data as JSON or Markdown at any time
• Delete any or all of your data at any time
• Opt out of push notifications
• Request account deletion by contacting us

If you are a California resident (CCPA) or in the EU/EEA (GDPR), you may have additional rights. Contact us to exercise them.

10. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you through the app or by email. The “last updated” date at the top reflects the most recent revision.

11. Contact

Questions about your privacy? Reach out at privacy@knoyu.ai

Flowstead LLC