Privacy Policy
1. What we collect
We store only what is needed to run the service:
- Account: username, display name, password (hashed, never stored in plain text), birth year (for age verification), optional profile photo, language/theme preferences, timezone.
- Reading data: articles you open, read, save, and rate; flashcard and quiz results; spaced-repetition state; chat history with the AI tutor.
- Device data: a device identifier and coarse info (browser type, screen size) so notifications and layout work, plus your public IP address briefly for rate-limiting and abuse prevention.
2. What we do NOT collect
We do not sell or rent personal data. We do not serve third-party ads. We do not track you across other websites. We use no third-party tracking cookies or fingerprinting scripts.
3. Analytics
Knowl uses its own privacy-friendly analytics: we count page views and rough referrers, aggregated per day, without personal identifiers. Analytics only run after you accept the consent prompt, and you can opt out at any time in Settings.
4. Cookies and local storage
We use browser local storage to keep you signed in and remember preferences (theme, reading position, pending actions). No third-party tracking cookies are set. The cookie banner you see is required by law in some regions and is shown to all visitors regardless.
5. AI providers
AI features (summaries, explainers, translations, quizzes, tutoring) send your prompt and relevant context to third-party model providers to generate responses. We do not sell this data. Please do not submit sensitive personal information to AI features.
6. Hosting
The site is served through Cloudflare (CDN). Standard server logs may include your IP address and requested URLs and are retained briefly for security and abuse prevention.
7. GDPR (EU/EEA/UK users)
You have the right to access, correct, or delete your personal data, and to object to or restrict processing. Contact 140sm4n@gmail.com for any request; we respond within 30 days. You may also lodge a complaint with your local data protection authority.
8. California privacy rights (CCPA/CPRA)
California residents have the right to know what personal information we collect (see section 1), the right to delete it, and the right to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by the CCPA. To exercise your rights, email 140sm4n@gmail.com with the subject "CCPA request" — we verify your identity with your account and respond within 45 days.
9. Retention
We keep account and reading data while your account is active and delete it within 30 days of account deletion. DMCA notices and abuse records are kept as required by law. You may request deletion of stored AI prompts at 140sm4n@gmail.com.
10. Children
Knowl is not directed at children under 13 and we do not knowingly collect their data. If you believe a child under 13 provided personal data, contact 140sm4n@gmail.com and we will delete it.
11. Data security
Passwords are hashed, data is served over TLS, and access is authenticated per user. No system is perfectly secure; contact 140sm4n@gmail.com to report a suspected vulnerability.
12. Changes
We will post changes here with a new "Last updated" date and announce material changes in the app.