Privacy policy

What we collect

• Your account: name, email address and password (stored encrypted). If you sign in with Google or Microsoft, we receive the name and email address they share with us.
• What you put in a knyte: its description, notes, tasks, milestones, decisions, findings and materials, including uploaded PDFs and the text we extract from them.
• Your group: who is a member of which knyte and in what role, and the email addresses people enter to invite someone.
• Activity: a log of changes in each knyte, showing who did what and when, including changes an AI assistant made on your behalf.
• Assistant connections: which AI assistants you have connected to your account.
• Payments: if you buy a pass, Stripe handles the payment. We keep only Stripe’s reference numbers and the status of your pass. We never see your card details.
• Technical data: our hosting and sign-in providers log data such as IP addresses to keep the service running and secure. We measure how Knyte is used with PostHog. Without your consent this happens without cookies and without storing anything on your device. If you accept statistics cookies, PostHog recognises your browser and may record visits, but everything you write is always hidden. We also send error reports to Sentry so we can fix bugs. Error reports contain nothing about you or your work. We use no advertising trackers.

Why we use it

• To provide the service you signed up for: your account, your knyten, sharing with your group and your assistants’ access (contract, GDPR Article 6(1)(b)).
• For payments and bookkeeping, which Swedish law requires us to keep for seven years (legal obligation, Article 6(1)(c)).
• To protect the service from abuse, for example with technical logs and rate limits (legitimate interest, Article 6(1)(f)).

We don’t sell your data, don’t use it for advertising, and don’t train AI models on what you put in Knyte.

Who can see your data

• Members of a knyte see everything in it, and each other’s names and email addresses.
• AI assistants you connect to Knyte, such as Claude or ChatGPT, can read the knyten you are a member of and add notes, tasks and proposed findings for you. This also applies when another member connects their assistant: it can then read the knyte’s content, including what you wrote. What the assistant’s provider (such as Anthropic or OpenAI) does with the data is governed by their terms. You can disconnect an assistant at any time under Connections.
• Our providers, who process data on our behalf: Supabase for the database, sign-in and files (stored in the EU, in Ireland) Vercel for hosting (servers in the EU, in Dublin), PostHog for usage statistics (stored in the EU, in Frankfurt) and Sentry for error reports (stored in the EU, in Frankfurt).
• Stripe, which handles payments and is independently responsible for payment data.
• Google and Microsoft, only if you choose to sign in with them.

Supabase, Vercel, Stripe, PostHog and Sentry are US companies. Where data is accessed from outside the EU/EEA, this relies on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

• Your account and content are kept for as long as you have an account. If you ask us to delete your account, we do so within 30 days.
• What you contributed to a knyte that others still use stays there for them, but is no longer linked to your name or email address. If you want that content deleted too, tell us and we’ll go through it with you.
• Invitations are kept together with the knyte they belong to.
• Payment records are kept for seven years, as Swedish bookkeeping law requires.

Your rights

You have the right to know what data we hold about you and to get a copy, to have incorrect data corrected, to have your data deleted, to restrict or object to how we use it, and to receive your data in a machine-readable format.

You can change your name yourself under Settings. For anything else, email hello@knyte.app. We reply within one month.

If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (imy.se).

Cookies and local storage

Knyte uses the following because the service needs it to work:

• a sign-in cookie from Supabase that keeps you signed in
• knyte.language, which remembers the language you chose
• knyte.consent, which remembers whether you accepted statistics cookies
• knyte.auth-email, which remembers whether you last signed in with email, so the form opens straight away
• local storage in your browser for things like panel width, guides you have closed and background images, so they don’t have to be drawn again

Statistics cookies from PostHog (ph_*) are only used if you accept them. You can change your choice at any time under Settings or through Cookie settings at the bottom of our pages.

Age

Knyte is made for students in higher education. You need to be at least 16 to create an account.

Changes

If we make significant changes to this policy, we’ll tell you in the app or by email before they take effect.