Knus privacy policy

What Knus keeps

• Your account: your name, and the email address, Apple ID, Google account or passkey you sign in with; of a passkey, its public key, its name and its ID. Joining with an invite needs none of these.
• Your household: its members with their name, role, color and, if you add them, a photo and birthday.
• What you plan: events, lists, to-dos, chores and their turns, routines, the week menu, recipes with their ingredients, steps, source link and who can make them, comments, reactions and the photos and PDFs you add, and the activity that shows your household who changed what. Photos lose their location and other hidden data when you add them.
• Your settings and devices: preferences such as notifications and quiet hours, and for each signed-in device its model, the system and app version, when it was last used and its push address.
• Connected calendars: the calendars you connect and their events, with the password or the access you gave Knus encrypted.
• Messages to support and what you report to Knus: what you write or report, and the diagnostics you choose to add to a message: the app version, the system version, the model and whether sync works.
• A parent's consent for a Child: who consented and when, and the email address the consent was confirmed with.
• If your household has the Household plan: what the App Store or Google Play tells Knus about the Owner's purchase, such as the plan and its period, whether it's a trial, when it renews or ends, whether a payment failed and the store's ID of the purchase. Never card or bank details.
• On an iPhone, where the law makes the App Store carry a parent's consent: the App Store's ID of your download of Knus, so that consent withdrawn through the App Store reaches the right account.

Why

Knus uses your data for these purposes, each with its own legal basis. We don't build profiles and don't use your data for advertising.

• To give you the app you asked for: showing your household what it plans, keeping it in sync between devices, reminding you, letting you sign in and, if your household takes it, the Household plan. The legal basis is the agreement between you and Knus, the terms.
• To keep Knus working and safe: crash reports, watching that Knus runs well, stopping someone who keeps guessing sign-in codes, refusing new accounts and households from Google's test devices, and the plain totals of where a trial or the plan started. The legal basis is our legitimate interest in an app that works and is secure. You can object to it, and turn crash reports off.
• A Child's data: the consent of their parent or guardian, until the teen agrees for themselves at 16 (see Children's data).
• Make with AI: your consent, which you give before your first use and can withdraw at any time.
• Acting on a report of illegal content and answering the authorities: a legal obligation, where the law requires it.

Who sees what

Everything in a household is shared with its members, except private events and lists, which only their maker sees, and what is shared with a Guest, which is all a Guest sees. Privacy and data in the app shows it for your household. Knus staff can't read your household's content, unless your household explicitly gives permission for support. An Owner or Admin gives it in Settings › Privacy and data › Support access, for at most 7 days, and can end it at any time; everyone in the household sees it in the activity.

Crash reports and statistics

When the app crashes or is slow, your phone makes an anonymous report: which part of the app went wrong, the app and system version and the model of the phone. It has no content, no name, no account and no device ID. Knus receives these reports itself and keeps them for 90 days. They are on by default, and you can turn them off in Settings › Privacy and data. Knus collects no usage statistics. The Usage statistics switch only keeps your choice for if that ever changes; nothing is sent. Where a trial or the Household plan started isn't usage statistics and needs no switch: it is a plain total, kept without your household (see The Household plan).

Internet addresses

Knus does not record the internet address (IP address) your phone connects from: not with your account, not with a signed-in device and not in the log of our own servers. Our servers use the address for a moment, in memory only, and then forget it. They use it for two things: to stop someone who keeps guessing sign-in codes, and to see whether a request comes from Google's own network, where the test devices of Google Play run. From there, Knus makes no new account or household and nobody joins one, while an existing account still signs in. Nothing of that check is written down.

Your address still passes through the companies that carry your requests, files and messages to and from Knus: DigitalOcean, PowerSync, Brevo, Apple and Google, listed below. They need it to deliver them and may keep it in their own logs for a while, under their own terms. Knus doesn't decide what those logs keep or for how long, and doesn't copy them into its own systems.

Children's data

A parent or guardian adds a Child to the household. Knus keeps only what a Child needs to take part: a name, birthday, color, optionally a photo, what the household plans together with the turns and points of chores, and the devices the Child is signed in on with their push address. Knus never asks a Child for an email address, phone number or password.

The parent or guardian who adds a Child confirms by email that they are the Child's parent or guardian and consent to Knus processing the Child's data; Knus records who consented and when. At 16 the teen agrees for themselves, and their own agreement replaces the parent's.

From 12, a Child's private events and lists are their own: parents can't see them and they are not in an export. Children's data is never used for statistics, and until 18 crash reports from their device are the anonymous kind above, without anything that identifies the device.

Children can't use Make with AI, and nothing from a Child's device is ever sent to it. A photo or text an adult gives Make with AI can still show a child, such as a school letter with their name; the section on Make with AI says what happens to it.

A parent can withdraw consent at any time in Settings › Privacy and data › Consent › Withdraw consent. This removes the Child from the household and deletes the Child's data straight away.

Where your data is and who helps us

Your household's data is stored and processed in the EU, with one exception: what a member gives Make with AI is read by Anthropic in the United States (see Make with AI). These service providers process data for Knus, each under a data processing agreement:

• DigitalOcean, data center in Amsterdam: the servers, the database, files and backups.
• PowerSync (JourneyApps), in the EU: keeping your devices in sync.
• Brevo, in France: sending emails, such as sign-in links and consent emails.
• Grafana Labs (Grafana Cloud), in the EU: watching that Knus runs well, with counts and timings. It never receives what your household writes, nor names, email addresses or ids of members. It also gets two lists: the households, each with its id but without its name, with its plan, counts and when it was last used; and the crash reports above, each with what went wrong, the app and system version and the model of the phone, without anything that says whose phone it was.
• Anthropic, in the United States: reading what a member gives Make with AI and turning it into a draft, only when an adult uses it. Under a data processing agreement with the EU's Standard Contractual Clauses; Anthropic trains no AI with it and keeps it no longer than needed.
• Google (Workspace), in Ireland: our mailbox, for the emails you send to Knus.
• Apple: Sign in with Apple, and delivering notifications to your iPhone. You can hide what a notification says on the lock screen.
• Google (Firebase Cloud Messaging): delivering notifications to your Android phone. You can hide what a notification says on the lock screen.
• Google: Sign in with Google, only when you choose it. You sign in with Google itself, on Google's own page on an iPhone and in your phone's own account sheet on Android; Knus never sees your Google password and receives your name and email address from Google, nothing else.
• Apple (iCloud), Google (Google Calendar) and Microsoft (Outlook and Microsoft 365): only when you connect such an account yourself, and only for its calendars. Knus reads the calendars you choose there and writes your changes and the events you ask for back to them.

Calendars you connect

What Knus reads from a calendar you connect is used for one thing: showing and syncing your calendars in your household. It is never used for ads, never sold, and nobody at Knus reads it unless you ask us for help and give permission. You sign in with Google or Microsoft on their own page; Knus never sees that password and keeps only the access you gave, encrypted. Disconnecting in Knus removes that access and the events that came only from that account; what is in your Google, Outlook or iCloud calendar stays there.

Knus's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

Make with AI

Make with AI turns a photo, file, text or link you give into a draft of events, list items or a recipe, which you check before anything is saved. It is optional and only for adults: Owners, Admins and Adults aged 18 or older. Each member agrees once before their first use and can withdraw that in Settings › Privacy and data › Make with AI; an Owner or Admin can switch it off for the whole household.

Only what you give is sent, with your household's language: the photo, file or text, or the page behind a link. Nothing else from your household, such as its members, calendar or lists. Photos lose their location and other hidden data first. Knus deletes what you gave as soon as the draft is saved or closed, writes no request or answer to its logs, and keeps only how many requests your household made and when.

The AI service is Claude, from Anthropic, which processes what you give in the United States, outside the EU, as a processor for Knus. The transfer is covered by a data processing agreement with the EU's Standard Contractual Clauses. Anthropic does not use it to train AI and keeps it no longer than it needs to answer and to check for misuse. One exception: a picture its safety check flags can be kept longer and reported where the law requires it.

A photo can show other people, such as a child or a teacher. Cut away what isn't needed before you send it.

If a draft is wrong, you can report it to Knus from the draft. Knus then keeps that draft, and what you gave only if you choose to send it along, to make Make with AI better. It goes to nobody in your household and not to Anthropic.

The Household plan

The Household plan is optional, and only the household's Owner can take it, in the App Store or Google Play. The store sells it and takes the payment under its own terms and privacy policy; Knus never sees card or bank details. Knus receives the purchase from the store and keeps it with your household, to give everyone in it the extras, to show the Owner the plan and to remind the Owner before a trial ends or when a payment fails. Other members see only whether the household has the plan, never a price or a payment.

When the Owner starts a trial or takes the plan, the app also says where: on the plan screen or from which extra, such as the week menu. Knus adds one to a plain total for that place and keeps it nowhere else: not with the household, the member, the device or the purchase. It tells us which extras make the plan worth having. Nothing else about what members open or tap is counted.

How long we keep it

• Your household's data, for as long as your household uses Knus.
• A Household plan purchase, for as long as the household exists.
• What is deleted goes to the trash for 30 days, then it is deleted for good.
• Deleting your account can be undone for 30 days. Then the account is deleted for good, with your name, photo, color, private items, settings, devices and sign-in methods. What you shared with your household stays there without your name, because it belongs to the household.
• A deleted household can be restored by its owner for 30 days. Then the household and everything in it are deleted for good.
• Deleted data leaves the backups within 90 days.
• An export can be downloaded for 7 days.
• A message to support goes with your account, or after 90 days if that comes first. The email of it in our support mailbox is deleted after 90 days.
• Crash reports are kept for 90 days.
• A draft you report from Make with AI is kept for 90 days, with what you gave if you sent it along.
• The text of a notification is deleted within an hour after it is delivered. That it was sent is kept for 30 days without any name or text; for a reminder about the Household plan, for as long as the household exists, so that you don't get it twice.
• A report to Knus is kept until 90 days after we answer it. A member's name in it goes with their account, and the text of a comment and the title of what it was on go when they are deleted for good.
• Proof of a parent's consent stays for as long as the household exists: who consented and when. The email address used for it goes when that parent's account or the Child is deleted.
• When someone takes over a profile with a new invite, the old phone can be told by whom for 90 days. Those names go sooner when either account is deleted.

Security

Your data is encrypted on its way between your devices and Knus, and stored encrypted. Passwords and access to connected calendars are encrypted separately.

Your rights

You can see, correct, export and delete your data yourself in the app: export and deleting your account are in Settings › Privacy and data. The complete archive of an export holds what you can see in your household and what Knus keeps about you: your sign-in methods, settings, signed-in devices, connected calendars (never their passwords), the activity, your reports and messages to Knus and the consent records. How deleting goes, also without the app, is on getknus.app/en/delete-account. Without the app you can ask there with the email address you sign in with: you confirm with the link we email you, and we then delete your account the same way the app does. You can also object to how we use your data, or ask us anything about it, at [email protected]; we answer within 30 days. If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Changes

When this policy changes in a way that matters to you, we tell you in the app before it applies, once, with a notice you can close. The date at the top says when it last changed.