Privacy Policy

Effective August 16, 2026

Knock is a small encouragement app made by Performance Marketer. This policy describes, plainly and accurately, how the app handles your information.

The short version

Your content stays on your device unless you connect with a friend. Notes, history, and local friends are stored only on your phone. If you link with another Knock user to exchange real knocks, the minimum needed to deliver them — your first name, the friend link, the knocks you send (including any voice clip you attach), and a push notification token — passes through and is briefly stored on our server.

What stays on your device

Your friends, circles, notes, moments, and knock history
Voice clips you record but don't send to a linked friend
Your settings and subscription state

What our server stores (only if you use online features)

The first name you entered during setup and a random account ID
Friend links you create by sharing or redeeming a link code
Knocks you send to linked friends — the knock count, feeling, optional note, and any voice clip you attach. Notes and voice clips are deleted from the server as soon as the knock reaches your friend's device; a minimal delivery record (no content) is kept briefly to prevent duplicate deliveries
A device push token, used solely to notify your friend that you knocked

If you never link with a friend, the app works fully offline and none of your content leaves your device.

What we do not do

No passwords, emails, or phone numbers required
No analytics, advertising, or tracking of any kind
No selling or sharing of data with anyone
No third-party SDKs that collect data (push notifications are delivered through Apple/Google and Expo's push service)

Microphone

The app asks for microphone access only if you choose to record a voice knock. Recording is optional — you can skip it. Recordings are saved on your device; a recording is uploaded only when you send it as a knock to a linked friend, so it can play on their device.

Deleting your data

For a server-linked account, open Settings → Delete account and data, type DELETE, and confirm. The authenticated request permanently removes your profile, token, push token, links, invites and reservations, requests, messages, knocks, voice payloads, and account-linked redemption records. A failed request leaves the account and credentials intact so you can retry. The app also clears its local data; if the device filesystem refuses a local voice-file delete, the app tells you that cleanup is incomplete rather than claiming everything is gone.

Local-only accounts have no server account: Clear this device removes only the device's local data. Deleting the app also removes its local data. Deleting your Knock account does not cancel an Apple or Google subscription; use the store's subscription management page separately. We may retain only the minimum abuse-prevention evidence required by law or platform rules, with no account name, message body, or voice payload.

Children

Knock is not directed at children and collects only the minimal information described above (a first name and content you choose to send) from any user.

Changes to this policy

If a future version of the app changes how data is handled (for example, adding optional online features), we will update this policy and its effective date before that version is released.

Contact

Questions about privacy? Email eric@performancemarketer.com.