Privacy Policy

Knosys is a local-first personal knowledge management application. Your data stays on your device by default, and any optional cloud sync is end-to-end encrypted. This Privacy Policy explains what limited information we collect, how we use it, and your rights regarding that information.

When you create an account or subscribe to Knosys Cloud Sync, we collect the following information:

• Account email address — used to identify your account and send service communications
• Subscription and billing information — processed and stored by Paddle, our merchant of record
• Device identifiers — used to facilitate sync across your devices
• Support information you choose to provide — used to investigate a request you initiate

Workspace record and attachment payloads are stored locally and encrypted before upload through the sync protocol. Sync encryption does not cover every interaction with Knosys or third-party services.

• Sync services process account, workspace/device identifiers, routing, sequence and delivery metadata separately from encrypted content.
• Feedback, support messages, screenshots and attachments you submit can be read by the service and authorized reviewers. Do not include passwords, recovery phrases or private signing keys.
• Plugins and optional providers receive the requests or location information you authorize through their permissions and settings. Their data handling is separate from workspace sync encryption.
• Publisher sign-in, when available, uses GitHub identity information; plugin submissions include packages, source references and review disclosures.

The limited information we collect is used to:

• Operate and maintain the Knosys Cloud Sync service
• Process payments and manage subscriptions
• Provide customer support
• Send service-related communications (e.g., billing confirmations, important updates)

We use the following third-party services to operate Knosys:

• Paddle — payment processing, billing, and sales tax as our merchant of record
• Operator-managed sync infrastructure — stores protocol metadata and end-to-end encrypted records and objects
• Website, licensing, and feedback hosting providers — deliver those service surfaces and receive only the data submitted to them

Each third-party service operates under its own privacy policy. We encourage you to review their policies for details on how they handle data.

The sync protocol encrypts workspace content payloads on your device. Account and service metadata, submitted feedback and authorized provider requests have different access and retention boundaries. Feedback pages require login; administrative tools additionally require an administrator role.

Preserve your recovery material separately and use the application’s backup/export workflows. A local reset does not delete hosted account records, support submissions or server backups.

Local data is entirely under your control and is never deleted by us. For Cloud Sync data stored on our servers, synced data will be deleted within 30 days of account termination. Account information (email and subscription records) may be retained as required for legal and billing purposes.

You have the right to:

• Access the personal information we hold about you
• Request deletion of your account and associated data
• Export your data at any time from the Knosys desktop app
• Cancel your subscription at any time

To exercise any of these rights, contact us at support@knosys.app.

Knosys is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. Continued use of the service after changes are posted constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy, please contact us at support@knosys.app.