Last updated: 31 August 2026
KNOCK is an attention-request app: you "knock" to let someone know you need them, and they tap "I saw it." It is built to collect as little about you as possible. This policy explains what we handle and why.
KNOCK has no passwords, phone numbers, or email sign-up. Your identity is a device-bound key created on your phone and an anonymous account on our backend. We never ask for your real name, contacts list, or phone number to create an account.
The short text in a knock is encrypted on your device before it is sent. Our servers only ever store ciphertext — we cannot read your messages. Once the recipient taps "I saw it" or replies, the knock is deleted everywhere (server and devices). Knocks are not a chat history and are not retained.
KNOCK does not track your location. If, and only if, you tap "I'm here" as a quick reply, KNOCK reads your current location once to build a map link and sends it to the person you are replying to. Your location is never stored on our servers and never collected in the background.
If an account is inactive for 30 days it is automatically deleted. Its username is released for reuse 15 days after that. You can also delete your account at any time from Settings → Delete account, which permanently removes your profile, username, contacts, and any knocks.
KNOCK uses Supabase (database, authentication, and functions) to run its backend and Apple Push Notification service to deliver notifications. These providers process data only to operate the service.
KNOCK is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect data from children.
You can delete all of your data at any time using in-app account deletion. For any privacy question or request, contact us at the address below.
If this policy changes, we will update the "Last updated" date on this page.
Questions about privacy? Email 20team20team@gmail.com.
Don't call. Knock.