Privacy Policy

Who we are

Knot is a personal group-expense app operated by an individual developer in Singapore. You can reach us at hello@knot.bharcode.com.

What we collect

• Account — your email address and a password hash, or a Google account ID if you sign in with Google.
• Profile — the display name you choose.
• Group data — group names, trip destinations and dates, and the members you add.
• Expenses — amounts, descriptions, categories, who paid, and how each expense is split.
• Optional payment details — if you add them, your PayNow handle, phone number, or Instagram, used only so group members can settle up with you.
• Push subscriptions — if you enable notifications, a browser-provided push token. You can revoke this anytime in your browser/OS settings.

We do not collect analytics, advertising identifiers, or location data, and we do not use tracking cookies.

How we use it

Your data is used solely to run the app: authenticating you, showing your groups and balances, splitting expenses, and (if enabled) sending you notifications. We do not sell or share your data for marketing.

Expense parsing

When you type an expense in natural language, the text you enter and your group members' display names may be sent to Google's Gemini API to extract the amount, description, and who is involved. No financial totals or account identifiers are sent. If no AI key is configured, parsing happens locally with no third party involved.

Where your data lives

Account and app data are stored in Supabase (hosted on AWS). Authentication is handled by Supabase Auth. The app is served by Vercel. These providers process your data on our behalf under their own security and privacy terms.

Your rights

You can access, correct, export, or delete your data at any time. Email hello@knot.bharcode.com from your account address and we will action deletion of your account and associated personal data within 30 days. If you are in the EU/UK, you have rights under the GDPR including access, rectification, erasure, and objection.

Retention

We keep your data for as long as your account exists. When you delete your account, your personal data is removed. Note that expenses and balances you created may remain visible to other members of shared groups as part of their records.

Children

Knot is not directed at children under 13 (or the minimum age in your country), and we do not knowingly collect their data.

Changes

We may update this policy. Material changes will be reflected by the "last updated" date above.