Privacy Policy
Last updated: 3 August 2026
Know. is a family circles app for sharing birthdays, clothing and shoe sizes, interests, wish lists and gift ideas within circles of family and friends that you choose. This policy explains what data Know. collects, how it is used, where it is stored, and the rights you have over it.
Who we are. Know. is operated by Mersudin Forbes (the “data controller” for the purposes of UK data protection law). You can contact us about anything in this policy at mersudin@mersudinforbes.com.
In short: we collect only what the app needs to work: your account details and the profile, wish list, family and calendar information you choose to enter, plus a small set of first-party product signals described below. We show your information only to the circles and people you choose. We don't run ads, we don't use any third-party analytics or tracking SDKs, and we never sell your data.
1. Data we collect
Nearly everything Know. holds about you is information you (or a guardian in your circle) actively enter. Two things are recorded by the app itself: the product signals at the end of this list, and, if you turn notifications on, a push token for your device.
- Account information: your email address and name, provided when you sign up with Sign in with Apple, Google, or email and password, plus an internal user ID used to keep your account and its data together.
- Profile information: the details you add to your profile, such as birthday, clothing/shoe/ring sizes, interests, and any other profile fields you fill in.
- Wish lists and gift activity: the items you add to your wish list, and claims you make on other circle members' wish list items.
- Family member and kid records: profiles you create for family members and children you look after, which can include their name, birthday, sizes, interests, wish lists and, if you choose to record them, allergies.
- Calendar and tasks: events and tasks you add for your circle.
- Circle membership: which circles you belong to and the invitations you send or accept.
- Device push token: if you turn notifications on, the token Apple issues your device so notifications can reach it. It identifies the device for delivery and nothing else, and it is deleted when you sign out or delete your account.
- Product signals: as you use the app, Know. records the names of a few events, such as the app being opened, a tab being opened, or the Gift Advisor being opened, along with a coarse flag where it helps (which tab it was, or which area an error came from), your app version and the time. These are linked to your account. We use them for one thing: to see which parts of Know. are working and which are not. They never include anything you write: no names, no wish list items, no notes, no search terms. Each one is deleted 90 days after it is recorded, automatically. If you delete your account, the link between you and any remaining signals is severed at that moment, and they age out on the same schedule. They stay with us, and are never shared with anyone, never sent to a third-party analytics service or an advertising network, and never sold.
We do not collect your location, your contacts, your browsing history, advertising identifiers, or device fingerprints, and we use no third-party analytics or tracking services.
2. How we use your data
We use your data for two purposes: to provide the app, and to improve it. Providing the app means storing the information you enter, syncing it between your devices, and showing it to the circle members and people you have chosen to share it with. Improving it means reading the product signals described above, and nothing else. If you enable them, we also use the dates you have entered to schedule birthday and event reminders; these arrive as notifications on your device.
We do not use your data for advertising, profiling, or marketing, and we do not sell or rent it to anyone.
3. Who can see your data: the sharing model
- Only your circles. Your profile details are visible only to members of the circles you have joined, and only to the extent you allow. Individual profile fields can be marked private, in which case circle members cannot see them.
- Owner-blind gift claims. When someone claims an item from your wish list, that claim is deliberately hidden from you, the list's owner, so surprises aren't spoiled. Other circle members can see that an item is claimed (which prevents double-buying), but you cannot.
- Kid profiles are shared only by explicit grant. A kid profile is visible only to the parent or guardian who created it, plus any specific people that guardian has explicitly granted access to.
- Enforced at the database. These rules are enforced with row-level security in our database, not just in the app's interface.
We do not share your personal data with advertisers, data brokers, or any other third party for their own purposes.
4. Where your data is stored
Your data is hosted with Supabase (a managed Postgres database platform), in a UK/EU region, and a copy of your data is also stored on your own device so the app works smoothly. Data in transit is encrypted (HTTPS/TLS). Supabase processes data on our behalf as a data processor and does not use it for its own purposes.
5. Children
Know. does not offer accounts to children and does not knowingly collect any information directly from children. Profiles for children (“kid profiles”) are created, edited and controlled entirely by their parent or guardian, from the parent or guardian's own account. The guardian decides what information is recorded and who, if anyone, it is shared with, and can edit or delete it at any time. If you believe a child has provided information to us directly, contact mersudin@mersudinforbes.com and we will delete it.
6. Sensitive information (allergies)
Guardians may optionally record allergies on a kid profile (for example so relatives avoid unsuitable gifts or party food). This information is entered voluntarily by the guardian, is visible only under the same explicit-grant rules as the rest of the kid profile, and is used for no other purpose. If you don't want it stored, simply don't enter it, and you can remove it at any time.
7. Third parties and gift links
The Gift Advisor can suggest gifts and open product pages on Amazon. These links include an affiliate tag, which means Know. may earn a small commission on qualifying purchases at no extra cost to you; this is also disclosed inside the app. When you open an Amazon link, you leave Know. and Amazon's own privacy policy applies to anything you do there. Product searches made from the app are relayed through our server to Amazon; we do not build a profile of your searches.
AI-generated gift ideas. The Gift Advisor can also generate tailored gift ideas using AI. To do this, the gift-relevant details of the person you are shopping for — their interests, the “into right now” note, an age band for children, and any “please avoid” note — are sent to Anthropic (the provider of the Claude AI model) to return suggestions. We send only these gift-relevant attributes: not your name, your email address, or any account identifier. Anthropic processes this solely to generate the suggestions and, under its commercial API terms, does not use it to train its models. If you do not use the AI ideas, nothing is sent.
Know. contains no advertising networks and no analytics SDKs.
8. How long we keep your data, and deletion
We keep your data for as long as you have an account, because the app needs it to work. When you delete your account, your data is removed from our systems. You can also delete individual items (profile fields, wish list items, kid profiles, events) at any time from within the app. If you need help deleting your account or data, email mersudin@mersudinforbes.com.
9. Lawful basis for processing
| Processing | Lawful basis (UK GDPR) |
|---|---|
| Providing your account and the app's features (storing and sharing the data you enter) | Performance of a contract (Article 6(1)(b)), our terms of service with you |
| Generating AI gift ideas from a recipient's interests/notes (sent to Anthropic without your name or account identifiers) | Performance of a contract / legitimate interests (Article 6(1)(b) and (f)) |
| Kid profile information entered by a guardian, including any allergy details | Consent of the parent/guardian who enters and controls it (Article 6(1)(a); Article 9(2)(a) where health-related) |
| Product signals: event names and coarse flags showing which parts of the app get used, kept for 90 days | Legitimate interests (Article 6(1)(f)), improving the app |
| Keeping the service secure and preventing abuse | Legitimate interests (Article 6(1)(f)) |
| Responding to your emails and legal obligations | Legitimate interests / legal obligation (Article 6(1)(c) and (f)) |
10. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you;
- Rectify anything that's inaccurate (most data can be edited directly in the app);
- Erase your data (delete items in the app, or delete your whole account);
- Port your data, receiving a copy in a structured, machine-readable format;
- Object to or restrict certain processing, and withdraw consent where consent is the basis (for example, by removing information you entered).
To exercise any of these rights, email mersudin@mersudinforbes.com. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO): ico.org.uk.
11. Changes to this policy
If we change this policy, we will update it at this address and revise the “Last updated” date above. For significant changes we will also tell you in the app. Continued use of Know. after a change means the updated policy applies.
12. Contact
Mersudin Forbes
Email: mersudin@mersudinforbes.com
Web: tryknow.app