Your info

applies to knocksocial.co.uk

Knock collects as little as it can, shows your details only to the people who need them, deletes party details soon after each party, never sells your information, shows no ads and uses no tracking cookies. Knock never reads your contacts or messages your friends.

Who looks after it

Knock, run by the Knock team. The company behind it, Knock Labs Ltd, is being set up, and this page will name it in full once it is. For anything about your information, email team@knocksocial.co.uk.

What we collect

Your account: your email address and a password (stored scrambled by our login provider), or, if you use Google, your email, name, profile picture and Google account ID. Nothing else from your Google account.
Your profile: first name and university; if you add them, a photo taken live in the app, course, year, a one-line bio, Instagram and Snapchat usernames, a song and the music you like.
Hosting: your party’s details and photos, and its address, entry notes and an optional phone number.
Asking to come: how many of you, what you’re bringing, your note, the host’s answer, your pass and when you were let in.
Safety: reports, blocks and hosts’ decision records; and short technical logs (IP address, device, time) kept by our providers.

We don’t ask for your date of birth, location, or anything about your health, beliefs, sexuality or ethnicity. Your photo is never used for face recognition.

Who sees what

Anyone signed in sees a party’s details without the address, and the host’s profile including their usernames. A host you ask sees your profile and what you wrote. The address goes only to people the host says yes to, and is deleted when the party ends.

Why

To run Knock for you (our agreement with you when you sign up), and to keep people safe and stop misuse (our legitimate interests). We don’t rely on consent and we don’t market to you.

Who helps us run it

Supabase (database, sign-in and photos), Vercel (hosting) and Resend (account emails). Some of them store data outside the UK, including in the United States; where they do, it’s protected with the safeguards UK law requires. Google, Google Maps, Spotify, Instagram and Snapchat are used only when you choose to use them. Knock’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep it

A party’s address and entry notes: until the party ends.
The party, its photos, requests and passes: 30 days after it ends.
Reports: 2 years. Hosts’ decision records: 12 months.
Your account and profile: until you delete your account, which you can do any time from your profile, and it’s gone straight away.

Your rights

You can ask for a copy of your information, have it corrected or deleted, object to how we use it, or take it elsewhere. Email team@knocksocial.co.uk; we reply within a month, free. If you’re unhappy with our answer, you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

Only the ones Knock needs to keep you signed in and working. No tracking or advertising cookies. Spotify may set its own cookies only if you press play on a song.