Privacy Policy
Effective October 5, 2026 · Last updated October 5, 2026
The short version
- We collect your email, your quiz answers, your reading progress and your subscription status so Knowist can work for you.
- Stripe handles your payment card. We never see or store the full number.
- With your consent where the law requires it, we use Meta (Facebook and Instagram) advertising tools to measure our ads. They receive a hashed (scrambled) version of your email and details about your device. You can change this anytime with .
- We don’t sell your information for money. You can ask us to see, correct or delete your data.
- 1. Who we are
- 2. Information we collect
- 3. How we use it
- 4. Cookies and similar technologies
- 5. How we share it
- 6. Advertising and your choices
- 7. How long we keep it
- 8. Security
- 9. Your rights
- 10. US state privacy rights
- 11. EEA and UK residents
- 12. International transfers
- 13. Children
- 14. Changes to this policy
- 15. Contact us
1. Who we are
Knowist LLC (“Knowist”, “we”, “us”) runs the Knowist website at knowist.app and the Knowist web app (the “Service”). We are the controller of the personal information described in this policy. This policy explains what we collect, why, who we share it with, and the choices you have. Our Terms of Service also apply to your use of the Service.
2. Information we collect
Information you give us
- Account details: your email address and, if you give it, your first name.
- Quiz and preference answers: what you tell us in the onboarding quiz and settings, such as your age range, gender, interests and growth areas, goals, learning obstacles, how you heard about us, the books you pick, your daily reading goal, preferred formats and theme.
- Learning activity: the books you save and finish, your reading position, chapter-check answers, reflections you write, and practice sessions you plan.
- Messages: what you send us when you contact support, including refund or privacy requests.
Payment information
When you start a trial or subscribe, Stripe collects your payment details (such as card number, expiry date and billing postcode or country) directly. We receive and store your Stripe customer ID, your plan, subscription status, trial and renewal dates, and whether a payment failed. We do not receive or store your full card number.
Information collected automatically
- Device and connection data: your IP address, browser and device type (user agent), and the pages you visit and when.
- Funnel and usage events: which onboarding steps you view and complete, the funnel version you saw, checkout outcomes, and errors. We strip names and email addresses from these events before storing them.
- Campaign information: if you arrive from an ad or link, the referring campaign tags (such as UTM parameters) and click identifiers (such as Meta’s
fbclid). - Sign-in requests: when you ask for a sign-in link, the email address, a short matching phrase, a description of the device that asked (such as “Chrome on Mac”), and when the request was made and used.
- Advertising identifiers: Meta’s browser cookies (
_fbp,_fbc), where you have allowed them.
Information stored on your device
The app keeps your profile, preferences and reading progress in your browser’s local storage so it works quickly and before you sign in. When you have an account, a copy is saved to our servers so you can pick up on another device.
3. How we use it
| Purpose | Information used | Legal basis (EEA/UK) |
|---|---|---|
| Create your account, sign you in by email link or code, and keep your progress in sync across devices | Email, sign-in requests, preferences, learning activity | Performance of our contract with you |
| Build your personalised learning path and recommendations | Quiz answers, preferences, learning activity | Performance of contract |
| Process trials, subscriptions, renewals and refunds, and send receipts and billing notices | Email, Stripe customer and subscription data | Performance of contract; legal obligation (tax and accounting records) |
| Respond to support, refund and privacy requests | Email, messages, account and subscription data | Performance of contract; legal obligation |
| Understand how people use the Service and improve it, including testing different versions of the onboarding | Funnel and usage events, campaign information, device data | Legitimate interests (improving our product) |
| Measure and improve our advertising on Meta | Hashed email and first name, hashed account ID, IP address, user agent, Meta cookies, funnel events and purchase values | Consent, where required; otherwise legitimate interests |
| Show recent-signup activity in the onboarding (see section 5) | First two letters of your email address and how long ago you signed up | Legitimate interests |
| Keep the Service secure, prevent fraud and trial abuse, and exclude our own team’s traffic from statistics | IP address, device data, account and payment status | Legitimate interests |
| Comply with law and enforce our Terms | Any information as needed | Legal obligation; legitimate interests |
We don’t use your information to make decisions that have legal or similarly significant effects on you based solely on automated processing. Your learning path is generated automatically from your answers, but it only affects which books we suggest.
We don’t send marketing emails unless you have agreed to receive them or the law otherwise allows it, and every marketing email will include a way to unsubscribe. Service emails such as sign-in links and receipts are not marketing.
4. Cookies and similar technologies
We use cookies, local storage and similar technologies:
- Strictly necessary: to keep you signed in, remember your progress and preferences, and remember your privacy choices. These are needed for the Service to work.
- Analytics: to understand how visitors move through the site and onboarding.
- Advertising: the Meta Pixel and its cookies, which help us measure whether our ads lead to sign-ups and purchases and reach people likely to be interested.
We use a consent tool provided by DataCops to ask for and record your choices. Depending on where you are, analytics and advertising technologies run only after you agree, or you can turn them off. You can change your choices at any time with , which is also linked at the bottom of our homepage. You can also block or delete cookies in your browser settings, though parts of the Service may then stop working.
5. How we share it
We share personal information only as described here.
Service providers
These companies process information on our behalf, under contracts that limit how they can use it:
| Provider | What they do for us |
|---|---|
| Supabase | Database, account sign-in, sending sign-in emails, and storing narration audio |
| Vercel | Hosting the website and app, and server logs |
| Stripe | Payments, subscriptions, receipts, fraud prevention and the subscription management portal. Stripe also uses payment data as an independent controller under its own privacy policy. |
| DataCops | Consent management and website analytics |
| Fontshare (Indian Type Foundry) | Delivering the fonts the site uses; your browser contacts their servers, which see your IP address |
Meta (advertising)
Where you have allowed advertising technologies, we send Meta Platforms information about your visit and actions on Knowist (for example viewing the plans, starting a trial or subscribing, with the plan and amount). We send this both from your browser through the Meta Pixel and from our servers through Meta’s Conversions API. It includes your IP address, user agent, Meta cookies and click identifiers, and an irreversibly hashed (SHA-256) version of your email address, first name and Knowist account ID, which Meta uses to match the activity to Meta accounts. Meta uses this to measure and improve our ads and, under its own terms, may use it for its own purposes. See Meta’s Privacy Policy.
Recent-signup activity
One version of our onboarding shows a short list of recent sign-ups, such as “jo… joined 2 hours ago”. It displays only the first two letters of the email address and how long ago the account was created, never the full address or name, and only for accounts created in the last 7 days. If you would prefer not to appear, contact us and we will exclude you.
Other sharing
- Legal reasons: when we believe in good faith it’s required by law, legal process or a government request, or needed to protect the rights, property or safety of Knowist, our users or others.
- Business transfers: if Knowist is involved in a merger, acquisition, financing or sale of assets, your information may transfer to the new owner, who will remain bound by this policy for the information we collected under it.
- With your permission: in any other case where you ask us to or agree.
6. Advertising and your choices
We don’t sell your personal information for money. However, some US state laws treat sharing data with advertising partners like Meta for cross-context behavioural advertising as a “sale” or “sharing”. You can opt out at any time by turning off advertising in , or by contacting us. You can also adjust your ad preferences in your Meta account settings.
7. How long we keep it
- Account, preferences and learning activity: for as long as you have an account. When you ask us to delete your account, we delete or anonymise it within 30 days.
- Subscription and payment records: for as long as the law requires us to keep them for tax, accounting and legal purposes, typically up to 7 years after the transaction.
- Sign-in requests: each link or code expires shortly after it is sent; the request record is kept only as long as needed for security and troubleshooting.
- Funnel and usage events: up to 26 months, after which we delete them or keep them only in aggregated form that doesn’t identify you.
- Support messages: for as long as needed to handle your request and any follow-up, and no longer than 3 years after it is resolved.
We may keep information longer where needed to resolve disputes, enforce our agreements, or comply with the law. Information stored in your browser stays there until you clear it.
8. Security
We use reasonable technical and organisational measures to protect your information, including encrypted connections (HTTPS), access controls on our database, sign-in without passwords that could be reused or leaked, and keeping payment details with Stripe rather than on our servers. No system is perfectly secure, so we can’t guarantee absolute security. Protect your email account, since it is the key to your Knowist account.
9. Your rights
Depending on where you live, you may have the right to:
- know what personal information we hold about you and get a copy of it, in a portable format;
- correct information that is wrong or incomplete;
- delete your information;
- object to, or ask us to restrict, certain processing;
- withdraw consent you have given, at any time, without affecting processing that already happened;
- opt out of the “sale” or “sharing” of personal information and of targeted advertising; and
- complain to a data protection authority.
To make a request, contact us at the support address on your Knowist receipt from the email address on your account. To protect your account, we may need to confirm that the request comes from you, for example by asking you to confirm from that email address. You may use an authorised agent where the law allows; we may ask for proof of their authority. We respond within the time the law requires (usually within 30 days, or 45 days under US state laws) and won’t treat you differently for exercising your rights.
If you have an active subscription, cancel it under Manage subscription before asking us to delete your account, or ask us to do both.
10. US state privacy rights
If you live in California or another US state with a comprehensive privacy law, you have the rights listed in section 9 to the extent your state’s law provides them, including the right to appeal if we decline your request (reply to our decision to appeal). In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described above:
- Identifiers (email address, first name, account ID, IP address, Stripe customer ID, cookie identifiers): shared with Meta for advertising, and disclosed to our service providers.
- Characteristics of protected classifications (age range and gender, if you choose to answer): disclosed to our service providers only.
- Commercial information (plans, trials and purchases): shared with Meta for advertising (event and amount only), and disclosed to Stripe and our service providers.
- Internet or other electronic network activity (pages and steps viewed, campaign tags, device and browser): shared with Meta for advertising, and disclosed to our service providers.
- Inferences (your interests and learning path): disclosed to our service providers only.
We do not collect sensitive personal information for the purpose of inferring characteristics about you, and we don’t knowingly sell or share the personal information of anyone under 16.
11. EEA and UK residents
If you are in the European Economic Area or the United Kingdom, the legal bases we rely on are listed in section 3. Where we rely on legitimate interests, you can object, and we will stop unless we have compelling grounds. Where we rely on consent, you can withdraw it at any time using Privacy choices or by contacting us. You can complain to the data protection authority where you live or work, though we would appreciate the chance to address your concern first.
12. International transfers
Knowist is based in the United States, and our service providers may process information in the United States and other countries whose data protection laws may differ from yours. When we transfer personal information from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) or a provider’s certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.
13. Children
Knowist is for adults aged 18 and over. We don’t knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
14. Changes to this policy
We may update this policy from time to time. We will post the new version here and update the date at the top. If we make material changes, we will tell you by email or in the app before they take effect, and ask for your consent where the law requires it.
15. Contact us
Questions or requests about your privacy are welcome.
Knowist LLC
Email: the support address on your Knowist receipt