Privacy Policy

1. The short version

Knocklet is run by Solutas Labs, LLC, and it keeps as little as it can: an email address for each owner, a hash wherever a secret would otherwise sit, and thirty days of presses. There are no ads, no analytics scripts, no trackers, and nothing is sold or shared for marketing.

2. If you own rooms

• Account. Your email address and, if you set one, a display name.
• Sign-in. There are no passwords. A six-digit code goes to your email; we store a salted hash of it, briefly, and a hash of each session token. Web sessions last thirty days, iOS sessions ninety.
• Push. If you install the iOS app, a device token, so Apple can carry a ring to your phone.
• Text messages. Only if you add one: a phone number for ring escalation by SMS.
• Activity. Your rooms, and thirty days of what happened in them: presses, answers, and the trail the console shows.

3. If you pressed a button

No account, no name, no email. The room page sets one cookie, a random token tying your browser to that room, so your press and its answer can find you again. If you type a message with a press, the room’s owner sees it. Our host keeps IP addresses in ordinary server logs and rate-limit counters.

4. Who handles it

• Cloudflare hosts the service, its database, and its logs.
• Resend sends the sign-in code email.
• Apple carries push notifications to the owner app.
• Twilio carries text messages, only for owners who set them up.

No one else. We may disclose data if the law requires it, and account data would transfer with the business if the business were ever sold.

5. How long

Presses, the room activity trail, and idle presser sessions are removed after thirty days by a nightly job. Owner accounts stay while they’re in use. Write to hello@knocklet.com and we will close your account and remove its data; asking is the whole process.

6. Cookies

Session cookies only: the owner console’s sign-in cookie and the presser page’s room token. There are no advertising or analytics cookies, and the fonts and scripts on every page are served from our own hosts, so the pages call no one else from your browser.

7. Your rights

Depending on where you live, the law may give you rights to see, correct, or remove personal data, and we honor them the same way everywhere: email hello@knocklet.com and we’ll do it.

8. Children

Knocklet is not directed to children, and we don’t knowingly keep a child’s personal information. Tell us if you believe we have some and we will remove it.

9. Changes and contact

The date at the top moves when this policy changes. Questions go to hello@knocklet.com, Solutas Labs, LLC.