Privacy Policy
Last updated: September 5, 2026 · KNOCKED. (useknocked.com)
KNOCKED. is a personal tool for keeping track of what you need to do, what you're waiting on, and what you don't want to forget. This policy explains what information KNOCKED. collects, how it is used, and the choices you have. KNOCKED. is currently in beta; this policy reflects how the product actually works today.
Information we collect
Account information. When you create a KNOCKED. account, we collect your email address and the name you provide. Authentication is handled by our account infrastructure provider; passwords are never stored in readable form.
Your KNOCKED. content. We store the items you create — tasks, Waiting items, Remember items, notes, areas, and your calendar selections — so the product can work for you across sessions and devices.
Usage activity. We record product usage events (for example, that an item was created, completed, or that a Waiting item was followed up) together with timestamps. These events power the product and our aggregate usage analytics. They do not include the text of your items.
Optional calendar connections
You can optionally connect Google Calendar or Microsoft Outlook so KNOCKED. can show your schedule alongside your day. Connecting a calendar is entirely optional, and KNOCKED. works without it.
What we access. With your permission, KNOCKED. accesses read-only calendar information: the list of calendars you choose to include and the events on those calendars (such as event titles, times, and locations) for the days you view.
Why. Calendar information is accessed for one purpose only: to display your schedule next to what needs handling, inside your own KNOCKED. account.
Read-only. KNOCKED. requests read-only permission (for Google, the calendar.readonly scope). KNOCKED. cannot create, edit, or delete events in your Google Calendar, Microsoft Outlook, or any connected calendar.
Handling. Calendar event data is fetched as needed to display your schedule to you. It is not stored as KNOCKED. task or content data, and it is never shown to other users.
Credentials. For each calendar account you connect, KNOCKED. receives and stores the authorization credentials and tokens needed to read your calendar on your behalf. These tokens are stored encrypted. What KNOCKED. stores for a connection is the encrypted credentials, the calendar account label (usually the email address of the connected account), the connection status, timestamps, and which calendars you selected. None of this is exposed to your browser or to other users.
Your choices. You choose which calendars are included, and you can disconnect a provider at any time from Calendar Connections. Disconnecting removes the KNOCKED.-side connection and your calendar selections for that account. You can also revoke KNOCKED.'s access at any time in your Google or Microsoft account settings.
Google User Data
This section describes how KNOCKED. accesses, uses, stores, and shares information received from Google APIs.
Access. If you choose to connect Google Calendar, KNOCKED. accesses your basic account identifier (your email address, to associate the connection with your KNOCKED. account) and read-only Google Calendar data for the calendars you select.
Use. Google user data is used solely to display your calendar schedule to you within your own KNOCKED. account. It is not used for advertising, profiling, or any purpose unrelated to showing you your schedule.
Storage and handling. Calendar events are requested from Google only while you are viewing the day they belong to, used to render that screen, and not written to the KNOCKED. database, our activity records, or our logs. KNOCKED. does not maintain a separate copy of your Google Calendar. For each Google account you connect, KNOCKED. receives and stores the Google authorization credentials and tokens needed for that read-only access; these tokens are stored encrypted, alongside the connected account label and your calendar selections.
Sharing. KNOCKED. does not sell Google user data or use it for advertising, profiling, data brokerage, or unrelated purposes. Service providers that operate KNOCKED.'s hosting, authentication, and secure calendar-connection infrastructure may process Google user data only as necessary to provide the user-requested KNOCKED. functionality and subject to applicable privacy and security obligations. Google user data is not visible to other KNOCKED. users and is not used in founder/admin content analytics.
Limited Use disclosure. KNOCKED.'s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Analytics and founder/admin access
KNOCKED. maintains a founder-only usage dashboard, protected by a server-side administrator check. It shows account-level information (name, email address, sign-up date, and how recently and often an account is used) and counts of activity by type. It does not display the content of your tasks, Remember items, notes, Waiting details, or any calendar information.
How we protect your information
KNOCKED. uses reasonable security practices appropriate to a personal productivity tool: encrypted transport (HTTPS), row-level access controls so each account can only reach its own data, server-side checks for administrative functions, and encrypted storage of connection credentials. No method of transmission or storage is perfectly secure, but we work to protect your information and will update this policy as practices evolve.
Service providers
KNOCKED. runs on managed cloud infrastructure for hosting, database, authentication, and the secure calendar connector that brokers Google and Microsoft sign-in. These providers process data only to operate the service. We do not use advertising networks, data brokers, or third-party analytics trackers, and we do not sell your data.
Retention and deletion
We keep your account information and KNOCKED. content for as long as your account is active. Disconnecting a calendar provider removes the KNOCKED.-side connection record and your calendar selections for that account, and asks the connector service to revoke the connection.
During beta, you may request deletion of your KNOCKED. account and associated data by emailing hello@useknocked.com. Self-service account deletion is not yet available. When we receive your request, we will delete your KNOCKED. content, your account, and any stored calendar connection information. Non-content usage records (event type and date, never item text) may be retained in aggregate form for product analytics.
Changes to this policy
If we change this policy, we will update the date above and, for significant changes, let you know in the product or by email.
Contact
Questions about this policy or your data? Email us at hello@useknocked.com.
