Privacy Policy - Knoted

Last updated: 13/07/2026

1. Introduction

This Privacy Policy explains how Tiffin Time App Ltd ("we", "us", "our") collects, uses, and protects your personal data when you use the Knoted mobile application ("Knoted", "the app").

By using Knoted, you agree to the practices described in this policy.

If you have any questions, contact us at hello@knoted.co.uk.

2. Who this policy applies to - age restriction

Knoted is intended only for users aged 18 and over. We do not knowingly collect personal data from anyone under 18.

During sign up, users are required to enter their date of birth, from which our system automatically calculates their age. If the calculated age is below 18, the sign up process is rejected.

If we learn that we have collected data from someone under 18, we will delete it.

3. What data we collect

We collect the following categories of personal data.

Information you provide

Account details:

• Date of birth
• Email address
• Username
• Password

Passwords are handled and stored securely by Firebase Authentication and are not held in our own user records.

Profile content:

• Profile photo
• Display name
• Prompt answers (question-and-answer profile prompts). Knoted uses structured prompt Q&A;As rather than a freeform bio field
• Characteristics you select
• University or area affiliation - the area you choose within the app

Content and activity you create in the app:

• Group details - group name, group emoji, and group photo
• Messages and chat media, including photo and video uploads
• Group membership and membership changes, including joining, leaving, and snatch requests
• Interactions with other users and groups, including nudges, likes on photos and prompts, event join requests, and private messages
• Events you create or interact with, including related media and reviews where used

Information collected automatically

Account and technical identifiers:

• User ID (UID) assigned by Firebase Authentication
• Push notification tokens (FCM)
• Timestamps such as account created, profile updated, group joined, last active, and last seen

Usage and interaction data:

• Leaderboard and weekly points, and ranking-related activity
• Chemistry scores and tier changes between groups and between users
• Feature usage such as chats opened, messages sent, discovery interactions, and events created

Device and technical data:

• Device type, operating system, app version, and related identifiers collected through Firebase services

Crash and diagnostic data:

• Crash reports and diagnostic logs collected through Firebase Crashlytics, which may be associated with your UID

Analytics data:

• Screen views and in-app events collected through Google Analytics for Firebase, which may include your UID and properties such as area and group

4. How we use your data

We use your personal data to:

• Create and manage your account
• Provide the core features of Knoted, including groups, competition mechanics, leaderboards, and interactions between users
• Send you notifications about nudges, group activity, likes, or weekly results
• Diagnose and fix crashes and technical problems
• Understand how the app is used so we can improve it
• Keep the app secure and prevent misuse

5. Our legal basis for using your data

Under UK data protection law, we must have a legal basis for each use of your data. We rely on:

• Performance of a contract - to provide the Knoted service you signed up for, including managing your account and running the core features
• Legitimate interests - to fix crashes, understand usage through analytics, and keep the app secure, balanced against your rights
• Consent - for push notifications, which you can turn off at any time in your device settings

6. Who we share your data with

We do not sell your personal data. We share it only with service providers who help us operate Knoted.

Google / Firebase - we use Firebase for authentication, database (Cloud Firestore), file storage, push notifications (Cloud Messaging), analytics, and crash reporting. Your data is processed on Google Cloud infrastructure. See Google's privacy policy at https://policies.google.com/privacy.

Other users of Knoted can see information you choose to share, such as your profile photo, display name, prompt answers, group activity, and interactions. Only share what you are comfortable with others seeing.

7. How long we keep your data

We keep your personal data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days of a verified deletion request, except where we are legally required to keep certain information.

8. Your rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate data
• Ask us to delete your data
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent at any time, where we rely on consent

To exercise any of these rights, contact us at hello@knoted.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at https://ico.org.uk.

9. Data storage and international transfers

Your data is stored and processed using Google Cloud and Firebase infrastructure, which may involve processing outside the United Kingdom. Where data is transferred internationally, appropriate safeguards are in place as required by UK data protection law.

10. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page.

11. Contact

If you have any questions about this policy or how we handle your data, contact us at hello@knoted.co.uk.

Tiffin Time App Ltd

264 Chase Side, London, England, N14 4PR