Privacy notice

For the Knockround app. Last updated 2 November 2026

Who we are

Knockround is run by Joseph Samadi, a sole trader in the United Kingdom. For anything about your data, email hello@knockround.co.uk.

If you use Knockround for your business

We keep your email address, the business details you add (name, start postcode, the address, phone and email to show on your invoices, bank details to show on your bills, your Google review link, your website), the Stripe account you connect, and your plan. Stripe holds your card; we never see card numbers. To keep accounts safe and stop abuse, we also keep sign-in records and the internet address you connect from, for a short time.

We use this to run Knockround for you (our contract with you), to keep it secure (our legitimate interest), and to keep billing records (the law).

If you're a customer of a business that uses Knockround

The business decides what it keeps about you (such as your name, address, phone, email, visits and payments) and is responsible for it. We hold it for them and use it only to run Knockround for them. For anything about it, contact the business first. You can also email us and we'll pass it on.

If the business turns it on, you may get one email from them after you've paid, asking for a Google review. It's sent once, never while you owe anything, and you can reply to it to say no. We keep the date it was sent so it isn't sent again.

On your phone

An essential cookie keeps you signed in to Knockround. So it works without signal, it also keeps the round and anything you've ticked off on your phone until signal is back. Signing out clears them. If you arrive through a ChatGPT ad and choose Allow measurement on our website, an optional ad-reference cookie is also available to the web app for up to 30 days. It lets our server report one completed signup to OpenAI. This sends an ad-click reference, the event time and a random event reference; no name, email, internet address, business details or customer records. You can withdraw permission on the website privacy page. If you arrive through a Facebook or Instagram ad and choose Allow measurement, Meta's pixel runs on our website (never inside the app): after you start your free week, the app opens a hidden page of our website once, and the pixel there tells Meta about one completed signup. Meta receives your browser's details and its own cookies from that page, as on any site using its pixel; we send it no name, email, business details or customer records. Without permission, no advertising measurement is sent.

The iPhone and Android apps keep you signed in with a key instead of a cookie, held in the iPhone's Keychain or encrypted by Android's Keystore, and keep the same things on the phone for when there's no signal. If you say yes to notifications on the iPhone, we keep the phone's notification address to tell you when a customer pays by card, or when a payout or a payment needs you. Switching them off or signing out removes it. The camera and your photos are used only when you take or add a photo yourself. The apps track nothing.

How we improve the web app

In the web app at app.knockround.co.uk, we use PostHog, run from the European Union (data held in Frankfurt, Germany), to see which screens people use and where they get stuck. It records the screens you open, what you tap and scroll, how long things take, any error, and a replay of the screen with every word, typed field, photo and map hidden, so your customers' names, addresses, numbers and payments never reach it. Events carry your account's random ID and your trade and plan, not your email or name. Nothing is stored on your device for this, and your internet address isn't kept. We do it on the basis of our legitimate interest in making Knockround easier to use, and keep it for up to a year (replays for 30 days). You can switch it off in Settings, under Help improve Knockround, or email us. The iPhone and Android apps don't use it.

Who else handles it

Cloudflare hosts Knockround and stores its data in the European Union. Resend sends its emails. If you sign in with Google, Google tells us your name and email address, and nothing else. Stripe handles plans and card payments. Apple delivers the iPhone app's notifications. PostHog shows us how the web app is used (above). postcodes.io turns postcodes into places on the map, and MET Norway gives the rain forecast for an approximate location. Stripe and Resend may handle data in the United States, protected by the safeguards UK law approves. We never sell your data. Customer records are never shared with marketers. Only with your permission, OpenAI or Meta receives the limited signup event described above, under its own privacy policy (OpenAI, Meta).

How long we keep it

While your account is open. When you delete your account, everything in it is deleted straight away, and from our backups within 30 days. Billing records are kept for as long as the law requires (six years, for tax).

Your rights

You can ask to see, correct, download or delete what we hold about you, or object to how we use it. Most of it you can do yourself in the app. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.