I Know It
Privacy Policy
Effective date: June 15, 2026 · Last updated: July 18, 2026
This Privacy Policy explains how Kings Innovations ("we", "us", "our") collects, uses, and protects your information when you use the I Know It mobile application ("App"). By using the App you agree to this policy. If you do not agree, do not use the App.
1. Information We Collect
We collect the following categories of information:
- Account information: Your email address and hashed password when you register.
- Hunch content: The text of predictions you seal inside the App. This content is stored on our servers. Where encryption is enabled, it is stored in encrypted form and we cannot read it.
- Device information: Device model, operating system version, app version, and a vendor-assigned device identifier (iOS Vendor ID or Android Installation ID). This identifier is not your device serial number and resets when you uninstall the App.
- Location (approximate): Country, region, and city derived from your device's GPS — only if you have already granted location permission to the App for another purpose. We never prompt for location permission ourselves.
- Usage logs: Actions you take in the App (login, sealing a hunch, deleting a hunch, verifying a code), together with a timestamp and your IP address. These logs are used for security monitoring and abuse prevention.
- Push token: If you enable notifications, an Expo push token is stored to deliver reveal notifications.
2. How We Use Your Information
- To create and manage your account.
- To store, sync, and restore your hunches across devices.
- To generate and verify IKI codes as tamper-evident seals.
- To send push notifications when a hunch's reveal date arrives (if enabled).
- To detect and prevent fraud, abuse, and unauthorised access.
- To analyse aggregate, anonymised usage patterns to improve the App.
- To comply with legal obligations.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), we process your data on the following legal bases:
- Contract performance: Processing necessary to provide the App's core service (account management, hunch storage, IKI code generation).
- Legitimate interests: Security logging, fraud prevention, and aggregate analytics — where these do not override your fundamental rights.
- Consent: Location access and push notifications, where you have explicitly granted permission.
- Legal obligation: Where applicable law requires us to retain or disclose data.
4. Data Storage and Security
Your data is stored on servers located in the United States operated by Kings Innovations. We implement industry-standard security measures including:
- HTTPS/TLS encryption for all data in transit.
- Bcrypt hashing (cost factor 12) for passwords — we never store plaintext passwords.
- AES-256 client-side encryption for hunch text where supported — the plaintext never leaves your device.
- JWT-based authentication with 90-day expiry and per-request validation.
- Rate limiting and brute-force protection on all authentication endpoints.
- Server-side input validation and parameterised SQL queries to prevent injection attacks.
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
5. Data Retention
- Account data: Retained until you delete your account.
- Hunch content: Retained until the hunch is deleted by you or your account is deleted.
- Activity logs: Retained for up to 12 months for security and fraud prevention, then deleted.
- Device logs: Retained while your account is active, deleted when your account is deleted.
6. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate data.
- Deletion: Delete your account and all associated data directly from the App (Profile → Delete account). This permanently and irreversibly removes all your data from our servers.
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to processing based on legitimate interests.
- Withdraw consent: Revoke location or notification permissions at any time via your device settings.
To exercise any right not available in-app, contact us at contact@kingsinnovations.com. We will respond within 30 days. EEA users may also lodge a complaint with their local data protection authority.
7. California Privacy Rights (CCPA / CPRA)
California residents have the right to know what personal information we collect, to delete it, to opt out of its sale (we do not sell personal information), and to non-discrimination for exercising these rights. To make a verifiable consumer request, email contact@kingsinnovations.com.
8. Children's Privacy
The App is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information without parental consent, we will delete it promptly. If you believe a child has submitted data, contact us at contact@kingsinnovations.com.
9. Advertising
Free tier users (up to 10 lifetime hunches) may see advertisements served by Google AdMob. Premium subscribers (yearly or lifetime) do not see advertisements.
Google AdMob may collect the following to serve and measure ads:
- Device identifiers (Advertising ID on Android, IDFA on iOS — only if you have not opted out via device settings)
- Approximate location derived from IP address
- App usage signals used for ad targeting and fraud prevention
You can opt out of personalised advertising at any time:
- iOS: Settings → Privacy & Security → Tracking → disable "Allow Apps to Request to Track"
- Android: Settings → Google → Ads → "Delete advertising ID"
Google AdMob's privacy policy: policies.google.com/privacy
10. Third-Party Services
The App uses the following third-party services, each governed by their own privacy policy:
We do not sell your personal information to any third party. Ad networks receive only the data described in Section 9 above, and only for free tier users.
11. International Data Transfers
If you are located outside the United States, your data will be transferred to and processed in the United States. By using the App, you consent to this transfer. Where required by applicable law (e.g. GDPR), we rely on appropriate safeguards such as Standard Contractual Clauses.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where required by law, notify you via the App or email. Your continued use of the App after any change constitutes your acceptance of the new policy.
13. Contact Us
Kings Innovations
Email: contact@kingsinnovations.com
Website: kingsinnovations.com
Delete Your Account
⚠️ Account deletion is permanent and cannot be undone.
How to delete your account in the app
- Open I Know It and sign in
- Tap the Profile tab (person icon, bottom right)
- Scroll to the bottom and tap Delete Account
- Enter your password to confirm, then tap Delete
What data is deleted
- Account (email, username, password) — deleted immediately
- All sealed hunches — deleted immediately
- Push notification token — deleted immediately
- Device info — deleted immediately
- Activity logs — retained 90 days (anonymised), then permanently deleted
Can't access the app?
Email us and we'll delete your account manually within 30 days: contact@kingsinnovations.com
Include the email address associated with your account.