Privacy Policy

Updated November 7, 2026

Knowledge Hub ("the app") is a private iPhone app for managing a personal work knowledge base, operated by Inon Cohen ("we"). This policy explains what is collected, where it is stored, and your rights. The bottom line: the app is built as a private tool — no ads, no tracking, no analytics, no sale of your information and no sharing for advertising. Your content is stored with the service providers needed to run the app (Supabase for storage and auth; Google only if you enable Drive backup), as detailed below.

What is collected

• Account details: the email address and password you sign in with. Authentication is handled by Supabase Auth. There is no public sign-up inside the app.
• Your content: entries (notes, terms, guides and bug reports), tags, statuses and links between entries, plus attachments (images, videos and documents) you upload.
• Preferences: app settings (such as lock timing and Wi‑Fi-only preference) and local display state.

Where data is stored

• Server: entries and files are stored in a private Supabase project (database, auth and file storage), the same account as the work-hub website. Server traffic is encrypted (HTTPS/TLS) and requires sign-in; rows are restricted to the account owner only.
• Device: the app keeps a local copy of entries and files so it works offline. The copy is protected by the OS and by the app's Face ID lock, and is removed when you sign out.

What stays on the device only

• Face ID: biometric verification happens on the device only. The app receives a pass/fail result and never sees or stores biometric data.
• Text recognition (OCR): recognizing text in images, screenshots and documents runs on-device only, for search.
• Reminders: notifications are scheduled locally; the schedule is not sent to an external server.
• Document scanning: uses the device camera; the scan is saved as your own entry only.

Google Drive backup (optional)

If you enable backup, the app creates a ZIP copy of your entries and files in a dedicated folder in your own Google Drive. The requested permission is drive.file only, so the app can access only files it created itself — nothing else in the account. Backup is under your control: manual or automatic, defaulting to Wi‑Fi only. Deleting backup files from your Drive is your responsibility.

What is not collected

• No ads, ad networks or advertising identifiers.
• No analytics, usage tracking or third-party crash reporting.
• No sale, sharing or disclosure of information to third parties, except the infrastructure providers required to run the app (Supabase for storage and auth; Google only if you enable Drive backup).
• No access to contacts, location, microphone or camera beyond what you explicitly initiate (such as scanning a document).

Retention and deletion

Entries and files are kept while the account is active. You can delete an entry or file at any time from the app or the website. Full account deletion is described on the delete account page: after deletion, the account's server data is removed, and device data is removed on sign-out or app removal.

Security

Server traffic is encrypted (TLS). Data access requires account authentication, and the app adds an optional Face ID lock with timing choices and content hiding in the app switcher. No system is 100% secure; use a strong password and keep your device locked.

Children

The app is not directed at children and does not knowingly collect information from children.

Changes

If this policy changes, the current version will be posted on this page with an update date.

Contact

Privacy questions or requests: inoncohen.support@gmail.com. Mention "Knowledge Hub" and your account address. Never send passwords or verification codes.