Privacy policy

What we never store

The photo you upload is held in memory only for as long as it takes to generate your card, then discarded. It is not written to any database, file store, log, or cache. This is a property of how the service is built, not a policy we promise to follow.

To be precise about what "never stored" does and does not mean: generating a card requires the image model to actually see the photograph, so it travels — over an encrypted connection — from your browser to our server and on to the generation provider, and exists in readable form for the length of that one request. No amount of cryptography changes that; a model cannot draw you from something it cannot see. What we can promise, and have built, is that nothing readable survives the request.

The one thing we hold, and why we cannot read it

A two-person card needs both photos present at the same moment, but you and your friend are on different devices at different times. So when your card is made, your browser encrypts your photo with a key it generates locally, and uploads only the encrypted result. The key is never sent to us: it is placed in the part of the invite link after the # symbol, which browsers do not transmit to servers. When your friend opens that link, their browser decrypts your photo locally and sends both photos for one generation. We hold an encrypted blob we have no key for, and it is deleted automatically after 24 hours. If your friend never opens the link, it expires and nothing readable ever existed on our side.

The consequence worth understanding: anyone who has that invite link can decrypt your photo, because the key is in the link. Send it only to the person you meant to send it to. We cannot recover the photo for anyone, including you, and we cannot hand it to anyone who asks — we do not have the key.

Your generated cards

The finished cards you generate with a purchase are saved on our side, attached to that purchase, so you can come back and download them from your account page. They become permanently inaccessible at the same fixed deadline as the purchase itself — 30 days after buying, regardless of when each card was generated — and the underlying files are purged shortly after. This applies only to the finished, labelled artwork; the photo you uploaded to make it was already gone the moment the card was drawn (see above).

Your saved results

When you finish a quiz, the result — a four-letter code like LOCT, or a pair like LOCT × ESPR — is saved in your own browser so you can find it again. Your answers are not saved: the code is what is left after scoring, and it cannot be turned back into what you tapped.

If you sign in, those codes are also stored against your account so they survive a new phone or a cleared browser. That is the only thing an account does. You can delete every saved result from your account page at any time, and clearing your browser removes the local copy.

If you create an account

An account is optional — the quiz and sharing work fully without one. Its only job is to carry your saved results (and, later, any purchase) to another device. There are no passwords. You sign in with Google, X, or Facebook, or by asking us to email you a one-time link. The email option exists as a fallback: if you ever lose access to the social account you used, it is a way back in.

From a social provider we ask for the smallest thing that works: a stable account id, and nothing else. No email scope, no profile, no friend list, no posting rights. That id is stored one-way hashed with a secret key, so the account record holds an unreadable string and nothing that can be reversed or looked up.

If you sign in by email, your address is stored on your account in readable form. It is shown back to you on the account page so you always know which address you used, and it lets us find your account when you email support. We use it for exactly two things: sending a sign-in link when you ask for one, and replying when you write to us. No marketing, no newsletters, no sharing — and deleting your account deletes the address with it.

What we do store

When you buy a card, we store a single record against your purchase reference: how many generations you have left, when the purchase was made, and a boolean recording that you confirmed the required statements. That record contains no name, no email, no photo, and no answers. It is deleted automatically after 30 days.

We also store the finished cards you generate — the labelled artwork itself, attached to the same purchase reference, so you can re-download them from your account page. They are deleted automatically at the same 30-day deadline as the purchase record, and you can ask us to delete them sooner (see the data deletion page).

Your quiz answers

Quiz answers never reach our servers, and they are not written into the links you share: a share link carries only your four-letter result. Anything after the "#" symbol in a link is never transmitted to a server by browsers, which is why the free quiz works with no account and why we cannot see what anyone answered. (Links created before 2 August 2026 did encode the answers themselves after the "#" — those links never reached our servers either, but anyone holding one can read the answers in it. Take a fresh quiz to get a link that carries only the result.)

Payments

Payments are handled by Stripe, our payment provider. Your card details are entered on Stripe's systems and are never seen by, transmitted to, or stored by us. To confirm a payment we look the order up with Stripe; Stripe's reply includes order details such as the email used at checkout. We check that reply only to verify the payment — its status, that the item bought is our card, and our own order markers — and we keep just two references: the order id and its checkout session id, so we can find your purchase if you ask for help or a refund. Nothing else from Stripe's reply is written to our records.

Who else processes your photo

Generating a card requires sending your photo to our image-generation provider, Volcano Engine (Beijing Volcano Engine Technology Co., Ltd.), which processes it to produce the illustration and returns the result. We send only the image and the text instruction for the style you picked. No identifiers about you are attached.

Analytics

We use Google Analytics to count page views and understand which pages people find useful. It sees which pages you visit — never your quiz answers, which stay in your browser. Our analytics setup also strips the part of the link after the # symbol before anything is reported. We do not use advertising features, we do not build profiles, and we do not sell data — there is nothing to sell.

Children

The free quiz is open to everyone. The paid card feature requires you to be 18 or older, because it involves uploading a photograph of yourself. Do not upload a photograph of anyone under 18, including yourself if you are under 18.

Your rights

You can ask what we hold about a purchase and have it deleted before the automatic 30-day expiry. Since we hold no photos and no personal identifiers, requests are usually answered by confirming there is nothing to delete. Email support@knowuswell.com.

Changes

If this policy changes in a way that affects what we collect, the date at the top changes and the change is described here.

Other policies

• Terms of Service
• Refund Policy
• Acceptable Use Policy
• How to Delete Your Data