Privacy policy

What we never store

The photo you upload is held in memory only for as long as it takes to generate your card, then discarded. It is not written to any database, file store, log, or cache. This is a property of how the service is built, not a policy we promise to follow.

To be precise about what "never stored" does and does not mean: generating a card requires the image model to actually see the photograph, so it travels — over an encrypted connection — from your browser to our server and on to the generation provider, and exists in readable form for the length of that one request. No amount of cryptography changes that; a model cannot draw you from something it cannot see. What we can promise, and have built, is that nothing readable survives the request.

The one thing we hold, and why we cannot read it

A two-person card needs both photos present at the same moment, but you and your friend are on different devices at different times. So when your card is made, your browser encrypts your photo with a key it generates locally, and uploads only the encrypted result. The key is never sent to us: it is placed in the part of the invite link after the # symbol, which browsers do not transmit to servers. When your friend opens that link, their browser decrypts your photo locally and sends both photos for one generation. We hold an encrypted blob we have no key for, and it is deleted automatically after 24 hours. If your friend never opens the link, it expires and nothing readable ever existed on our side.

The consequence worth understanding: anyone who has that invite link can decrypt your photo, because the key is in the link. Send it only to the person you meant to send it to. We cannot recover the photo for anyone, including you, and we cannot hand it to anyone who asks — we do not have the key.

Your saved results

When you finish a quiz, the result — a four-letter code like LOCT, or a pair like LOCT × ESPR — is saved in your own browser so you can find it again. Your answers are not saved: the code is what is left after scoring, and it cannot be turned back into what you tapped.

If you sign in, those codes are also stored against your account so they survive a new phone or a cleared browser. That is the only thing an account does. You can delete every saved result from your account page at any time, and clearing your browser removes the local copy.

If you create an account

An account is optional — the quiz and sharing work fully without one. Its only job is to carry your saved results (and, later, any purchase) to another device. There are no passwords. You sign in with Google, X, or Facebook, or by asking us to email you a one-time link. The email option exists as a fallback: if you ever lose access to the social account you used, it is a way back in.

From a social provider we ask for the smallest thing that works: a stable account id, and nothing else. No email scope, no profile, no friend list, no posting rights. That id is stored one-way hashed with a secret key, so the account record holds an unreadable string and nothing that can be reversed or looked up.

If you sign in by email, your address is stored on your account in readable form. It is shown back to you on the account page so you always know which address you used, and it lets us find your account when you email support. We use it for exactly two things: sending a sign-in link when you ask for one, and replying when you write to us. No marketing, no newsletters, no sharing — and deleting your account deletes the address with it.

What we do store

When you buy a card, we store a single record against your purchase reference: how many generations you have left, when the purchase was made, and a boolean recording that you confirmed the required statements. That record contains no name, no email, no photo, and no answers. It is deleted automatically after 30 days.

Your quiz answers

Quiz answers never reach our servers. They are encoded into the part of the link after the "#" symbol, which browsers do not transmit to servers. That is why the free quiz works with no account and why we cannot see what anyone answered.

Payments

Payments are handled by Creem, which acts as the merchant of record. Your card details are entered on Creem's systems and are never seen by, transmitted to, or stored by us. We receive only a purchase reference and a confirmation that payment succeeded.

Who else processes your photo

Generating a card requires sending your photo to our image-generation provider, Volcano Engine (Beijing Volcano Engine Technology Co., Ltd.), which processes it to produce the illustration and returns the result. We send only the image and the text instruction for the style you picked. No identifiers about you are attached.

Analytics

We measure aggregate page views to understand which pages people find useful. We do not use advertising trackers, we do not build profiles, and we do not sell data — there is nothing to sell.

Children

The free quiz is open to everyone. The paid card feature requires you to be 18 or older, because it involves uploading a photograph of yourself. Do not upload a photograph of anyone under 18, including yourself if you are under 18.

Your rights

You can ask what we hold about a purchase and have it deleted before the automatic 30-day expiry. Since we hold no photos and no personal identifiers, requests are usually answered by confirming there is nothing to delete. Email support@knowuswell.com.

Changes

If this policy changes in a way that affects what we collect, the date at the top changes and the change is described here.

Other policies

• Terms of Service
• Refund Policy
• Acceptable Use Policy
• How to Delete Your Data