The short version
We collect what is needed to run an account and store the doors you create. There are no analytics, no advertising pixels, no third-party trackers and no session recording anywhere in this site or app. We don’t sell data, and we don’t share it with anyone beyond the services listed below.
What we collect
When you create an account
Your email address and a password (stored only as a hash, never in readable form), your first and last name, your country, and the answers to the two short questions in signup about what you sell and how you work. That survey is used to decide what to build next.
When you use the app
The doors you create, meaning address, coordinates, and any contact name, phone, email or notes you add, plus every disposition you log against them and when you logged it. Running totals derived from those dispositions (knocks, contacts, closes, streaks) are stored separately so that your career record survives when older door detail ages out.
When you contact us or join a waiting list
Your email address, your message if you sent one, and which page you submitted from. We also store a salted, irreversible hash of your IP address purely to rate-limit that form. The IP address itself is never written down.
What we don’t collect
- No analytics or product telemetry. There’s no Google Analytics, no tag manager, no ad pixel and no heatmap tool in the bundle.
- No audio. Nothing records, transcribes or listens to your conversations, because no such feature exists.
- No background location. The app reads your position only while you have the map or Knock Mode open, and only to show where you are and order doors by distance. It’s never sent to us as a trail.
- No payment details. There’s no billing in the product.
- No contacts, photos, calendar or files from your phone.
What stays on your phone
Saved map areas are stored in your browser’s own storage on your device and are never uploaded. Knocks and doors you create without a signal are queued locally and sent to us only when your connection returns. Clearing your browser data for this site removes all of it, including anything still waiting to sync.
Who else touches it
Three services, and no others:
- Supabase: stores the database, handles authentication and serves the map file.
- Vercel: hosts and serves the site and app.
- Protomaps: serves the map label fonts and icons from a public address. Your browser fetches static files from it; we send it nothing about you.
Data is stored in the United States. We don’t sell personal information, and we don’t share it for advertising.
Workspaces: who can see your doors
Every door and every knock is permanently stamped with the workspace it was created in. If you create a door in a company’s workspace, people in that company can see it, and they keep it if you leave. Doors in your personal workspace are visible only to you and are never shown to any company, including one you later join.
Your running totals (knocks, contacts, closes, streaks) belong to your account and aren’t readable by a company you’ve left.
Retention and deletion
On the free plan, we delete individual door events after 90 days. Your doors and your running totals stay.
You can ask us to delete your account at any time via the contact page. When we do, everything belonging to your account is deleted. Doors you created inside a company’s workspace stay with that company as their business record, with your name detached from them.
Your rights
Depending on where you live you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Ask through the contact page and we’ll do it. We won’t make you fill in a form or prove you’re serious first.
Cookies
One kind: the cookie that keeps you signed in. There are no advertising or analytics cookies, so there’s no consent banner, because a session cookie you asked for by logging in doesn’t need one.
Security, stated plainly
Data is encrypted in transit, passwords are hashed, and access between workspaces is enforced in the database itself rather than only in application code. Email addresses aren’t currently verified, which means we can’t prove an address belongs to the person who typed it. Worth knowing, and it changes before paid plans open.
Children
KnockMode is for working salespeople and isn’t directed at children under 13. We don’t knowingly collect their data.
Changes and contact
If this policy changes materially we’ll change the date at the top and say what moved. Questions or requests go through the contact page. KnockMode is operated from the United States; the full operating entity details will be published here before paid plans open.