knok.

Legal

Privacy Policy

Last updated: June 27, 2026

1. Who we are

knok is a platform that connects independent venues, drivers, and customers. This page describes the personal data we process when you use the knok app or website. The data controller is the legal entity operating knok in your country.

2. What we collect

  • Account data: name, email, phone number, role (customer / venue / driver), language preference.
  • Order data: items ordered, delivery address, notes, payment method, timestamps, dispute history.
  • Location data: driver GPS while on-shift, customer delivery coordinates, venue location.
  • Identity verification: for drivers, a selfie and ID document image, stored in a private bucket.
  • Communications: in-app chat messages between you and the venue or driver.
  • Device data: push subscription tokens, basic browser/device info for error reports.

3. Why we use it

  • To take, prepare, deliver and support your orders.
  • To show drivers live on the map and compute delivery ETAs.
  • To verify driver identity before allowing them to deliver.
  • To send you order status notifications (with quiet hours and a master off switch).
  • To detect fraud and abuse (e.g. cap on simultaneous open cash orders).
  • To meet our legal obligations (tax, accounting, dispute records).

4. Legal basis (GDPR)

We rely on contract (to deliver the service you requested), legitimate interests(fraud prevention, platform safety), consent (push notifications, marketing), and legal obligation (tax/accounting).

5. Who sees your data

  • Venues see your name, order, delivery address and chat for orders placed with them.
  • Drivers see only the address and a masked phone number for the active delivery.
  • knok staff may access your data to resolve disputes and prevent abuse.
  • Processors we rely on: hosting & database (Supabase / Cloudflare), mapping (Google Maps), translation/AI (Lovable AI Gateway), error logging (internal table). We do not sell your data.

6. Retention

  • Account & profile: until you delete your account.
  • Orders & invoices: up to 10 years (tax/accounting obligations).
  • Driver ID documents: deleted within 90 days after the driver leaves the platform.
  • Chat messages: kept with the order, deleted with the order record.
  • Live driver location: continuously overwritten; old points are not archived.

7. Your rights

You can access, correct, export, restrict or delete your personal data at any time. Use the controls in your account page to download a JSON export or request account deletion. We process deletion within 30 days, keeping only what we are legally required to retain.

8. Security

Data is encrypted in transit (HTTPS) and at rest. Sensitive fields (driver IDs, OTP codes) are stored in private storage / hashed. Row-level security restricts each row to the people allowed to see it. Read more on our trust page.

9. Contact

For any privacy question or to exercise your rights, write to privacy@knok.store. You may also complain to your local data protection authority.