Privacy Policy
Knotbook is a product of Spyxpo, operated by Spyxpo Technologies Private Limited (CIN U62011BR2025PTC079225), registered office C/O Krishna Murari Kumar, Begusarai, Bihar 851101, India. Effective 2026-09-25. Applies to the Knotbook desktop application and the knotbook.app website.
Knotbook is local-first. Your notes are markdown files in a folder you chose, on your own disk. We do not have them, cannot read them, and have no server that stores them.
This document is the same table the repository has always carried, published where the people using the app can read it. It lists every case where the app touches the network — including the ones it would be convenient to leave out.
What we collect
Nothing automatically. There is no telemetry, no analytics, no crash reporting, no usage measurement, and no account. The app does not phone home to tell us it started, what you opened, or how long you used it.
The only personal data Spyxpo holds is what you give us directly:
| If you… | We hold | Why | Kept |
|---|---|---|---|
| Buy a Pro licence | Email address, licence key, payment reference, device identifiers of activated devices | To issue the licence and enforce the 3-device limit | Until you ask us to delete it |
| Email support | Whatever is in your message | To answer you | 24 months |
Payments are taken by Razorpay, who handle card details. We never see or store them.
Every network connection the app makes
| Subsystem | Talks to | Default | Carries |
|---|---|---|---|
| Notes, search, index, backlinks, graph, PDF text | Nothing | — | — |
| Diagnostic log | Nothing — a local file | Always written | Stays on your machine unless you attach it to something |
| Update check | knotbook.app (update endpoint); firestore.googleapis.com (public release list, only if the endpoint cannot be reached); firebasestorage.googleapis.com (the update download, only when you install one) | On, after you choose it on first run | Operating system, processor type, Knotbook version and update channel. Nothing about you or your notes |
| Pro licensing | asia-south1-knotbook-spyxpo.cloudfunctions.net | Only if you buy Pro | Licence key, device identifier |
| KnotAI model download | huggingface.co, github.com | Off. Starts only when you press Download in KnotAI setup | Nothing about you |
| KnotAI inference | Loopback only — a local llama-server | Fully local | — |
| KnotAI web results | html.duckduckgo.com | Off. You turn on Web for a single message, and it switches off again after that message | The words of that message |
| Live collaboration | Your network, and your router via UPnP if you allow it | Off; explicit action, with a prompt | Note content, encrypted, to the people you invited — plus the note's title and the session code, which the handshake sends unencrypted |
| Web clipper | 127.0.0.1:7470 — this machine only | Requires a token you paste in | The page you clipped |
| RSS | The feeds you added | Only feeds you add | — |
Nothing in the app sends analytics. The website at knotbook.app can use Google Analytics for Firebase, but only after you allow it (see below); the app never does. Saying so is what makes the rest of this table worth believing.
The website, cookies and similar storage
The knotbook.app website stores a few things in your browser. Only the first group is needed for the site to work; everything else is off until you turn it on in the banner shown on your first visit, and you can change your mind at any time under Privacy choices.
| Name | Kind | Category | Purpose | Kept |
|---|---|---|---|---|
knotbook.consent | localStorage | Strictly necessary | Records your choice in the privacy banner | Until you withdraw it or clear site data |
knotbook-theme | localStorage | Strictly necessary | Remembers light, dark or system theme | Until you clear site data |
| Firebase Authentication (IndexedDB) | IndexedDB | Strictly necessary | Keeps you signed in to your account, only if you sign in | Until you sign out |
_ga, _ga_* | Cookies | Analytics (optional) | Google Analytics for Firebase: aggregated page views, so we know which pages are useful | Up to 2 years |
We do not use advertising cookies, do not sell data, and do not share it for cross-site tracking. Rejecting analytics does not change anything else on the site.
The diagnostic log
The app writes a log file to help diagnose crashes. It stays on your machine,
rotates at 2 MB keeping four files, and paths inside it are shortened — a path
under your home directory is written as ~/…, so it does not carry your user
name off the machine even if you send it to us.
We never collect it. If you attach it to a support email, we read it to answer your question and nothing else.
Find it at Settings → Diagnostics → Show in folder.
Your notes
Your notes are not our business, in both senses. They are files on your disk. Deleting Knotbook does not delete them, and deleting your notes folder deletes them permanently — we have no copy to restore from.
Your rights
Email privacy@spyxpo.com to ask what we hold, correct it, or have it deleted. Deleting your licence record deactivates your Pro licence, so we will confirm before doing it. We answer within 30 days.
Children
Knotbook is not directed at children under 13, and we do not knowingly collect data from them.
Changes
Material changes are announced in the app before they take effect, and the effective date at the top of this document changes. Continuing to use Knotbook after that means accepting the revision.
Grievance Officer
Under the Information Technology Act 2000 and the rules made under it, and the Digital Personal Data Protection Act 2023, complaints about how your data is handled can be sent to our Grievance Officer:
- Name: Mantresh Khurana, Founder, MD & CEO
- Email: mantreshkhurana@spyxpo.com
- Acknowledgement: within 24 hours · Resolution: within 15 days
Contact
Spyxpo Technologies Private Limited privacy@spyxpo.com · https://knotbook.app
Spyxpo's group-wide policies are at spyxpo.com/policies.