Privacy Policy — KnotTheory.ai

1. Overview

KnotTheory.ai Inc. ("we", "us", "our") builds privacy-first applications, including Tesseract-Tax, Tesseract-Prime, Tess-Hoshi, Swapétit, and the Tesseract Tax Cloud platform. This policy explains what data our products collect, use, and share. It applies to all of our apps and services unless a product ships with its own more specific terms.

2. Our Principles

Local-first. Wherever possible, your data is processed on your own device. Many features — including on-device AI models — work entirely offline.
No selling of data. We never sell, rent, or trade personal data.
No advertising and no tracking. Our apps contain no ads and no third-party analytics or tracking SDKs.
Minimal collection. When a feature needs the network, we transmit only what is required to fulfill your request, and we don't keep it afterward.

3. Cloud AI Processing (Optional Features)

Some apps offer optional cloud-powered AI features (for example, Swapétit's cloud answers, photo questions, recipe invention, and spoken answers). These features are off until you explicitly enable them, and the app asks for your permission — with a description of what is sent and to whom — before any content leaves your device. When enabled:

Only the content needed to answer — for example your question text and chat history, a photo you attach, dish names and notes you enter, or an ingredient list you provide — is transmitted to our servers.
AI requests are processed by Anthropic's Claude models running on Amazon Web Services (Amazon Bedrock), under our agreements with those providers, configured for zero data retention: your content is not stored, not logged, and not used to train models. AWS and Anthropic act as our processors and are contractually required to protect your data to at least the same standard as this policy.
Spoken answers send the generated answer text to our voice-synthesis service hosted on Modal Labs infrastructure; speech audio is produced on transient compute and neither the text nor the audio is retained after delivery.
If you request a demo on our website, the details you enter — name, work email, company, role, filer type, approximate return volume and what you would like to see — are stored by us and emailed to our team so we can prepare and schedule the session. Scheduling itself is handled by Calendly: your name and email are passed to Calendly to create the meeting invitation, under Calendly's own privacy terms. Nothing else on our site sends data to Calendly, and you can email us instead of using it. We use demo details only to contact you about the demo.
Some apps also let you supply your own API key for a third-party AI provider (such as Anthropic or OpenAI); in that case your content is sent directly to that provider under its own privacy terms.

4. Product Specifics

Swapétit

No account or sign-in. The kitchen converter and offline substitution library never touch the network.
On-device AI answers run entirely on your device. Cloud answers follow Section 3 and require your consent, requested in the app before anything is sent.
When cloud features are enabled, the data sent is: the question text and chat history you type, photos you choose to attach, dish names and notes you enter in Enhance, and the pantry ingredient list you provide to Novelty Chef, plus your app language. It is used solely to generate your answer (via Anthropic Claude on Amazon Bedrock, Section 3) and is not retained.
Spoken answers, when you tap the speaker or enable auto-speak, send the answer text to our voice service on Modal Labs (Section 3); with cloud features off, the system voice on your device is used instead.
Microphone audio for dictation is processed by Apple's on-device/system speech recognition; we do not receive or store your recordings.

Tesseract-Tax

Tax documents, credentials, and financial information remain on your device.
An anonymous first-launch ping (random UUID + platform only) is used for download counting. No name, email, IP address, device identifier, or financial data is included.
The Secure Vault stores credentials locally via the operating system's Keychain; they are never transmitted to us or any third party.

Tesseract-Prime

All processing is performed locally on your device using on-device AI models. No data is sent to external servers.

Tess-Hoshi

Recordings and transcripts stay on your iPhone. If you configure an upload destination, audio is sent only to the server you specify, under your control.

Tesseract Tax Cloud (platform.knottheory.ai)

Our professional platform requires an account and processes the documents you or your accountant upload solely to provide the service. Documents are encrypted, are never used to train models, and AI processing follows the zero-data-retention approach of Section 3. Platform customers may be covered by additional contractual terms.

5. Purchases & Subscriptions

In-app purchases and subscriptions (such as Swapétit Pro and Tess-Hoshi Pro) are processed by Apple. We do not receive or store your payment details. Website purchases are processed by Stripe, which handles your payment information under its own privacy policy.

6. Data Sharing

We do not sell, share, or transfer personal data to third parties, except for the processors described above — Apple, Stripe, Amazon Web Services (Amazon Bedrock), Anthropic, and Modal Labs — acting on our instructions to deliver the service you requested. Each processor is bound by terms that provide the same or equal protection for your data as this policy.

7. Data Retention

Cloud AI request content is not retained (Section 3). Anonymous download-count records (random UUID, platform, timestamp) are kept for internal metrics and cannot be linked to any individual. Platform account data is retained while your account is active or as required by law.

8. Your Rights

Depending on where you live (for example, under GDPR or the CCPA), you may have rights to access, correct, or delete personal data we hold. Because our apps hold your data on your own device, deletion is usually as simple as deleting the app; for anything else, contact us and we will help.

9. Children's Privacy

Our apps are not directed at children under 13. We do not knowingly collect any personal information from children. (Swapétit's "for kids" recipe option only tailors recipe suggestions — it collects nothing about any child.)

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

11. Contact

Questions about this policy:
support@knottheory.ai or tess@knottheory.ai