KNŪK

Privacy Policy

Last updated: 1 March 2026

1. Introduction

This Privacy Policy ("Policy") governs the KNŪK mobile application ("Application"), developed and operated by Devynios, MB ("Service Provider", "we", "us"). The Application is provided as a freemium service under an "AS IS" model.

By using the Application, you consent to the practices described herein. Capitalized terms not defined in this Policy shall have the meanings ascribed in our Terms and Conditions.

IMPORTANT DISCLAIMER:

KNŪK is designed solely as a personal organizational tool for pet care information. It is not a medical device, diagnostic tool, or veterinary advice provider. For any health-related concerns about your pet, always consult a licensed veterinarian. We disclaim liability for any decisions made based on app content.

2. Data Collection and Processing

2.1 Categories of Collected Data

  • Account Data: Email address, display name (when you sign in with Google or email/password)
  • Pet Data: Pet name, species, age, sex, breed, weight, birth date, photos, markings, and optional fields you choose to add (e.g. microchip number, insurance details, passport number)
  • Events & Reminders: Event titles, dates, notes, and notification preferences you create
  • Files & Documents: Scanned documents and files you upload (stored as images/files linked to your pet profiles)
  • Weight History: Weight entries you log for your pets
  • Feedback: If you submit feedback from Settings, we store your message, app version, and device info; user ID is optional
  • Technical Data: Device model, OS version, app version (for crash reporting and support)
  • Push Notification Token: FCM token stored to deliver reminders you have enabled
  • Local Preferences: Theme, units, and app settings stored on your device only

We only collect information you voluntarily provide to organize your pet's care. We do not collect or process any medical or sensitive health data. We do not use your personal or pet data for targeted advertising or sell it to third parties.

2.2 Legal Bases for Processing (GDPR)

  • Contract Performance: Account creation, pet data, events, reminders, and core app functionality
  • Legitimate Interest: Crash reporting to improve app stability
  • Consent: Push notifications (you enable these per reminder)

2.3 Data Retention

We retain your data for as long as your account is active. When you delete your account, we remove your data within 72 business hours. Backup data may persist for up to 14 days as part of disaster recovery. Crash reports may be retained by Firebase for up to 90 days.

3. Third-Party Services

We use the following service providers. Data is processed in compliance with Article 28 GDPR where applicable:

Service ProviderPurposeData Processed
Google Firebase AuthAuthentication (sign-in)Email, display name, account credentials
Google Firebase FirestoreDatabase for pet data, events, reminders, user profileAll pet data, events, FCM token, feedback
Google Firebase Cloud MessagingPush notifications for remindersFCM token
Google Firebase CrashlyticsCrash reporting and stabilityDevice model, OS version, app version, crash logs
Google Firebase Remote ConfigFeature flags and configurationApp instance (no personal data)
Google Firebase App CheckApp integrity verificationDevice attestation (no personal data)
Cloudflare (Workers + R2)Photo and file storagePet photos, scanned documents
Google Credentials / Google IDGoogle sign-inEmail, profile info (with your consent)

Data Transfers: Firebase and Google services may process data globally. Cloudflare R2 may store files in regions you do not control. Where required, we rely on EU Standard Contractual Clauses and adequacy decisions for international transfers.

4. User Rights and Controls

4.1 Your Rights (GDPR)

You have the right to:

  • Access — Request a copy of your personal data
  • Rectification — Correct inaccurate data
  • Erasure — Request deletion of your data
  • Portability — Receive your data in a machine-readable format
  • Object — Object to processing based on legitimate interest
  • Restrict — Request restriction of processing
  • Withdraw consent — Where processing is based on consent

4.2 Access and Portability

You may request a machine-readable copy of your personal data by emailing info@devynios.com with the subject "Data Access Request". We will respond within 30 days.

4.3 Account and Data Deletion

  • In-app: Delete your account via Settings → Privacy → Delete Account
  • By email: Request deletion at info@devynios.com with subject "Data Deletion Request"
  • Web form: Visit our Data Deletion page

We process deletion requests within 72 business hours. We will verify your identity before processing. Data deletion is permanent and cannot be undone.

5. Minor Safeguards

The Application is designated for users aged 16 years or older in compliance with COPPA and GDPR-K. Any identified underage accounts will be:

  • Immediately suspended
  • All associated data purged within 24 hours
  • Parents may contact us at info@devynios.com
6. For EU/EEA and UK Users (GDPR)

If you are in the European Economic Area (EEA), European Union (EU), or United Kingdom (UK), the following applies in addition to the rest of this Policy.

6.1 Data Controller

The data controller responsible for your personal data is Devynios, MB. Contact: info@devynios.com.

6.2 Legal Basis for Processing

We process your data on the following legal bases:

  • Contract (Art. 6(1)(b)): Account creation, pet data, events, reminders, and core app functionality
  • Legitimate interest (Art. 6(1)(f)): Crash reporting to improve app stability
  • Consent (Art. 6(1)(a)): Push notifications (you enable these per reminder); you may withdraw consent at any time
  • Legal obligation (Art. 6(1)(c)): Where we must retain data to comply with applicable law

6.3 International Transfers

Your data may be transferred to and processed in countries outside the EEA/UK (e.g. USA, where our service providers operate). We ensure appropriate safeguards: EU Standard Contractual Clauses (SCCs), UK International Data Transfer Agreement, and adequacy decisions where applicable. You may request a copy of the safeguards we use.

6.4 Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe our processing of your data violates applicable law. For Lithuania: Valstybinė duomenų apsaugos inspekcija (VDAI). For the UK: Information Commissioner's Office (ICO). For other EU/EEA countries: your national data protection authority.

6.5 No Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significantly affects you.

6.6 Children (GDPR-K)

We do not knowingly collect data from children under 16. Users under 16 may need parental consent in some jurisdictions. Parents who believe their child has provided us with personal data may contact us to request deletion.

7. Policy Amendments

Material changes to this Policy will be communicated through:

  • Changes posted at knuk.devynios.com/privacy

Continued use 30 days after changes constitutes acceptance.

8. Contact

For data protection inquiries, GDPR requests, or questions about this Policy:

Email: info@devynios.com
Website: knuk.devynios.com
Response time: 72 business hours