Privacy Policy
Last updated: 1 March 2026
This Privacy Policy ("Policy") governs the KNŪK mobile application ("Application"), developed and operated by Devynios, MB ("Service Provider", "we", "us"). The Application is provided as a freemium service under an "AS IS" model.
By using the Application, you consent to the practices described herein. Capitalized terms not defined in this Policy shall have the meanings ascribed in our Terms and Conditions.
IMPORTANT DISCLAIMER:
KNŪK is designed solely as a personal organizational tool for pet care information. It is not a medical device, diagnostic tool, or veterinary advice provider. For any health-related concerns about your pet, always consult a licensed veterinarian. We disclaim liability for any decisions made based on app content.
2.1 Categories of Collected Data
- Account Data: Email address, display name (when you sign in with Google or email/password)
- Pet Data: Pet name, species, age, sex, breed, weight, birth date, photos, markings, and optional fields you choose to add (e.g. microchip number, insurance details, passport number)
- Events & Reminders: Event titles, dates, notes, and notification preferences you create
- Files & Documents: Scanned documents and files you upload (stored as images/files linked to your pet profiles)
- Weight History: Weight entries you log for your pets
- Feedback: If you submit feedback from Settings, we store your message, app version, and device info; user ID is optional
- Technical Data: Device model, OS version, app version (for crash reporting and support)
- Push Notification Token: FCM token stored to deliver reminders you have enabled
- Local Preferences: Theme, units, and app settings stored on your device only
We only collect information you voluntarily provide to organize your pet's care. We do not collect or process any medical or sensitive health data. We do not use your personal or pet data for targeted advertising or sell it to third parties.
2.2 Legal Bases for Processing (GDPR)
- Contract Performance: Account creation, pet data, events, reminders, and core app functionality
- Legitimate Interest: Crash reporting to improve app stability
- Consent: Push notifications (you enable these per reminder)
2.3 Data Retention
We retain your data for as long as your account is active. When you delete your account, we remove your data within 72 business hours. Backup data may persist for up to 14 days as part of disaster recovery. Crash reports may be retained by Firebase for up to 90 days.
We use the following service providers. Data is processed in compliance with Article 28 GDPR where applicable:
| Service Provider | Purpose | Data Processed |
|---|---|---|
| Google Firebase Auth | Authentication (sign-in) | Email, display name, account credentials |
| Google Firebase Firestore | Database for pet data, events, reminders, user profile | All pet data, events, FCM token, feedback |
| Google Firebase Cloud Messaging | Push notifications for reminders | FCM token |
| Google Firebase Crashlytics | Crash reporting and stability | Device model, OS version, app version, crash logs |
| Google Firebase Remote Config | Feature flags and configuration | App instance (no personal data) |
| Google Firebase App Check | App integrity verification | Device attestation (no personal data) |
| Cloudflare (Workers + R2) | Photo and file storage | Pet photos, scanned documents |
| Google Credentials / Google ID | Google sign-in | Email, profile info (with your consent) |
Data Transfers: Firebase and Google services may process data globally. Cloudflare R2 may store files in regions you do not control. Where required, we rely on EU Standard Contractual Clauses and adequacy decisions for international transfers.
4.1 Your Rights (GDPR)
You have the right to:
- Access — Request a copy of your personal data
- Rectification — Correct inaccurate data
- Erasure — Request deletion of your data
- Portability — Receive your data in a machine-readable format
- Object — Object to processing based on legitimate interest
- Restrict — Request restriction of processing
- Withdraw consent — Where processing is based on consent
4.2 Access and Portability
You may request a machine-readable copy of your personal data by emailing info@devynios.com with the subject "Data Access Request". We will respond within 30 days.
4.3 Account and Data Deletion
- In-app: Delete your account via Settings → Privacy → Delete Account
- By email: Request deletion at info@devynios.com with subject "Data Deletion Request"
- Web form: Visit our Data Deletion page
We process deletion requests within 72 business hours. We will verify your identity before processing. Data deletion is permanent and cannot be undone.
The Application is designated for users aged 16 years or older in compliance with COPPA and GDPR-K. Any identified underage accounts will be:
- Immediately suspended
- All associated data purged within 24 hours
- Parents may contact us at info@devynios.com
If you are in the European Economic Area (EEA), European Union (EU), or United Kingdom (UK), the following applies in addition to the rest of this Policy.
6.1 Data Controller
The data controller responsible for your personal data is Devynios, MB. Contact: info@devynios.com.
6.2 Legal Basis for Processing
We process your data on the following legal bases:
- Contract (Art. 6(1)(b)): Account creation, pet data, events, reminders, and core app functionality
- Legitimate interest (Art. 6(1)(f)): Crash reporting to improve app stability
- Consent (Art. 6(1)(a)): Push notifications (you enable these per reminder); you may withdraw consent at any time
- Legal obligation (Art. 6(1)(c)): Where we must retain data to comply with applicable law
6.3 International Transfers
Your data may be transferred to and processed in countries outside the EEA/UK (e.g. USA, where our service providers operate). We ensure appropriate safeguards: EU Standard Contractual Clauses (SCCs), UK International Data Transfer Agreement, and adequacy decisions where applicable. You may request a copy of the safeguards we use.
6.4 Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority in your country of residence if you believe our processing of your data violates applicable law. For Lithuania: Valstybinė duomenų apsaugos inspekcija (VDAI). For the UK: Information Commissioner's Office (ICO). For other EU/EEA countries: your national data protection authority.
6.5 No Automated Decision-Making
We do not use your personal data for automated decision-making or profiling that produces legal effects or similarly significantly affects you.
6.6 Children (GDPR-K)
We do not knowingly collect data from children under 16. Users under 16 may need parental consent in some jurisdictions. Parents who believe their child has provided us with personal data may contact us to request deletion.
Material changes to this Policy will be communicated through:
- Changes posted at knuk.devynios.com/privacy
Continued use 30 days after changes constitutes acceptance.
For data protection inquiries, GDPR requests, or questions about this Policy:
Email: info@devynios.com
Website: knuk.devynios.com
Response time: 72 business hours