Scope
This Privacy Policy applies to the Knotline iOS application, the Knotline website, and the limited web services used to support the app (together, the “Service”). Knotline is developed and operated by Yuhang Dong.
Knotline is a local-first control surface that lets you view facts from services you choose to connect, currently Cloudflare and RevenueCat. Those third-party services have their own privacy practices, and this policy does not replace their policies.
Information and data
The data involved depends on the features and provider connections you choose to use.
Project information
Project names, selected components, resource mappings, layout preferences, refresh state, and cached provider facts are stored locally on your device.
Provider credentials
Cloudflare OAuth tokens, manually imported Cloudflare Account API Tokens, and RevenueCat API keys are stored in the iOS Keychain. They are used only to make the provider requests you initiate and are not placed in ordinary app storage, analytics, or support exports.
Provider data
Knotline requests read-only operational, distribution, and business facts from the external resources you bind to a project. The app displays and may cache that data on your device.
Website requests
When you visit this site, Cloudflare may process standard request data such as your IP address, browser information, requested URL, and security signals to deliver and protect the site. Knotline does not currently use advertising trackers or third-party website analytics.
Cloudflare OAuth callback. After Cloudflare authorization, the callback service receives a one-time authorization code, state value, or provider error and immediately redirects it to the installed app. Knotline does not exchange or store that code on the server. Token exchange and protected token storage happen on the device.
How data is used
We process data only as needed to:
- connect the external services you select and verify compatible resources;
- retrieve, calculate, display, and refresh the components in your project;
- store your local preferences and keep credentials protected;
- deliver and secure the website and the OAuth callback; and
- comply with law, prevent abuse, and protect the Service and its users.
Knotline does not sell personal data, build advertising profiles, or use your connected provider data to advertise to you. The current Service does not send provider credentials, raw provider payloads, or connected dashboard data to an AI model.
Storage and retention
On your device
Project information and cached provider facts remain on your device until you remove them or delete the app, subject to iOS storage and backup behavior. Provider credentials remain in Keychain-backed storage until you disconnect the provider or otherwise delete them.
OAuth callback
The Cloudflare callback relay does not persist authorization codes, state values, provider errors, access tokens, or refresh tokens. Its request logging is disabled because callback URLs may contain sensitive one-time values.
Connected services and infrastructure
Cloudflare and RevenueCat may retain information they process as connected providers or infrastructure services under their own policies and legal obligations. Their retention periods are not controlled by Knotline.
Service providers and connected services
Knotline relies on a limited set of third parties for specific functions:
- Apple distributes the iOS app through the App Store.
- Cloudflare hosts and protects the website and operates the narrow OAuth callback relay.
- Connected providers, currently Cloudflare and RevenueCat, receive requests directly from your device when you choose to connect or refresh their data. They process those requests under the terms and privacy policies governing your account with them.
Service providers that process data on Knotline’s behalf are selected on terms requiring them to use that data only to provide their contracted service and to protect it consistently with this policy and applicable law. This does not replace or expand the independent privacy terms of a provider account that you choose to connect directly. These services may process data in countries other than your own, subject to applicable safeguards and transfer mechanisms.
Your choices
You control which providers and resources are connected to Knotline. You can:
- remove a component without disconnecting its provider;
- disconnect a provider to remove its protected credential and related local cache;
- revoke a grant or key in the provider’s own dashboard;
- delete the app to remove ordinary local app data from the device.
Depending on where you live, you may also have rights to access, correct, delete, restrict, or object to certain processing. Because most Knotline project data is held only on your device, the app’s local controls are usually the direct way to exercise those choices.
Security
Knotline limits its operations to an explicit read-only allowlist, even when a provider credential is technically broader. Credentials are stored using iOS Keychain-backed storage and are excluded from ordinary app persistence, logs, telemetry, and support exports.
No method of storage or transmission is completely secure. You are responsible for protecting access to your device and for choosing, rotating, and revoking provider credentials appropriately.
Children
Knotline is a professional developer tool and is not directed to children. We do not knowingly collect personal information from children below the minimum age required in their jurisdiction. If you believe a child has provided personal information to the Service, please contact us so it can be addressed.
Changes and contact
We may update this policy as Knotline’s features, providers, or legal obligations change. The date at the top identifies the latest version. Material changes will be communicated in the app or through another appropriate channel before they take effect when required.
For privacy questions or requests, email knotline-support@artifact-kit.com or visit Knotline Support. Please do not include provider credentials, private keys, authorization codes, or sensitive provider payloads in a support request.
For the rules that apply when using the Service, read the Terms of Use.