Privacy First

Your dynamic.
Your privacy.

We built Kneel for a community that values discretion. Your intimate life isn't a data point — it's sacred. Here's how we protect it.

Privacy Policy · Last updated 28 October 2026 · support@getkneel.com

Our Promise

Three pillars of trust

Data Minimization

We collect what the app needs to work and little else. Usage analytics carry a random per-install ID with no account attached, and they are deleted after 90 days.

No Data Selling

We will never sell your personal data or hand it to advertisers. Your trust is worth more than any ad revenue.

Encrypted Where It Counts

Partner chat, chat media, and proof media are encrypted on a participating device before upload. We store ciphertext and do not receive the private keys needed to open it.

Built-In Protection

How we protect you

Every feature is designed with your privacy in mind.

Non-Descriptive Icon

Kneel's icon is intentionally minimal — it won't reveal anything on your home screen or in your app library.

Biometric Lock

Require Face ID or fingerprint to open the app. The check happens on your phone and returns only a yes or no. We never receive your fingerprint or face data.

Proof Photos Expire

Ordinary proof media normally expires within 24 hours. Sealed chastity release photos are held until they are revealed or revoked, and revealed photos remain for no more than seven days.

Anonymous by Default

No real names required. We use email for account recovery, but your dynamic identity is yours to define.

Full Transparency

What we collect

No fine print, no hidden clauses. Here's exactly what data we store.

We store and can read

  • Email addressAccount login and recovery
  • Display nameHow you appear to your partner
  • Dynamic membershipWho you're connected to
  • Tasks, rituals, rewardsYour dynamic's structure
  • Check-ins and reflectionsMood entries and anything you write
  • Shared notes and contractsText you and your partner write
  • Kink match answersYour yes, no, and curious responses
  • Chastity lock stateStatus, timing, and the rules you set
  • Profile photoStored as an ordinary image file
  • Completion timestampsActivity tracking
  • Chat and media metadataRouting, timestamps, read status, reactions, and expiry
  • Subscription statusPurchase access and support
  • Support conversationsOnly what you choose to send to us
  • Device and push identifiersInstallation security and notifications
  • Crash and diagnostic dataReliability and security
  • Anonymous usage eventsWhich features get used, never what you wrote
  • App preferencesYour settings

We never collect

  • Precise (GPS) location
  • Fingerprint or face data
  • Your browsing history
  • Your real name, unless you choose to use it

End-to-End Encryption

What we hold but cannot read

Partner chat, chat media, and proof media do live on our servers, so let's be precise. They arrive already encrypted by a participating device, and we do not receive the private keys needed to read them.

Your keys stay on your phone

Private keys are created on participating devices and held in secure device storage. They are never sent to us, so we cannot unlock ordinary partner messages or encrypted media.

Only participating devices can open it

Content is locked to your relationship and its encryption keys are wrapped separately for participating devices. We receive only ciphertext, public keys, and encrypted key envelopes.

Deletion removes authored messages and media

Deleting your account removes your sent chat messages and sent or received encrypted media from active systems. Leaving alone ends access and contact but does not erase shared records kept for the remaining partner.

What we can still see

Encryption protects content, not every fact needed to deliver it. We can still see relationship and sender identifiers, timestamps, message key version, read status, reactions, media status, and expiry information. A participating partner can also save or share content they can open on their own device.

A safety report does not automatically send or decrypt your conversation. Kneel and our support-chat provider can read only the text, screenshots, or other content you deliberately provide in the support conversation.

The Full Policy

Use, sharing, retention, and your rights

Kneel is the controller of personal data processed through the app. We use it to provide and secure the app, manage subscriptions, deliver notifications, answer support and safety requests, diagnose failures, and improve the service.

Legal bases

Our legal bases under the UK GDPR and the EU GDPR are:

  • Contract (Art 6(1)(b)): to provide the service you sign up for, including your account, partner connection, sync, notifications, support, and subscriptions.
  • Explicit consent (Art 6(1)(a) and Art 9(2)(a)): to process information about your sex life and sexual preferences, which is special category data. This includes your role, tasks, rituals, punishments, chastity sessions, Kink Match answers, scene log, and notes, and information a partner enters about you.
  • Legitimate interests (Art 6(1)(f)): to secure Kneel, prevent fraud and abuse, diagnose failures, establish or defend legal claims, and understand aggregate usage.
  • Legal obligation (Art 6(1)(c)): to keep tax and accounting records and to answer lawful requests.

We ask for your consent where the law requires it for other processing.

New accounts give explicit consent to the sex-life processing with a separate checkbox when they sign up. Kneel's core features cannot work without this data, so you withdraw this consent by deleting your account in the app or on the web. Withdrawal does not affect processing that took place before it.

Providers and disclosures

We do not sell personal information or use relationship content for advertising. Defined operational services are provided by a backend hosting provider (backend, authentication, storage), the app stores and a subscription-management provider (purchases), an error-monitoring provider (diagnostics), a support-chat provider (user-initiated support), an app-platform provider (app infrastructure and push delivery), an email provider (account, transactional, and permitted product email), a voice-generation provider (audio for mantras with a chosen voice), and web hosting and website analytics providers (analytics that use cookies load only after you accept them).

If you install Kneel from one of our App Store search ads, Apple tells us (through our subscription-management provider) which of our campaigns and search keywords led to the install. We use it only to measure our own ads.

If you publish a Blueprint to the Community, its content and your community profile (handle, community name, bio, and role if you show it) are public, including on the web. Unpublishing or leaving takes them offline, but copies others already imported stay with them. If you or your partner turn on Automations, your relationship's notifications, including their titles and text, go to the web address or service that person chooses. Kneel tells the other partner when this is turned on.

We may also disclose information where required by law, to protect rights or safety, or during a corporate transaction subject to appropriate safeguards. Providers may process data outside your country; recognized transfer safeguards are used where required.

Retention and deletion

  • Product analytics events are deleted after 90 days.
  • Ordinary proof media normally expires within 24 hours; terminal records are hard-deleted after up to seven additional days.
  • Chat remains until the relationship is deleted or its author deletes their account.
  • Support, billing, security, and legal records are retained only as reasonably needed for those purposes and legal duties.

Leaving and account deletion

Leaving permanently ends access and contact inside Kneel, but shared records may remain for the other partner. Account deletion removes your account, profile image, user-scoped records, sent chat messages, and sent or received encrypted media from active systems. Shared relationship records needed by a remaining partner may continue without your account. Limited copies may persist temporarily in provider backups or where law requires.

Your rights and choices

Depending on where you live, you may ask to access, correct, export, restrict, object to, or delete personal data; withdraw consent; opt out of marketing; and complain to a data-protection authority. Use the controls in Kneel or email support@getkneel.com. Kneel is strictly for adults aged 18 or older.

“We're part of this community too. We built the app we wished existed — one that respects the vulnerability required for true power exchange.”

— The Kneel Team

Ready to experience
private power exchange?

Download Kneel and see how privacy should feel.

Get the App