Privacy Policy
Effective Date: 10/9/2026
Knit Healthcare, LLC ("Knit", "we", "us", or "our") is committed to protecting your privacy and handling your information transparently and responsibly. This Privacy Policy explains how we collect, use, share, and protect information when you use our website, mobile application, and related services (collectively, the "Services").
By using the Services, you agree to this Privacy Policy.
Scope of This Privacy Policy
This Privacy Policy applies to information collected through the Services. It does not apply to third-party websites, devices, or services that may integrate with Knit.
Knit is a consumer health data platform. We are not a healthcare provider, do not provide medical advice, and do not replace professional medical care.
Information We Collect
a. Information You Provide Directly
We collect information you choose to provide, including:
Account information: name, email address, date of birth
Health Information: wellness data, medical records, and other health information you choose to connect, upload, or manually enter
Communications: messages or information you send to customer support or contact us with
You control what health data you connect, enter, or share with Knit.
b. Information from Connected Devices and Services
If you connect third-party devices or services, we may collect health and wellness data such as:
Activity, steps, heart rate, sleep, and similar metrics
Other data made available by the services you connect and authorize
We currently support integrations through third-party APIs and may support additional integrations over time. Knit only collects data you authorize through these connections.
Cycle tracking is off until you turn it on in Settings. When it is on, Knit reads the cycle information you allow from Apple Health: period days, spotting, the cycle alerts Apple Health has given you, and a pregnancy or breastfeeding status recorded there. We keep it with your record so it shows on your devices, and we use it to offer the pregnancy setting for you to confirm and to hold back a check-in question on days your cycle explains a change. It does not go to our AI features or into notifications. It is treated like the rest of your record and is shared for research only if you opt in. Turning cycle tracking off removes this information from your Knit account and from the app on every device. Apple Health keeps its own copy.
c. Medical Records and Clinical Data
If you choose to connect medical providers or records, we may collect clinical information such as:
Medications
Lab results
Diagnoses and conditions
Visit and encounter summaries
We may access medical records through patient-authorized connections, including standards such as SMART on FHIR. We do not collect medical records unless you explicitly choose to connect them.
d. Automatically Collected Information (Website)
When you visit our website, we may automatically collect:
IP Address
Browser type and device information
Pages visited and interactions
We use cookies and similar technologies, including analytics cookies, to understand usage and improve our Services.
e. Mobile App Information
At this time, the Knit mobile app does not use advertising identifiers. We may collect limited technical data for performance and error monitoring (such as crash logs).
Information We Collect
a. Information You Provide Directly
We collect information you choose to provide, including:
Account information: name, email address, date of birth
Health Information: wellness data, medical records, and other health information you choose to connect, upload, or manually enter
Communications: messages or information you send to customer support or contact us with
You control what health data you connect, enter, or share with Knit.
b. Information from Connected Devices and Services
If you connect third-party devices or services, we may collect health and wellness data such as:
Activity, steps, heart rate, sleep, and similar metrics
Other data made available by the services you connect and authorize
We currently support integrations through third-party APIs and may support additional integrations over time. Knit only collects data you authorize through these connections.
Cycle tracking is off until you turn it on in Settings. When it is on, Knit reads the cycle information you allow from Apple Health: period days, spotting, the cycle alerts Apple Health has given you, and a pregnancy or breastfeeding status recorded there. We keep it with your record so it shows on your devices, and we use it to offer the pregnancy setting for you to confirm and to hold back a check-in question on days your cycle explains a change. It does not go to our AI features or into notifications. It is treated like the rest of your record and is shared for research only if you opt in. Turning cycle tracking off removes this information from your Knit account and from the app on every device. Apple Health keeps its own copy.
c. Medical Records and Clinical Data
If you choose to connect medical providers or records, we may collect clinical information such as:
Medications
Lab results
Diagnoses and conditions
Visit and encounter summaries
We may access medical records through patient-authorized connections, including standards such as SMART on FHIR. We do not collect medical records unless you explicitly choose to connect them.
d. Automatically Collected Information (Website)
When you visit our website, we may automatically collect:
IP Address
Browser type and device information
Pages visited and interactions
We use cookies and similar technologies, including analytics cookies, to understand usage and improve our Services.
e. Mobile App Information
At this time, the Knit mobile app does not use advertising identifiers. We may collect limited technical data for performance and error monitoring (such as crash logs).
Information We Collect
a. Information You Provide Directly
We collect information you choose to provide, including:
Account information: name, email address, date of birth
Health Information: wellness data, medical records, and other health information you choose to connect, upload, or manually enter
Communications: messages or information you send to customer support or contact us with
You control what health data you connect, enter, or share with Knit.
b. Information from Connected Devices and Services
If you connect third-party devices or services, we may collect health and wellness data such as:
Activity, steps, heart rate, sleep, and similar metrics
Other data made available by the services you connect and authorize
We currently support integrations through third-party APIs and may support additional integrations over time. Knit only collects data you authorize through these connections.
Cycle tracking is off until you turn it on in Settings. When it is on, Knit reads the cycle information you allow from Apple Health: period days, spotting, the cycle alerts Apple Health has given you, and a pregnancy or breastfeeding status recorded there. We keep it with your record so it shows on your devices, and we use it to offer the pregnancy setting for you to confirm and to hold back a check-in question on days your cycle explains a change. It does not go to our AI features or into notifications. It is treated like the rest of your record and is shared for research only if you opt in. Turning cycle tracking off removes this information from your Knit account and from the app on every device. Apple Health keeps its own copy.
c. Medical Records and Clinical Data
If you choose to connect medical providers or records, we may collect clinical information such as:
Medications
Lab results
Diagnoses and conditions
Visit and encounter summaries
We may access medical records through patient-authorized connections, including standards such as SMART on FHIR. We do not collect medical records unless you explicitly choose to connect them.
d. Automatically Collected Information (Website)
When you visit our website, we may automatically collect:
IP Address
Browser type and device information
Pages visited and interactions
We use cookies and similar technologies, including analytics cookies, to understand usage and improve our Services.
e. Mobile App Information
At this time, the Knit mobile app does not use advertising identifiers. We may collect limited technical data for performance and error monitoring (such as crash logs).
Where Your Data is Stored
Your health data is stored in two places: on your device and in your Knit account.
On your device, your record is kept in an encrypted database. In your account, your record is stored securely on our cloud infrastructure so that it is available to you across your devices and survives the loss or replacement of a phone. Storing your record in your account is part of providing the Services.
Contributing your data to research is separate and always your choice. See How We Share Information.
How We Use Information
We use information we collect to:
Provide, operate, and maintain Services
Display and organize your health and wellness data
Improve product functionality and user experience
Conduct analytics and research
Develop and improve algorithms and AI models
Communicate with you about the Services
Protect the security and integrity of the Services
Comply with legal obligations
Maintain your health record in your account, so it is available across your devices
AI and Model Training
We may use de-identified or aggregated data to train analytics systems and AI models. You will have the ability to opt out of having your data used for AI or LLM training.
We do not use your information to make automated decisions about things like your insurance, credit, employment or access to care. If that ever changes, we will ask for your agreement first.
Data Ownership and Control
You retain ownership of your personal information and health data.
You may:
Choose which devices, services, or records to connect
Revoke connections at any time. When you disconnect a source, we stop collecting from it, and you choose whether the records it already provided stay in your record.
Choose whether your data contributes to research, and stop at any time. Stopping ends future research use of your data. It does not delete your record; your record is removed when you delete your account.
Request correction of inaccurate data
Delete your account and associated data
You can change or remove the medicines, conditions, allergies and readings you entered yourself. Records from a health system or insurer are shown as that source has them. To correct one of those, ask the provider or plan that keeps it. Federal law (HIPAA) gives you the right to ask.
How We Share Information
We may share information in the following circumstances:
a. With Service Providers
We share information with trusted vendors that help us operate the Services, such as:
Cloud infrastructure providers (e.g., Google Cloud)
Analytics and monitoring providers (e.g., Google Analytics, Sentry)
These providers may access information only to perform services on our behalf.
b. Research, Analytics, and Commercial Use
With appropriate safeguards, we may share or sell your de-identified or aggregated data with:
Researchers
Pharmaceutical companies
Healthcare and life science partners
We do not sell identifiable personal health information. Research contribution is opt-in. While it is on, new data is added as it arrives. It stops when you turn it off. When you opt in, we prepare de-identified data for research partners; the data partners receive has your name, contact details and other identifying details removed. No method of removing them is perfect, and in rare cases, such as an uncommon condition, de-identified data could be linked back to a person. We do not try to re-identify de-identified data, and every partner that receives it agrees in writing not to. When you opt out, your data is no longer used for research. De-identified data already delivered to a partner cannot be recalled, because it is no longer within our systems. Some health information, such as family history, can say something about your relatives too. It is treated like the rest of your record and is shared for research only if you opt in.
c. Legal and Safety Reasons
We may disclose information if required to:
Comply with laws, regulations, subpoenas, or court orders
Protect the rights, safety, or property of Knit or others
Detect or prevent fraud or security issues
d. Business Transfers
If Knit is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. The new owner must honor this Privacy Policy for your information, or ask for your agreement to a new one. If Knit ever stops operating, we will tell you beforehand and give you time to download your data and close your account.
e. Marketing
We do not use your personal information to market other companies’ products or services to you, and we do not share it with anyone for that purpose, unless you separately agree.
How We Share Information
We may share information in the following circumstances:
a. With Service Providers
We share information with trusted vendors that help us operate the Services, such as:
Cloud infrastructure providers (e.g., Google Cloud)
Analytics and monitoring providers (e.g., Google Analytics, Sentry)
These providers may access information only to perform services on our behalf.
b. Research, Analytics, and Commercial Use
With appropriate safeguards, we may share or sell your de-identified or aggregated data with:
Researchers
Pharmaceutical companies
Healthcare and life science partners
We do not sell identifiable personal health information. Research contribution is opt-in. While it is on, new data is added as it arrives. It stops when you turn it off. When you opt in, we prepare de-identified data for research partners; the data partners receive has your name, contact details and other identifying details removed. No method of removing them is perfect, and in rare cases, such as an uncommon condition, de-identified data could be linked back to a person. We do not try to re-identify de-identified data, and every partner that receives it agrees in writing not to. When you opt out, your data is no longer used for research. De-identified data already delivered to a partner cannot be recalled, because it is no longer within our systems. Some health information, such as family history, can say something about your relatives too. It is treated like the rest of your record and is shared for research only if you opt in.
c. Legal and Safety Reasons
We may disclose information if required to:
Comply with laws, regulations, subpoenas, or court orders
Protect the rights, safety, or property of Knit or others
Detect or prevent fraud or security issues
d. Business Transfers
If Knit is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. The new owner must honor this Privacy Policy for your information, or ask for your agreement to a new one. If Knit ever stops operating, we will tell you beforehand and give you time to download your data and close your account.
e. Marketing
We do not use your personal information to market other companies’ products or services to you, and we do not share it with anyone for that purpose, unless you separately agree.
How We Share Information
We may share information in the following circumstances:
a. With Service Providers
We share information with trusted vendors that help us operate the Services, such as:
Cloud infrastructure providers (e.g., Google Cloud)
Analytics and monitoring providers (e.g., Google Analytics, Sentry)
These providers may access information only to perform services on our behalf.
b. Research, Analytics, and Commercial Use
With appropriate safeguards, we may share or sell your de-identified or aggregated data with:
Researchers
Pharmaceutical companies
Healthcare and life science partners
We do not sell identifiable personal health information. Research contribution is opt-in. While it is on, new data is added as it arrives. It stops when you turn it off. When you opt in, we prepare de-identified data for research partners; the data partners receive has your name, contact details and other identifying details removed. No method of removing them is perfect, and in rare cases, such as an uncommon condition, de-identified data could be linked back to a person. We do not try to re-identify de-identified data, and every partner that receives it agrees in writing not to. When you opt out, your data is no longer used for research. De-identified data already delivered to a partner cannot be recalled, because it is no longer within our systems. Some health information, such as family history, can say something about your relatives too. It is treated like the rest of your record and is shared for research only if you opt in.
c. Legal and Safety Reasons
We may disclose information if required to:
Comply with laws, regulations, subpoenas, or court orders
Protect the rights, safety, or property of Knit or others
Detect or prevent fraud or security issues
d. Business Transfers
If Knit is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction. The new owner must honor this Privacy Policy for your information, or ask for your agreement to a new one. If Knit ever stops operating, we will tell you beforehand and give you time to download your data and close your account.
e. Marketing
We do not use your personal information to market other companies’ products or services to you, and we do not share it with anyone for that purpose, unless you separately agree.
HIPAA and Health Information
Knit is designed to handle health information responsibly and to comply with HIPAA where applicable. However, Knit is not a healthcare provider or health plan.
When applicable, we operate under Business Associate Agreements (BAAs) with certain partners. HIPAA protections may apply to specific data flows and integrations.
Cookies and Tracking Technologies
We use cookies and similar technologies on our website to:
Understand usage patterns
Improve site performance
Analyze traffic and engagement
You can control cookies through your browser settings.
Data Retention and Deletion
We retain your information only as long as necessary to provide the Services or as required by law.
If you stop using Knit, we keep your account and your record until you delete your account. Health systems and insurers you connected keep updating your record until you disconnect them or their access ends.
When you delete your account, your data is deleted seven (7) days after the request, subject to limited legal or operational retention requirements. Account deletion removes your identifiable data and any research data still held in our systems. De-identified data already delivered to research partners cannot be recalled.
Backup systems may retain data briefly before permanent deletion.
Security
We use administrative, technical, and organizational safeguards designed to protect your information. However, no system is completely secure, and we cannot guarantee absolute security. If your information is ever exposed in a security incident, we will tell you by email as soon as we can, say what happened, and tell you what you can do to protect yourself.
Children's Privacy
The Services are not intended for individuals under 18 years old. We do not knowingly collect information from children. If we become aware that a minor's data has been collected, we will delete it.
Your Privacy Rights
Depending on your location, you may have rights to:
Access your personal information
Request correction of inaccurate information
Request deletion of your information
Limit certain uses of your information
California Privacy Rights
California residents may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of certain data uses.
We will honor applicable state privacy laws.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If a change affects how we use or share your information, we will tell you in the app or by email before it takes effect. You can agree to the updated policy or close your account before it applies to you.
Contact Information
If you have questions about this Privacy Policy or your data, contact us at:
Knit Healthcare, LLC
Email: hello@knithealthcare.com
You can send a privacy question or complaint to the same address. We reply within five business days.