What happens to your data
The short version of our privacy policy. What Knit keeps, where it lives, who can see it, and how to delete it.
Encrypted on your phone and on our servers
Your record is locked with a key kept in your iPhone’s keychain, and encrypted on the way to our servers and while it’s stored there.
Research sharing is off unless you turn it on
If you turn it on, what’s shared has your name and other identifying details removed. You can stop anytime.
Delete your account anytime
Seven days after you ask, your record is removed from our servers and from your phone.
What Knit keeps
What you connect and what you add. That’s data from Apple Health, records from your health system, lab results, conditions, medications, readings, and your check-in answers.
We also keep your account details, like your name, email address, and date of birth, plus anything you add to your profile. If you sign in with Apple or Google, they send us your name and email address, which may be a private relay address from Apple.
Where it lives
On your iPhone, in an encrypted database with its key kept in your phone’s keychain.
And in your Knit account on our servers, encrypted on the way there and while it’s stored. That’s why your record is there on any device where you sign in, and why your history isn’t lost when you switch phones.
What the AI sees
AI-written insights are off until you turn them on in Settings, and you can turn them off anytime. When they’re on, our AI provider gets a summary of your data without your name or contact details.
When you add a medical document, like a lab report, a body scan, or notes from a visit, its pages go to our AI provider to read it, even with AI insights off. You check what it read before anything is saved. We keep the results you choose to save. For notes written in sentences, we also keep the medical text, with names and other details that identify people taken out. We don’t keep the photo or the PDF.
Our AI provider doesn’t use what we send to train its models, and doesn’t keep it once it has answered. Knit doesn’t train AI models on your data today. Before it does, you’ll be able to opt out in the app.
Who can see it
You. Companies that help us run Knit, like our cloud host, our AI provider, and the service that sends our emails, can reach your data only to do that work for us.
Knit never sells data that identifies you, doesn’t show you ads, and never gives your data to advertisers or data brokers. We’d share information if the law requires it, like a court order.
Your choices
Change what Knit reads from Apple Health anytime, in the Health app.
Turn research sharing and AI-written insights on or off in Knit’s settings.
Download a copy of everything Knit holds about you, from Settings.
Delete your account from Settings. It takes effect seven days after you ask, and signing in again before then stops it. We email you when you ask, the day before, and when it’s done.
HIPAA
HIPAA covers doctors, hospitals, insurers, and the companies that work for them. Knit is an app you choose to use, so HIPAA doesn’t cover it. We still keep your data secure.
If you live in Washington or Nevada, those states’ consumer health data laws give you more rights, and our consumer health data policy explains them.
If something changes
If a change affects how we use or share your information, we’ll tell you in the app or by email before it takes effect.
If your information is ever exposed in a security incident, we’ll email you as soon as we can, say what happened, and tell you what you can do about it.
Read the full policies
Questions about your data?