Privacy Policy

Knock (“we”, “us”, or “our”) operates the platform available at uJustKnock.com and uJustKnock.ca(the “Service”). We are committed to protecting your personal information in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

This Privacy Policy explains what information we collect, why we collect it, how we use and share it, and what rights you have over your data. By using the Service you agree to the practices described here.

Knock is a two-sided marketplace that connects Hosts — people who open their homes to share skills — with Neighbours who attend small-group Gatherings. The platform is operated from Canada. For privacy inquiries, the contact details are in Section 17.

We collect the following categories of personal information:

Account and profile information

• First name, email address, and profile photo (required at sign-up)
• Last name (collected during identity verification; stored but never displayed publicly)
• Neighbourhood, bio, phone number, and optional preference fields you add to your profile
• Host-specific information: skills, home description, teaching style, stripe payout details

Booking and transaction information

• Gatherings you book or host, amounts paid, payment method details (handled by Stripe — we do not store raw card numbers)
• Booking status, cancellation history, and refund records

Content you create

• Gathering listings, descriptions, and photos you upload
• Reviews you write or receive
• Messages exchanged with other users through the platform

Usage and device data

• Pages visited, search queries, filters applied, and actions taken on the platform
• Device type, browser, IP address, and approximate location derived from IP
• Precise location, if you grant permission during onboarding

Communications

• Emails we send you and your interactions with them (opens, clicks)

We collect information in three ways:

• Directly from you — when you sign up, complete your profile, create a Gathering, make a booking, or contact us.
• Automatically — through cookies, server logs, and analytics tools as you use the Service.
• From third parties — from Clerk (our authentication provider) when you sign in with Google or Apple, and from Stripe when payment events occur.

We use personal information to:

• Create and manage your account and authenticate your identity
• Facilitate bookings, process payments, and issue refunds
• Match Neighbours with Gatherings near them based on interests and location
• Send transactional emails (booking confirmations, pre-session reminders, review prompts)
• Power the AI listing assistant (your answers to the three prompts are sent to Anthropic to generate a Gathering description)
• Display an approximate map location to protect Host privacy before booking is confirmed
• Detect fraud, enforce our Terms of Service, and keep the platform safe
• Analyse how the platform is used so we can improve it
• Comply with legal obligations

Under PIPEDA and applicable law, we rely on the following bases to process your personal information:

• Consent — for optional profile fields, location permission, and marketing communications. You may withdraw consent at any time.
• Contract performance — to fulfil your bookings, process payments, and provide the Service you signed up for.
• Legitimate interests — for platform analytics, fraud prevention, and improving our Service, where those interests are not overridden by your privacy rights.
• Legal obligation — to retain financial records and comply with applicable law.

We share personal data with the following third-party processors, each bound by data processing agreements:

We do not sell your personal information to third parties and we do not share it for advertising purposes.

We use cookies and similar technologies for the following purposes:

• Strictly necessary cookies — to authenticate your session and keep you signed in (set by Clerk).
• Analytics cookies — to understand how users navigate the platform (set by Segment). These do not identify you personally.
• Preference cookies — to remember settings such as your onboarding completion state.

You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent you from signing in.

The Knock platform includes an AI-powered listing assistant. When you choose to use it, your answers to three questions about your Gathering are sent to Anthropic to generate a description. This data is used solely to produce the response; Anthropic’s privacy policy governs their handling of API inputs. We store your original answers and the generated text alongside your Gathering for editorial context.

No automated decision-making that produces legal or similarly significant effects is applied to your account using AI.

You may sign in to Knock using your Google or Apple account. When you do, Clerk receives an authentication token and the name and email address associated with that account. We do not receive your social media passwords. You can revoke Knock’s access at any time through your Google or Apple account settings.

Knock is operated from Canada. Some of our service providers (including Clerk, Stripe, Vercel, Anthropic, and Segment) are based in the United States or operate infrastructure there. When your data is transferred outside Canada, we ensure appropriate safeguards are in place, including contractual clauses consistent with PIPEDA requirements.

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account:

• Your name and email are replaced with anonymised placeholders
• Your profile photo, bio, and phone number are permanently removed
• Your booking records, payment records, and star ratings are retained for financial and legal integrity — they are de-identified and cannot be linked back to you
• Written review text is removed on account deletion

Financial records required for tax or legal compliance are retained for a minimum of seven years.

We implement technical and organisational measures to protect your personal information, including TLS encryption in transit, access controls, and database-level row isolation. No system is perfectly secure; in the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by law.

The Service is not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

Under PIPEDA and applicable provincial law, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — request deletion of your account and personal information (subject to legal retention obligations)
• Withdrawal of consent — withdraw consent for optional processing at any time, without affecting the lawfulness of processing before withdrawal
• Complaint — lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca

To submit a data subject access request, use our privacy request form. We will respond within 30 days.

Some browsers transmit Do-Not-Track (DNT) signals. Because there is no consistent industry standard for how DNT signals should be honoured, our platform does not currently alter its data practices in response to DNT signals. We will revisit this position as standards develop.

If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us at:

We will acknowledge your request within 10 business days and respond fully within 30 calendar days.