GDPR information

Effective date: June 13, 2026 · Last updated: June 13, 2026

1. Scope

This page applies when you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland and use mobile apps, web apps, or websites operated under the Knox Studios name that link to our privacy materials (the “Services”).

For a short summary of what our apps collect, see our Data collection disclaimer. For full practices applicable worldwide, see our Privacy Policy.

2. Personal data we process

We aim to collect only what we need. Depending on how you use the Services, we may process:

• Account data — the email address you provide when signing up or signing in through Firebase Authentication, plus authentication-related technical data (for example, security tokens or device identifiers used for fraud prevention) processed by Firebase as part of sign-in;
• Communications data — information you send when you email us or use a website contact form (such as your name, email address, and message content);
• Website technical data — limited technical information your browser or device sends when loading our website (for example, IP address, browser type, and pages visited), where our hosting or security configuration processes it.

We do not intentionally collect precise geolocation, contacts, photos, microphone audio, or health data through our apps for profiling or advertising beyond what Firebase Authentication may handle for security.

3. Purposes and legal bases

Under GDPR Article 6, we process personal data only where we have a valid legal basis:

• Contract (Art. 6(1)(b)) — to create and maintain your account, provide the Services you request, and respond to support inquiries tied to your use of the Services;
• Legitimate interests (Art. 6(1)(f)) — to secure the Services, prevent abuse, improve reliability, and operate our business, balanced against your rights (for example, authentication security and responding to general business correspondence);
• Legal obligation (Art. 6(1)(c)) — where we must retain or disclose information to comply with applicable law;
• Consent (Art. 6(1)(a)) — where required for a specific optional activity. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

4. Recipients and processors

We share personal data only as needed to operate the Services:

• Google Firebase / Google Cloud — authentication, hosting, and related infrastructure configured for the Services;
• Professional advisors — attorneys, accountants, or consultants under confidentiality obligations;
• Authorities — when required by law or to protect rights, safety, and security.

We do not sell personal data and do not share personal data for cross-context behavioral advertising. Processors act on our instructions and under appropriate contractual safeguards.

5. International transfers

Knox Studios is based in the United States. Personal data may be transferred to and processed in the United States or other countries where we or our service providers operate.

Where GDPR requires safeguards for transfers outside the EEA, UK, or Switzerland, we rely on appropriate mechanisms such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent measures offered by our service providers (including Google), together with supplementary measures where appropriate.

6. Retention

We keep personal data only as long as necessary for the purposes described in this notice and our Privacy Policy:

• Account-related data is retained while your account is active and for a reasonable period afterward for backup, security, and legal compliance;
• Communications are retained long enough to address your request and maintain ordinary business records;
• We may retain certain information longer where required by law or to establish, exercise, or defend legal claims.

7. Your rights

If GDPR applies to you, you may have the following rights, subject to conditions and exceptions in law:

• Access — request confirmation of whether we process your personal data and receive a copy;
• Rectification — request correction of inaccurate or incomplete personal data;
• Erasure — request deletion of personal data in certain circumstances (“right to be forgotten”);
• Restriction — request that we limit processing in certain circumstances;
• Data portability — receive personal data you provided in a structured, commonly used, machine-readable format, or have it transmitted to another controller where technically feasible;
• Objection — object to processing based on legitimate interests, and object at any time to processing for direct marketing (we do not use account data for direct marketing as described in our Privacy Policy);
• Withdraw consent — where processing is based on consent, withdraw it at any time;
• Lodge a complaint — contact your local data protection supervisory authority. A list of EU authorities is available from the European Data Protection Board. UK residents may contact the Information Commissioner’s Office (ICO).

We will respond to verified requests within the timeframes required by GDPR (generally one month, extendable where permitted). We may need to verify your identity before fulfilling a request.

8. Automated decision-making

We do not use personal data to make solely automated decisions that produce legal or similarly significant effects about you.

9. Children

Our Services are not directed to children under 16 in the EEA/UK (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us and we will take appropriate steps.

10. How to exercise your rights

To make a GDPR request or ask a privacy question, contact us using the details below. Please include enough information for us to identify your account or correspondence and describe the right you wish to exercise.

Where your request relates to Firebase Authentication, you may also review or manage certain credentials through your Google account settings where applicable.

11. Changes

We may update this page by posting a revised version and updating the “Last updated” date. Material changes may be communicated through the Services or other reasonable means where required by law.

12. Contact

GDPR and privacy inquiries:

Knox Studios (Knox Holdings LLC - Series A)
Attention: Connor, managing member
Valley, AL · United States
Email: c@knoxstudios.net · connor@knoxstudios.net
Phone: 334-758-6696

Firebase privacy resources (third party): Firebase Privacy Information · Google Privacy Policy

Privacy Policy · Terms of Service · Data collection statement