Privacy policy

Last updated 6 September 2026.

John Andrew Owen, in Australia, is the controller of your personal data. Contact info@knowlark.com. We do not sell your personal data.

What we collect

• Your email address, and the date that you created the account.
• Your study material: the topics that you save, the text inside them, and the concepts that your AI extracts.
• Your quiz record: each question that your AI asked, whether you got it right, and the time of the attempt.
• Sign-in data: a hash of your one-time password, and the AI clients that you authorized.
• Sign-in counts: how many sign-in emails we sent to an address.
• Server logs: request metadata, including your user agent.

Why we use it, and our legal basis

We use your account data, study material, quiz record, and sign-in data to run the service for you. The legal basis is performance of our contract with you. We use server logs and sign-in counts to find faults, to measure load, and to stop abuse. The legal basis is our legitimate interest in a secure service. We set two necessary cookies to sign you in and to protect the sign-in form.

Advertising measurement

Opening the quick start guide counts as a start event. Our server sends Reddit your IP address, browser information, page URL, and event identifier. If you arrived through a Reddit ad, we store its click identifier in a first-party cookie for 28 days and include it with the event. We use session storage to avoid counting page reloads as additional start events. We do not send your email address or study material. See Reddit's privacy policy for how Reddit handles this information.

Who else sees it

Amazon Web Services hosts Knowlark, stores its database, and sends our email, on our instruction. Your own AI client reads and writes your topics through the MCP connection, so the provider of that client sees what passes through it. Reddit receives the advertising measurement data described above. Otherwise, we disclose data to another party only if the law requires it, or to protect the service against attack or fraud.

Where we store it, and for how long

Your account data and study material sit in the AWS region us-west-2, in the United States. Request logs sit in the AWS region that served the request. If you are outside the United States, your data crosses a border. We keep your data until you delete it or close your account, we keep sign-in counts for one hour, and we keep server logs for a short period.

Your rights

You can ask for a copy of your data, for a correction, for deletion, or for a transfer of your data to you. You can object to our use of it. Email info@knowlark.com, and we answer within 30 days. You can also complain to your data protection authority. In Australia that is the Office of the Australian Information Commissioner.

Changes

We can update this policy, and we publish the new version on this page.