Privacy policy

Who we are and how to reach us

IKNUVA is an independent public registry that links public figures and creators to their official accounts with published evidence. This policy covers iknuva.com and the IKNUVA apps for iOS and Android.

For any request about your personal data, email privacy@iknuva.com; for reports, report@iknuva.com; for appeals, appeal@iknuva.com.

What we collect and why

Account: email, name and sign-in provider (Google, Apple or email). If you choose a password we store only its hash. Purpose: to create your account and secure sign-in.
Free-search allowance: a random device id (the ik_anon cookie in the browser, or an install id in the app) and your IP address, stored as keyed hashes (HMAC) to count the three free searches and prevent abuse. They are not linked to your identity.
Searches: we do not keep a search history linked to you. Public names with no result may be recorded without identity as discovery demand, after filtering sensitive-looking text; the name text alone may be sent to Wikidata and YouTube to find candidates.
Image search: the image fingerprint is computed in memory, compared with the registry and discarded; the uploaded image is not stored. Face matching on the website sends a numeric descriptor computed in your browser, which is not stored.
Saved profiles and alerts: the profiles you save and, in the app, a push token if you allow notifications, to alert you when a profile you follow changes.
Reports, claims and discovery requests: the links and text you send, and your email if you enter it. Claim photos are private to authorized reviewers; contact numbers stay private unless you explicitly consent to publish them. A discovery-request email is used for one message, then deleted.
Subscription and payments: when you subscribe through the App Store or Google Play we receive the transaction id, subscription status and expiry from the store, never your card. Website payments happen on Moyasar's hosted page; we keep the amount, status, email and invoice reference.
Measurement: we use Vercel Web Analytics for aggregate, cookieless visit statistics. We show no ads and sell no data.

Public figures in the registry

Registry profiles are built from publicly published information (official sites, platform pages, Wikidata and reputable sources), and each piece of evidence shows its source and date. We do not publish private or sensitive data. If you are the subject of a profile and something is wrong or you want something restricted, use the report button on the profile or email appeal@iknuva.com for manual review.

Who processes data with us

Vercel (hosting), Supabase (database), Resend (email), Moyasar (website payments), Apple and Google (sign-in, subscriptions and notifications in the app), Expo (notification delivery). Each processes only what its function needs.

Transfers outside Saudi Arabia: our servers and database are in Australia (Sydney), and some processors operate outside Saudi Arabia. We limit transfers to the minimum needed to provide the service.

How long we keep data

Account data and saved profiles: until you delete your account.
Free-search counters: up to one year, then they expire automatically; the daily IP counter lasts 24 hours.
Payment and subscription records: kept for legal, tax and refund obligations (up to six years), even after account deletion, without a link to the deleted account.
Approved claims: kept as the ownership record of the profile; your account is detached from them when deleted.

Your rights and account deletion

You have the right to access, correct and delete your data and to withdraw consent, in line with Saudi Arabia's Personal Data Protection Law.

Delete your account at any time from account deletion on the website, or from “My account” in the app. If you cannot sign in, enter your email on the same page to receive a confirmation link.

Deleting your account does not cancel a subscription billed by the App Store or Google Play; cancel it in the store's subscription settings to stop billing.

Children

The service is not directed at children under 13, and we do not knowingly collect their data.

Changes to this policy

We publish changes here with the updated date above, and tell you in the app or by email if a change is material.

Who we are and how to reach us

For any request about your personal data, email privacy@iknuva.com; for reports, report@iknuva.com; for appeals, appeal@iknuva.com.

What we collect and why

Account: email, name and sign-in provider (Google, Apple or email). If you choose a password we store only its hash. Purpose: to create your account and secure sign-in.
Free-search allowance: a random device id (the ik_anon cookie in the browser, or an install id in the app) and your IP address, stored as keyed hashes (HMAC) to count the three free searches and prevent abuse. They are not linked to your identity.
Searches: we do not keep a search history linked to you. Public names with no result may be recorded without identity as discovery demand, after filtering sensitive-looking text; the name text alone may be sent to Wikidata and YouTube to find candidates.
Image search: the image fingerprint is computed in memory, compared with the registry and discarded; the uploaded image is not stored. Face matching on the website sends a numeric descriptor computed in your browser, which is not stored.
Saved profiles and alerts: the profiles you save and, in the app, a push token if you allow notifications, to alert you when a profile you follow changes.
Reports, claims and discovery requests: the links and text you send, and your email if you enter it. Claim photos are private to authorized reviewers; contact numbers stay private unless you explicitly consent to publish them. A discovery-request email is used for one message, then deleted.
Subscription and payments: when you subscribe through the App Store or Google Play we receive the transaction id, subscription status and expiry from the store, never your card. Website payments happen on Moyasar's hosted page; we keep the amount, status, email and invoice reference.
Measurement: we use Vercel Web Analytics for aggregate, cookieless visit statistics. We show no ads and sell no data.

Public figures in the registry

Who processes data with us

Transfers outside Saudi Arabia: our servers and database are in Australia (Sydney), and some processors operate outside Saudi Arabia. We limit transfers to the minimum needed to provide the service.

How long we keep data

Account data and saved profiles: until you delete your account.
Free-search counters: up to one year, then they expire automatically; the daily IP counter lasts 24 hours.
Payment and subscription records: kept for legal, tax and refund obligations (up to six years), even after account deletion, without a link to the deleted account.
Approved claims: kept as the ownership record of the profile; your account is detached from them when deleted.

Your rights and account deletion

You have the right to access, correct and delete your data and to withdraw consent, in line with Saudi Arabia's Personal Data Protection Law.

Delete your account at any time from account deletion on the website, or from “My account” in the app. If you cannot sign in, enter your email on the same page to receive a confirmation link.

Deleting your account does not cancel a subscription billed by the App Store or Google Play; cancel it in the store's subscription settings to stop billing.

Children

The service is not directed at children under 13, and we do not knowingly collect their data.

Changes to this policy

We publish changes here with the updated date above, and tell you in the app or by email if a change is material.

Who we are and how to reach us

For any request about your personal data, email privacy@iknuva.com; for reports, report@iknuva.com; for appeals, appeal@iknuva.com.

What we collect and why

Account: email, name and sign-in provider (Google, Apple or email). If you choose a password we store only its hash. Purpose: to create your account and secure sign-in.
Free-search allowance: a random device id (the ik_anon cookie in the browser, or an install id in the app) and your IP address, stored as keyed hashes (HMAC) to count the three free searches and prevent abuse. They are not linked to your identity.
Searches: we do not keep a search history linked to you. Public names with no result may be recorded without identity as discovery demand, after filtering sensitive-looking text; the name text alone may be sent to Wikidata and YouTube to find candidates.
Image search: the image fingerprint is computed in memory, compared with the registry and discarded; the uploaded image is not stored. Face matching on the website sends a numeric descriptor computed in your browser, which is not stored.
Saved profiles and alerts: the profiles you save and, in the app, a push token if you allow notifications, to alert you when a profile you follow changes.
Reports, claims and discovery requests: the links and text you send, and your email if you enter it. Claim photos are private to authorized reviewers; contact numbers stay private unless you explicitly consent to publish them. A discovery-request email is used for one message, then deleted.
Subscription and payments: when you subscribe through the App Store or Google Play we receive the transaction id, subscription status and expiry from the store, never your card. Website payments happen on Moyasar's hosted page; we keep the amount, status, email and invoice reference.
Measurement: we use Vercel Web Analytics for aggregate, cookieless visit statistics. We show no ads and sell no data.

Public figures in the registry

Who processes data with us

Transfers outside Saudi Arabia: our servers and database are in Australia (Sydney), and some processors operate outside Saudi Arabia. We limit transfers to the minimum needed to provide the service.

How long we keep data

Account data and saved profiles: until you delete your account.
Free-search counters: up to one year, then they expire automatically; the daily IP counter lasts 24 hours.
Payment and subscription records: kept for legal, tax and refund obligations (up to six years), even after account deletion, without a link to the deleted account.
Approved claims: kept as the ownership record of the profile; your account is detached from them when deleted.

Your rights and account deletion

You have the right to access, correct and delete your data and to withdraw consent, in line with Saudi Arabia's Personal Data Protection Law.

Delete your account at any time from account deletion on the website, or from “My account” in the app. If you cannot sign in, enter your email on the same page to receive a confirmation link.

Deleting your account does not cancel a subscription billed by the App Store or Google Play; cancel it in the store's subscription settings to stop billing.

Children

The service is not directed at children under 13, and we do not knowingly collect their data.

Changes to this policy

We publish changes here with the updated date above, and tell you in the app or by email if a change is material.