Privacy Policy

Knead (kneadapp.co) provides order management, invoicing, and capacity planning tools for bakers, caterers, and food business operators. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

Account information: Your name, email address, business name, and (if you provide them) your business phone number, mailing address, and tax identification number (EIN) used on invoices and tax reports.

Order and business data: Orders, quotes, products, recipes, ingredients, invoices, payments, and capacity settings you enter into Knead. This is your data and you control it.

Your customers' information: Names, email addresses, phone numbers, delivery addresses, and order notes for the customers you serve, whether you type them in or they submit them through your order form. You are the owner of this information; Knead processes it on your behalf so you can fulfil and invoice those orders.

Messages and attachments: Emails and messages exchanged with your customers through the Knead inbox, including any files or photos attached to them, and any photos your customers upload with an order request.

Files you upload: Recipe photos, product and storefront images, supplier receipts, and generated documents such as quote and invoice PDFs.

Bookkeeping data: Expenses, mileage trips, and contractor/vendor records (including tax identification details) you enter for Schedule C and 1099 reporting.

Payment information: Payments are processed via Stripe. Knead does not store credit card numbers. We store payer email addresses and transaction amounts for your records.

Technical and security data: Your IP address and basic request details, used to rate-limit sign-in attempts and form submissions and to protect the service from abuse. If you use the mobile app, we store a device push token so we can send you notifications you have opted into.

Usage data: Page views and feature usage to help us improve the product, plus how you first heard about Knead (for example a referral link or campaign tag) if that information was present when you signed up.

Gmail data (if connected): If you connect your Gmail account, Knead accesses only messages from your known customers or messages containing order-related keywords. We do not read, store, or process your full inbox.

Several Knead features use artificial intelligence. These are powered by Anthropic (Claude). When you use one of them, the relevant content is sent to Anthropic for processing and the result is returned to your account:

• Snap & Create: the recipe photo you upload is sent so the ingredients, quantities, and steps can be read from it.
• Bulk Upload: the recipe text you paste is sent so it can be split into structured recipes.
• Receipt capture: the supplier receipt photo you upload is sent so the vendor, date, and amount can be read from it.
• Sous Chef: your messages to the assistant are sent, along with the order, inquiry, product, and capacity details it needs to answer you and take the actions you ask for.

These features run only when you choose to use them. Your content is sent for the sole purpose of returning that result to you. We do not use your data to train AI models, and our AI provider does not train its models on data submitted through Knead's API. AI output can be wrong, so review it before relying on it.

• Providing and operating the Knead service
• Processing payments and sending invoices on your behalf
• Sending transactional emails such as order confirmations, invoice notifications, and delivery reminders
• Improving and developing the product

We do not sell your data. We do not use your data for advertising.

Our marketing site (kneadapp.co) uses Vercel Analytics, which measures page views and traffic without cookies and without collecting personally identifiable information. Because it is cookieless, we do not show a cookie-consent banner.

We do not use advertising cookies or third-party tracking pixels. The Knead app uses only the strictly necessary cookies required to keep you signed in.

Knead's use of Gmail API data is limited to: reading messages from known customers or those containing order-related keywords, sending replies on your behalf, and marking messages as read.

We do not read, store, or share any Gmail messages outside this scope.

You can disconnect Gmail at any time from Settings → Integrations.

Knead's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We share data only with the service providers necessary to operate Knead:

• Supabase: database, authentication, and file storage (US-based)
• Vercel: web hosting
• Stripe: payment processing and subscription billing
• Resend: email delivery, and receiving email sent to your Knead inbox address
• Anthropic: the AI features described above
• Sentry: error monitoring; reports may include your account identifier and the page or action that failed
• Trigger.dev: running scheduled and background jobs such as reminders, invoice emails, and daily briefings
• RevenueCat: managing subscriptions purchased through the iOS app
• Apple: processing subscription purchases made in the iOS app, and delivering push notifications
• Google: only if you connect Gmail, as described above

We may also disclose information if required by law, or as part of a merger or acquisition, in which case we will tell you before your data moves.

We do not sell your data, and we do not share it with third parties for marketing purposes.

Your data is retained while your account is active. You can delete your account yourself at any time from Settings → Account in the app, or by emailing hello@kneadapp.co.

Deleting your account permanently removes your business record and everything scoped to it: orders, quotes, invoices, payments, clients and their contact details, conversations and attachments, products, recipes, ingredients, expenses and mileage, and every file you uploaded, along with your login. This is immediate and cannot be undone, so export anything you want to keep first.

Two things outlive the deletion: records we are required to keep for tax, accounting, or fraud-prevention purposes (primarily payment records held by Stripe, who is the payment processor of record), and routine backups, which age out on their normal schedule.

All data is encrypted in transit using TLS and at rest. Payment data is handled entirely by Stripe and never touches our servers.

You control your data. Wherever you live, you can exercise the following rights by emailing hello@kneadapp.co. We aim to respond within 30 days:

• Access: get a copy of the personal data we hold about you.
• Correction: fix data that is inaccurate or incomplete.
• Deletion: ask us to erase your account and its associated data.
• Portability / export: request an export of your business data in a machine-readable format (CSV or JSON).
• Objection & restriction: object to or restrict certain processing of your data.

EU / UK (GDPR). Our legal basis for processing is the performance of our contract with you and our legitimate interest in operating and improving Knead. You also have the right to lodge a complaint with your local data-protection authority.

California (CCPA / CPRA). We do not sell or share your personal information, and we will not discriminate against you for exercising your privacy rights.

If you have questions about this Privacy Policy, reach out to us at hello@kneadapp.co.