Privacy

Your account email address, the account identifier Knute generates for you, and the verification request, cooldown and verified state used to confirm account ownership. Verification codes and high-entropy link tokens are security records, not marketing identifiers.

Your ESPN session credential. Connecting a league stores the two cookies ESPN issues to your browser, SWID and espn_s2. They are what let Knute read your league and make moves on your team, because ESPN has no public API and no OAuth for fantasy. They are encrypted at rest, they are never shown back to you, and they are never included in a prompt to an AI model.

Your league and roster data, synced from ESPN: your team, your players, the free-agent pool, matchups, scoring settings, transactions and the moves Knute makes for you.

Your chat transcripts. Everything you ask the agent and everything it answers, so the conversation has a history and so the agent can explain a decision it made days ago.

Photo attachments you send in chat, for as long as the conversation they belong to exists.

Your Apple push notification token, if you turn notifications on, so the app can tell you what the agent did.

Your App Store purchase history for Knute: product and transaction identifiers, signed offer details, account ownership token, fulfillment state, subscription periods and access status, refunds, revocations and reconciliation. Knute does not receive your card or bank details.

Account activity, model-usage records and your background spending choices, used to show history and balance, enforce applicable spending controls, prevent duplicate fulfillment and operate requested features.

For proactive monitoring, relevant public player news, your connected team's roster and permissions, and the resulting reasoning, proposed or submitted actions, verification and notification status. These records let Knute explain what it did and recover from interrupted work.

Your account-level third-party AI permission or withdrawal decision.

If you joined the email list on this website: that email address, which page you submitted it from, a hashed version of your IP address used to rate-limit spam, and any campaign parameters on the link you arrived by.

On this website only: anonymous usage data through Vercel Web Analytics. That means which pages were loaded, a coarse referrer and device or browser class, when, and whether the waitlist form completed (source page and duplicate-or-new only - never the email address). It is not tied to your account or waitlist email, and it is not an advertising pixel.

To run your team. The ESPN session, the roster sync and the league settings exist so the agent can set a lineup, place a waiver claim, and act inside the limits you set.

To answer you. Chat transcripts and attachments exist so the agent has context and so you can go back and read why it did something.

To tell you what happened. The push token exists to send you the notification about a move.

To fulfill App Store credit packs exactly once, keep an account balance and subscription access across devices, reconcile transactions and process renewals, refunds or revocations.

To enforce your third-party AI choice and stop future cloud-model requests after withdrawal. Proactive reasoning uses the same consent and may send relevant player news and team context to your selected cloud model while the app is closed.

To verify account ownership and reach you about account security. If you separately joined the website email list, that address is also used for product updates.

To see whether these web pages are being read. Website page views go to Vercel Web Analytics so the operator can tell if the site has traffic. None of it is sold. None of it is shared with advertisers. There is no advertising on this site or in the app.

Knute asks for explicit account-level permission before any of your content can be sent to a third-party cloud model. If you allow it, league context, roster data, chat content, uploaded rankings and photo attachments needed for your request are sent through OpenRouter to the model that handles it. The routable model operators are xAI (Grok), Moonshot AI (Kimi), Anthropic (Claude), OpenAI (Sol), and Alibaba (Qwen). Those providers process that content only to produce the requested answer or recommendation.

Your ESPN credentials are never part of that. SWID and espn_s2 are held server-side for talking to ESPN and are excluded from every prompt.

You can withdraw permission at any time in the app under Settings, AI & Data. Withdrawal stops future third-party cloud-model calls without requiring account deletion or ESPN disconnection. Supported on-device Apple Intelligence can remain available.

If the set of providers changes, this section changes with it.

Disconnect ESPN, in the app, revokes the stored session credential for that connection. Knute can no longer read your league or act on your team from that point.

AI & Data, in the app, lets you withdraw third-party AI permission independently. You do not need to disconnect ESPN or delete your account to stop future cloud-model processing.

Delete account, in the app, deletes your active account and the data attached to it: ESPN credentials, synced league and roster data, chat transcripts, attachments and push-token bindings. It is not a deactivation. Records that must be retained for fraud, tax, refund and financial-ledger integrity are minimized and de-identified so they no longer operate as a customer profile or spendable balance.

If you would rather have it done for you, or you want the website email-list entry removed too, email david@knute.ai and it will be done, without asking why.

Account, league and chat data are kept while your account exists, and are deleted when you delete it. Backups roll off on their own schedule shortly after.

Purchase and credit-ledger records are kept as needed to fulfill purchases, prevent duplicate credit, reconcile App Store events, handle refunds and revocations, and meet legal accounting obligations. After account deletion, only the minimized, de-identified financial audit record is preserved.

Email-list addresses are kept while the list is useful, and removed on request.

ESPN session credentials are encrypted at rest. Access to your data is scoped per account at the database level, so one account cannot read another. App Store sandbox transactions and value are separated from the production financial ledger, and signed transactions are verified before credit is added.

Knute is not directed at children under 13 and does not knowingly collect their data.

Anything at all, including a request to see or delete what is held about you: david@knute.ai. It reaches a person directly.