Privacy Policy

Last updated 2026-09-23. Knead is operated from Vancouver, British Columbia, and handles personal information under BC's Personal Information Protection Act (PIPA), Canada's PIPEDA, and Canada's anti-spam law (CASL).

The Short Version

You can use the map without giving us anything. If you create an account, we keep your email, the alerts you set up, and — only if you turn on text alerts — your mobile number; we use them for exactly one thing: telling you when an appointment matching your alert opens near you. We never sell personal information, and we never see your health information or your bookings.

What We Collect, and Why

Browsing the map (no account): nothing that identifies you. If you use "my location" or search an address, the coordinates are used to sort results in your browser and to geocode the address; they are not tied to you. When address suggestions are enabled, the address text you type is sent through Knead to Geoapify to return suggestions. Selected locations can be remembered in your browser for later searches. To learn where Knead is needed, we keep a summary of each search: the neighbourhood (the location rounded to about a kilometre), the type of care you picked from our list, the date and distance you chose, and how many results it found. That summary carries no name, account, IP address or anything you typed. Our servers keep ordinary access logs (IP address, time, page) for security and abuse prevention.
Creating an account: your email address (to sign you in — we email a one-time code, no password — and to send you the alerts you set up). A mobile number is asked for only if you turn on text alerts, when that option is available; it is never required to use Knead.
Alerts: the criteria you choose — a location and radius, a type of appointment, and a time window. We store these so we can match them against openings.
Saved practitioners and searches: if you tap the heart on a practitioner, we store who they are (their name, clinic and the type of appointment) so your list still shows them when they have no openings. If you save a search, we store the choices that search ran with — the treatment or concern you picked from our list, the location and distance, the date and time window, and any provider preference — so you can run it again. We do not store anything you type in free text about your symptoms. Saving is not subscribing: nothing is sent to you because you saved something. Notifications happen only if you separately set up an alert, and you can remove a saved item at any time.
Alert history: which openings we notified you about, so we never send you the same one twice and never message you more often than about once every two hours.
Anonymous product measurement: whether the sign-up prompt was shown, dismissed, or completed, keyed to a random identifier stored in your browser. It is not linked to your identity unless you create an account.

Consent and Messages (CASL)

By creating an account and setting up an alert you ask us to text and email you about matching appointments — that is the service. Separately, when you sign in or create an account, you can tick a box to also receive occasional Knead updates; that box is optional and unticked by default, and we record when you ticked it.

Every text we send identifies Knead and tells you how to stop. Reply STOP to any text to end all alerts immediately, pause or delete individual alerts under "my alerts", or email us and we will do it for you. Standard message and data rates from your carrier may apply.

Who Else Sees It

We use a small number of service providers to run Knead, each only for the purpose named:

Supabase (database and sign-in), hosted in the United States (US East). Your account data is stored there.
Resend (sending sign-in codes and alert emails) and, when text alerts are offered, Twilio (sending texts). They receive your email or number only to deliver the message.
Vultr (our web server, Seattle) and Grafana Cloud (operational logs and metrics).
PostHog (how the site is used), hosted in the United States. It records anonymous clicks and scrolling, and replays of a sample of visits so we can see where the site is confusing. It sets no cookies, is not linked to your account, and drops your IP address. Everything you type, and what you search for, is hidden from those replays before they leave your browser. It honours your browser's Do Not Track setting.

Because these providers are in the United States, your information may be accessed by authorities there under US law. We do not sell, rent, or share personal information with anyone else, and we do not use advertising trackers.

Clinics and Bookings

Knead shows openings that clinics already publish on their public booking pages. When you book, you do so on the clinic's own site; Knead is not part of that transaction and does not receive your booking details, health information, or payment information.

How Long We Keep It

Account data is kept while your account exists. Alert history is kept for operational purposes and pruned periodically. Server logs are kept for a short rolling window. Delete your account (email us) and we remove your profile, alerts, saved practitioners and searches, and alert history; backups age out within about 30 days.

Your Rights

You can ask to see, correct, or delete the personal information we hold about you, or withdraw consent, at any time: hello@knead.health. We answer within 30 days. If you are not satisfied you can contact the Office of the Information and Privacy Commissioner for BC.

Cookies and Browser Storage

We do not use tracking cookies. Your browser's local storage holds your sign-in session, whether you have seen the sign-up prompt, your last-used search location and in-progress search choices, and the anonymous measurement identifier described above. Your browser's session storage holds an anonymous PostHog session identifier, which is deleted when you close the tab. Search preferences stay in this browser and can be removed by clearing your site data.

Changes

If this policy changes in a way that matters, we will update the date above and, for account holders, tell you by email.