Privacy Policy

kleiner KNIFF with supplementary privacy notice for shanQ · Last updated: September 8, 2026 · Version 1.1

1 Controller

The party responsible for the processing of personal data is:

kleiner KNIFF, sole proprietorship

Bergackerstrasse 56

8406 Winterthur

Switzerland

info@kleinerkniff.ch

This policy applies to the websites, apps, and digital offerings of kleiner KNIFF. Product-specific privacy notices supplement this policy.

2 Principles

kleiner KNIFF processes personal data lawfully, in good faith, proportionately, and for specific purposes. We only process data that is necessary for the respective purpose. Data protection is ensured through appropriate technical and organizational measures as well as privacy-friendly default settings.

3 Categories of personal data

Depending on how you use our services, the following data may be processed:

  • account and contact details such as name and email address;
  • contract, membership, payment, and transaction details;
  • technical data such as timestamps, IP address, device, browser, session, and security information;
  • usage, support, and communication data;
  • voluntarily provided content and product-specific data in accordance with the supplementary privacy notice;
  • Consents, acknowledgments, withdrawals, and the respective document version involved.

Payment card data is processed by Stripe. kleiner KNIFF only stores the information necessary for contract status, billing, support, and record-keeping, specifically Stripe customer and subscription references, the selected membership, amount, currency, payment and invoice status, and transaction timestamps.

4 Purposes of processing

Personal data is processed in particular to:

  • to set up and protect accounts;
  • to conclude contracts and provide services;
  • to process payments, trial periods, renewals, cancellations, and refunds;
  • to personalize features, where provided for and permitted;
  • to process support requests and communications;
  • to ensure security, error analysis, fraud prevention, and reliable operation;
  • to fulfill legal obligations and to establish, exercise, or defend legal claims;
  • to document consents and legal text versions in a traceable manner.

5 Legal basis for processing

Depending on the purpose, processing is carried out in particular to initiate and fulfill a contract, based on legal obligations, overriding legitimate interests in a secure and functional service, or based on consent. Consent may be withdrawn with effect for the future. Processing that has already been carried out lawfully and legal retention obligations remain unaffected.

6 Recipients and data processors

kleiner KNIFF may engage specialized service providers, particularly for hosting and delivery, backend and database management, email distribution, payment processing, AI processing, error analysis, and support. These providers receive only the data necessary for their tasks and are appropriately integrated through contractual and organizational measures.

Personal data is not sold. Furthermore, disclosure only occurs with consent, due to legal obligations, to protect legitimate interests, or in connection with a corporate transaction under appropriate protective measures.

7 Processing abroad

Service providers may process personal data in Switzerland, the European Economic Area, the USA, or other designated locations. If the recipient country does not have a level of data protection recognized as adequate by the Swiss Federal Council, kleiner KNIFF bases the transfer on appropriate safeguards, in particular recognized standard data protection clauses, or on a legal exception. Where required by law, additional protective measures are implemented.

The respective product-specific privacy notice specifies the categories of service providers and processing activities essential to that product.

8 Retention period

Personal data is stored for as long as is necessary for the respective purpose, contract fulfillment, security, record-keeping, or legal retention requirements. Thereafter, it is deleted or anonymized, provided there is no legal obligation or overriding reason for further retention.

Contract and booking documents may be stored for longer periods in accordance with statutory retention obligations. Security logs are limited to a period appropriate for protection and troubleshooting. Product-specific data can be deleted or archived by the user, provided the respective function allows for it and no legal obligation prevents it.

9 Security

kleiner KNIFF implements appropriate technical and organizational measures to protect against unauthorized access, loss, misuse, and alteration. These include access restrictions, encrypted transmission, secure authentication, data separation, logging of security-relevant events, and controlled access for service providers. No system can guarantee absolute security.

10 Cookies and local storage

Websites and apps may use technically necessary cookies or similar storage mechanisms, particularly for login, security, language settings, and user-requested functions. Non-essential analytics or marketing technologies are only used in accordance with applicable requirements and, where necessary, are subject to prior selection.

11 Rights of data subjects

Under applicable law, data subjects may request access, rectification, data portability, erasure, restriction of processing, or object to processing. Consents granted may be withdrawn for the future.

Inquiries should be sent to info@kleinerkniff.ch. To prevent unauthorized disclosure, we may require appropriate proof of identity. If you have any concerns, you may also contact the Federal Data Protection and Information Commissioner.

12 Minors

For offerings aimed at minors, we prioritize clarity, data minimization, and the ability to make independent decisions. Where consent or the involvement of a legal guardian is required, it is obtained on a function-specific basis. Payment or legal representation does not automatically grant access to personal content.

13 Changes

This privacy policy may be updated if data processing, services, or legal requirements change. The current version is published on the kleiner KNIFF product websites. Significant changes will be communicated in an appropriate manner. Previous versions remain available for documentation purposes.

14 Contact

Privacy inquiries: info@kleinerkniff.ch

Supplementary privacy notice for shanQ

1 Scope and controller

This notice supplements the kleiner KNIFF privacy policy for shanQ. The data controller is kleiner KNIFF, sole proprietorship, Bergackerstrasse 56, 8406 Winterthur, Switzerland, info@kleinerkniff.ch.

2 shanQ data categories

In addition to general account, contract, and technical data, shanQ may process the following data in particular:

  • Profile, selected perspective, and membership role;
  • Group memberships, invitations, and explicitly granted permissions;
  • Dialogue inputs, responses, session history, and voluntarily uploaded sources;
  • personal notes as well as consciously confirmed personal context notes and their revocation status;
  • selected topics, saved content, programs, and program progress;
  • Audio usage and personal routine or tempo settings;
  • Golf bag, club distances, dispersion values, course selection, tee-off, planned shots, and saved round preparations;
  • Feedback, support information, as well as security and error data.

3 Purposes

This data is used to provide personal access, display content and programs, conduct dialogues, save and search personal notes, summarize or discuss them with AI support upon request, include desired context information, play audio routines, create round preparations, store data across devices, and enable support and secure operation.

Golf and performance data are not evaluated as medical data. Free-text fields may nevertheless contain highly personal information. Users should only provide information that is necessary for the intended purpose.

4 AI processing

For certain dialogue, analysis, and preparation functions, shanQ may transmit content to an external AI service. The inputs, instructions, and any consciously shared context information required for the specific request are transmitted. The output is then provided within shanQ.

When a user utilizes the "Talk to shanQ about your notes" feature, all personal notes stored in the account at that time, the current question, and the history of that note conversation required for the response are transmitted to Google Gemini via Google Cloud Vertex AI. Processing is used to generate the requested response within shanQ. Companions and other users do not gain access to the notes as a result.

kleiner KNIFF does not use personal shanQ content for its own general AI training purposes. AI processing is carried out via Google Cloud Vertex AI with a processing region configured for shanQ within the EU. Google is engaged as a service provider under the cloud contract in place. The safeguards of the general privacy policy apply additionally to processing and any potential transfers.

5 Personal context

A lasting personal context is built only from explicitly confirmed information. Where provided for, consent for future context usage can be revoked in the profile. Revocation stops usage for new context notes; events required by law or for evidentiary purposes may remain stored.

Dialogue content is not made visible to other individuals solely based on membership, payment, or a companion role. Sharing must be explicitly provided for within the specific function.

6 Program audios and My Path

shanQ saves selected topics, program progress, saved content, personal notes, and personal audio routines so that you can pick up where you left off and see relevant content. Personal notes are visible only to the account holder and are not made accessible to other individuals solely based on a companion, group, payment, or contractual role. A local device setting may be used if it serves only for immediate playback. Account-linked data is stored in the backend to ensure it is available across multiple devices.

7 Golf and round preparation

For round preparation, personal club distances, dispersion, tee selection, and planned shot sequences can be processed. Sharable golf course geometries can originate from or be derived from shanQ as well as OpenStreetMap and swisstopo.

When querying external map and elevation services, technically necessary connection data such as IP address, time, and request parameters may be transmitted to the respective service. Personal golf bag or dialog data should not be transmitted to open map services unless required for the requested map function.

8 Categories of Service Providers Used

The following categories are used specifically for shanQ:

  • Vercel or a comparable service for hosting and delivering the web application;
  • Xano or a comparable backend and database service;
  • Google Gemini or a comparable contractually integrated AI service;
  • Resend or a comparable service for transactional emails;
  • Stripe for checkout, payment processing, recurring payments, invoice status, fraud prevention, and payment method management;
  • OpenStreetMap services and swisstopo for map, course, and elevation data.

Stripe services for Swiss business customers are provided primarily by Stripe group companies in Ireland and the United Kingdom. Depending on the service, Stripe may act as a data processor or as a controller for its own legally or operationally determined purposes. Stripe and other providers may process data outside of Switzerland. The safeguards of the general privacy policy apply. The AI service used for shanQ and the configured processing region are specified in Section 4 of this supplementary privacy notice.

9 Retention and Deletion

Active account, membership, and program data are generally stored during use. Dialogs, personal notes, personal context notes, golf preparations, and saved content can be deleted, closed, or archived according to the available account functions. Deleted personal notes will no longer be used for future AI conversations; they may remain in protected backups for a limited backup or recovery period.

Following account deletion, personal usage data is deleted or anonymized, provided there are no legal obligations, billing issues, security records, or third-party rights to the contrary. Contractual, consent, and booking records are only retained to the extent necessary.

10 Data Export and Account Deletion

shanQ provides an export of account-related data. Account deletion may be delayed if active contract, membership, group, relationship, or billing links need to be resolved first. This is intended to prevent the unintentional deletion of other people's rights or required contractual records.

11 Contact and Rights

The provisions of the general privacy policy apply to requests for information, correction, deletion, data portability, objection, or withdrawal. Inquiries can be sent to info@kleinerkniff.ch.

‍