Privacy Policy

1. Information we collect

Account information. When you create an account we collect your name, email address, authentication provider (email/password, Google, or Apple), and — for Apple Sign In — the private relay email if you choose to hide your address.

Family and profile data. Keeps organizes memories into a shared family account with one or more profiles (for example, a child or loved one). We store the family name, profile names, roles you assign to collaborators, and the email addresses of people you invite.

Memories you upload. This includes text notes, quotes, milestones, tags, dates you record, photos, and videos you attach to a memory.

Voice dictation (talk-to-text). When you use talk-to-text, your device records audio only while you are actively dictating. The recording is sent over an encrypted connection to our transcription provider (OpenAI, via the Lovable AI Gateway) purely to convert speech to text. Keeps never writes the audio to our database, our photo storage, or any file on our servers — it is held in memory only long enough to forward it for transcription, and OpenAI does not retain API audio after the request completes. Only the returned text is saved, as the body of your memory.

Permissions we ask for on mobile. On iOS and Android we request access to the Camera and Photo Library when you attach a photo, and the Microphone when you tap the dictate button. Each permission is only used for that feature, and you can change it at any time in your device settings.

Subscription information. If you subscribe to Premium, our payment processor (Stripe) collects your billing details. Keeps stores your subscription status, plan, and renewal dates — we never receive or store your full card number.

Device and usage data. We collect limited technical data such as device type, operating system, app version, and behavioral analytics events (for example, "memory created" or "invite sent") to understand product usage and improve reliability. Analytics events do not include the content of your memories, photos, videos, profile names, or child names.

2. How we use your information

We use your information to provide and maintain Keeps, sync your memories across your devices, deliver invitations, process subscription payments, respond to support requests, protect against fraud and abuse, and improve the product. We do not sell your personal information or the content of your memories, and we do not use your memories to train third-party AI models.

3. Family accounts and sharing

Keeps is designed around a shared family journal. When you invite someone with full access, they can view, add, edit, and delete every profile and memory in your family. When you invite someone with limited access to specific profiles, they can only see and contribute to those profiles.

Admins can share individual memories publicly using a share link. Anyone with the link can view that specific memory until an admin revokes sharing from within the app. Nothing else is public by default.

Please be thoughtful about who you invite and what you choose to share publicly.

4. Photos, videos, and uploaded memories

Photos, videos, and other uploads are stored in our managed backend (Lovable Cloud, powered by Supabase) with row-level security so that only members of your family — with the access level you've granted them — can view them. Uploads are transmitted over HTTPS and stored encrypted at rest by our hosting provider. Public share links are only generated when an admin explicitly shares a memory.

5. Subscriptions and payments

Premium subscriptions are processed by Stripe. Stripe collects and stores your payment method under its own privacy policy. Keeps receives only the information needed to activate your plan — status, plan tier, and renewal date. See Stripe's Privacy Policy for details.

6. Analytics

We use privacy-first product analytics to understand how features are used and to prioritize improvements. Analytics events describe behavior (for example, sign-up method, whether a memory included a photo, or whether an invite was accepted) and never include the content of notes, photos, videos, transcripts, profile names, child names, birthdates, or email addresses.

7. Service providers

We rely on a small number of trusted providers to operate Keeps: Lovable Cloud (hosting, database, storage, authentication); Stripe (payments); Resend (transactional email such as invitations and password resets); OpenAI (speech-to-text for the dictate feature); and Google and Apple (sign-in providers you choose to use). These providers are contractually required to protect your information and use it only to deliver their services to Keeps.

8. Data retention, export, and deletion

Your memories are stored for as long as your account is active. When you delete a memory from Keeps it moves to Recently Deleted for 30 days, then is permanently removed.

You can export the contents of any profile at any time from Settings → Export (JSON, CSV, or plain text). Before deleting your account, we recommend exporting any memories you want to keep.

You can permanently delete your account from Settings → Delete account. Deleting your account removes your profile, memories, uploaded photos and videos, invitations, and subscription records from our systems. Some information may be retained in backups for a limited period and where required by law.

9. Security

We take reasonable measures to protect your information: HTTPS in transit, encryption at rest through our hosting provider, row-level security policies that scope every read and write to your family, and least-privilege access for administrative operations. No online service can guarantee complete security. Please keep your account credentials safe and contact us immediately if you suspect unauthorized access.

10. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal information, or to object to certain uses. You can update most of your information directly in the app, export your data from Settings → Export, and delete your account from Settings → Delete account. For any other request, contact us at hello@thiskeeps.com.

11. Children's privacy

Keeps is designed to be used by adults recording memories about their family, which often includes children. Accounts must be created by someone who is at least 13 years old, and we do not knowingly allow children under 13 to create accounts. If you believe a child has created an account without the required consent, please contact us and we will remove it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page and notify you through the app or by email where appropriate.

13. Contact us

If you have questions or concerns about this Privacy Policy or our data practices, please reach out to us at hello@thiskeeps.com.