Privacy, in plain language.

On-device by default

Your archive begins on your device. Memory text, photos, voice notes, dates, places, moods, app preferences, and related metadata are stored locally unless you choose an online feature. Data on your device may also be included in Apple device backups depending on your iCloud and device settings.

Permissions are used only for features you choose

Photo Library and Camera access let you select or take a photo for a memory. Microphone access lets you record a voice note. Notification access lets Keepsake schedule the reminder time you choose. You can deny or revoke any permission in iOS Settings; the related feature may then be unavailable.

Accounts and optional backup

If you create an account, Keepsake processes the sign-in information supplied by Apple or the email address you provide, an account identifier, and authentication records. If you enable account backup, archive records and selected media are copied to Supabase so they can be restored or synchronized for that account.

Online copies are encrypted in transit and at rest by the service infrastructure. They are not end-to-end encrypted, which means authorized service systems can process them when necessary to provide, secure, troubleshoot, or delete the service.

Support requests

When you submit the support form, Keepsake processes your selected request category, email address, message, and any optional device or app-version details you provide. The request is sent through Supabase and used to answer, secure, and troubleshoot the request. Please do not include memory content or authentication secrets.

To limit automated abuse, the support service uses one-way keyed hashes derived from the request’s source IP address and submitted email for hourly rate limits. The support request record stores the source hash, not the raw source IP address.

This public website

These pages do not use advertising or analytics trackers. They load typefaces from Google Fonts, so Google receives ordinary connection information such as your IP address, browser details, and the requested font files under Google’s privacy policy. The support form sends only the fields you submit to Supabase.

Purchases

Apple processes App Store billing and payment information. RevenueCat helps Keepsake verify products, purchases, restorations, and Plus access. Keepsake may receive an app user identifier, product and transaction details, entitlement status, and limited device or platform information; it does not receive your full payment-card details.

How information is used

Information is used to run the archive, authenticate accounts, provide optional backup, restore purchases, prevent abuse, keep the service reliable, respond to support requests, and comply with legal obligations. Keepsake does not use memory content for advertising or train generative-AI models on it.

No data sale or targeted advertising

Keepsake does not sell personal information, serve targeted ads, or track your activity across other companies’ apps and websites for advertising. Information is disclosed only to service providers acting on Keepsake’s behalf, to Apple for App Store functions, when you direct a disclosure, or when legally required.

You can take everything with you

You can create and share a JSON index of your local memory records from Settings. The index may contain local file references, but it does not bundle the photo or voice-note files themselves. An exported file leaves Keepsake’s control, so protect it using the destination and sharing method you choose.

Retention and deletion

Local archive data remains until you delete memories, erase the app’s data, or remove the app from the device. Account and optional backup data remain while the account is active. Support requests are kept while they are open and afterward only as reasonably needed for support history, security, dispute handling, and legal obligations. Expired hourly rate-limit records are cleaned up during later service checks.

When you delete an account, Keepsake removes the account and associated active backup data; limited records may remain temporarily in security logs, fraud-prevention records, or infrastructure backups where required for safety, legal compliance, or disaster recovery.

Deleting an online account does not automatically remove local copies or exports on your devices, Apple-managed purchase history, or files you shared elsewhere. See Delete your account for the current steps.

Security and international processing

Keepsake uses access controls and encrypted network connections designed to protect online data. No system is perfectly secure. Supabase and RevenueCat may process information in countries other than your own under their security and contractual safeguards.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to processing of personal information, or to appeal a privacy decision. Use the in-app controls where available or contact us. We may need to verify your request, and mandatory exceptions may apply.

Children

Keepsake is not intended for a child to create an online account without the consent required where they live. If you believe a child provided account information without appropriate permission, contact us so we can review and delete it.

Changes and contact

This policy may change as Keepsake’s features or legal obligations change. The effective date above will be updated, and material changes will be communicated where required. For privacy questions or requests, use the verified channel on the Contact page.