Privacy Policy

Kept is built on a simple principle: your memories belong to you. We collect only what's necessary to make the app work, we never sell your data, and we give you full control over everything you share.

What We Collect

We collect only what's necessary to make Kept work for you:

• Account information — email address and display name when you create an account
• Photos you upload — stored securely in the cloud so they sync across your devices
• Photo metadata — dates, which we use to calculate your age in each photo
• Milestones and comments — text content you add to timelines
• Birthday — used to organize your timeline by age

We do not collect location data, contacts, browsing history, or any data beyond what you explicitly provide.

How We Store Your Data

Your photos and data are stored using Firebase Cloud Storage and Firestore, operated by Google. Data is encrypted in transit and at rest. Photos are stored at the quality you upload them — we never compress or degrade your images.

Face ID

If you enable Face ID lock, authentication happens entirely on your device. No biometric data is ever sent to our servers or stored in the cloud. We use Apple's LocalAuthentication framework, which keeps all Face ID data in the device's Secure Enclave.

Apple Sign-In

When you sign in with Apple, we receive only the information Apple provides: your name and email address (or a private relay address if you choose to hide your email). We do not receive your Apple ID password or any other Apple account information.

Third-Party Services

We use the following services to operate Kept:

• Firebase (Google) — authentication, database, file storage
• Apple Sign-In — optional authentication

We do not use analytics tracking, advertising SDKs, or any third-party services that profile our users.

Memorial Timelines

Memorial timelines may be shared via a public web link. When you create a memorial, you control its visibility. Visitors who contribute photos or stories provide their name and email, which is visible only to the memorial creator. All contributions require approval before appearing on the timeline.

Collaboration

When you invite someone to collaborate on a timeline (such as a child's or pet's), they gain the ability to add photos and milestones. You can remove collaborators at any time. Collaborators can only access the specific timeline they were invited to.

Data Retention & Deletion

Your data is retained as long as your account is active. You can delete individual photos, timelines, or your entire account at any time from within the app. When you delete your account, all associated data — including photos, milestones, comments, and profile information — is permanently removed from our servers within 30 days.

Children's Privacy

Kept is not directed at children under 13. If you create a timeline for your child, you are responsible for the content you upload. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us.

Your Rights

You have the right to:

• Access all data associated with your account
• Export your photos and data
• Delete your account and all associated data
• Withdraw consent for data processing at any time

Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated through the app. Continued use of Kept after changes constitutes acceptance of the updated policy.

Contact Us

Questions about privacy? Reach us at privacy@thekept.app