Privacy Policy

Last updated August 2026

Keeps lets people capture a shared occasion on one collaborative disposable film. This policy explains what information the app collects, how we use it, and the choices you have. We keep data collection to what the app needs to work and to improve — no advertising, and no selling your data.

Information We Collect

Account and sign-in

Keeps needs an account — to host a film or to join one. You can sign in with Apple, with Google, or with an email address and password. From Apple and Google we receive the name and email address you let them share; with Apple you may use Hide My Email, and we then only ever see the relay address. You also choose a display name, which is what other people in a film see.

Content you create

When you create or join a film we store the film’s details (such as its title, dates, and settings), your display name, and the photos you capture. Photos and your display name are visible to the other members of the same film — that sharing is the core purpose of the app. Photos you take may show other people; please only add photos the people in them are comfortable sharing with everyone in that film.

Purchases

Films for more than five people are paid. Apple processes the payment — we never see your card or billing details. We store the store transaction identifier and what it granted, so a purchase is applied exactly once.

Device and usage data

Like most apps, we automatically collect non-personally-identifiable information about your device and how you use the app: device type, operating system version, app version, approximate country or region, and in-app events such as which screens you view. See Analytics below.

Notifications

If you allow notifications, we use Firebase Cloud Messaging to store a device push token so we can send film-related updates (for example, when a film is ready to view). You can turn notifications off at any time in your device settings.

Analytics and Error Reporting

We use TelemetryDeck to understand general usage patterns and improve the app. TelemetryDeck is built to be anonymous: the app sends no account identifier, and each signal carries a one-way hashed value that cannot be traced back to you or to your device. It is operated in Germany under the GDPR.

We use Sentry to receive reports when something in the app fails, so we can fix it. A report contains the technical error, the app version, and where in the code it happened. It never carries your account identifier, your display name, film titles, or any photo. Sentry processes these reports on servers in the United States.

Neither collects your name, email, or the contents of your photos. We do not use advertising identifiers (no IDFA), do not track you across other apps or websites, and there is no Google or Firebase Analytics in the app.

Security and Abuse Prevention

We use Firebase App Check to verify that requests come from the genuine Keeps app and to protect the service from abuse. This attestation is about the app and device integrity, not about identifying you.

How We Use the Information

The information we collect is used solely to:

• Provide the core service — create films, join, capture photos, and share them with a film’s members.
• Send film-related notifications you have opted into.
• Monitor and improve app performance, features, and reliability.
• Understand engagement and usage trends in aggregate.
• Keep the service secure and prevent abuse.

How Information Is Shared

We do not sell your personal information or share it with advertisers. Information is shared only:

• With other members of a film — your display name and the photos you add are visible to people in that film, by design.
• With service providers who process data on our behalf — Google (Firebase Authentication, Firestore, Storage, Cloud Messaging, App Check, and Cloud Functions), TelemetryDeck (analytics), Sentry (error reporting), and Apple or Google when you choose their sign-in. Apple processes purchases.
• When required by law — if we must comply with a valid legal request or protect our rights and users.

Why We Are Allowed to Process It

In the EEA and UK we rely on these legal bases: performance of a contract for your account, your films, and your photos — the app cannot work without them; your consent for push notifications, which you can withdraw at any time in your device settings; and our legitimate interests in keeping the service secure and working, which covers App Check, error reporting, and anonymous usage analytics. We keep purchase records to comply with a legal obligation (accounting) and to prevent a purchase being redeemed twice.

Where Your Data Is Processed

Your account, films, and photos are held on Google’s Firebase infrastructure, and the server functions that write them run in the United States. Sentry processes error reports in the United States as well. TelemetryDeck processes usage analytics in Germany. Where data leaves the EEA or UK, the transfer relies on the European Commission’s Standard Contractual Clauses.

Data Retention

We keep a film’s photos for up to about one year after the film ends, after which they may be deleted. Each film records its own deletion date when it is created, so if we change this period later it applies to films created from then on — it never shortens the time we promised for a film you already have. If you delete your account first, we delete your profile, every film you host and all content in those films, every photo you added to films hosted by someone else, your device tokens, and any unfinished purchase drafts. We keep the record of a completed purchase — the store transaction identifier and what it granted — to meet accounting obligations and to stop the same purchase being redeemed twice; once your account is gone that record no longer identifies you. Anonymized analytics data is retained only as long as needed to support ongoing development and improvement.

Your Rights and Choices

• Delete your account — you can delete it yourself in the app, under Account. This permanently deletes every film you host and every photo you took, including photos you added to films hosted by other people, so it affects everyone in those films. It cannot be undone, and we do not keep a copy.
• Change your display name — in the app at any time.
• Notifications — control or revoke push notifications in your device settings; revoking withdraws your consent for them.
• Access and portability — you can ask us for a copy of your personal data, in a portable format. Email us and we will respond within one month.
• Correction, restriction, and objection — you can ask us to correct data that is wrong, to restrict how we use it, or to object to processing we base on our legitimate interests.
• Complain to a regulator — if you are in the EEA or UK you can lodge a complaint with your national data protection authority. We would appreciate the chance to address it first.

To exercise any of these, email robert.pinl.contact@gmail.com. There is no charge, and we will not treat you differently for asking.

Children’s Privacy

Keeps is not directed to children under 13 (or the minimum age of digital consent in your country), and we do not knowingly collect personal information from them. If you believe a child has provided us data, please contact us and we will remove it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. Updates will be posted within the app or on this website, with a revised “Last updated” date.

Contact Us

Keeps is responsible for the personal data described here (the “controller” under the GDPR). If you have any questions or concerns about this Privacy Policy, or want to exercise your rights, contact us at robert.pinl.contact@gmail.com.