Last updated: August 2026
Privacy Policy
keeps.family is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and what rights you have. If anything is unclear, email us at hello@keeps.family.
1. Who we are
keeps.family is a family memory app based in the United Kingdom, available on the web and via our iOS app. This policy is governed by UK GDPR and the Data Protection Act 2018.
2. What data we collect
Account data
Your email address, used to sign in and for account and billing communication. If you joined our iOS waitlist before signing up, the email you gave there too. It is held separately, as explained in section 7.
Family and children data
The names and dates of birth of your children, and the email addresses of invited family members, as you enter them.
Your keeps
- Text: quotes, milestones, journal entries
- Photos, audio recordings (and their transcriptions), and video recordings
- Dates (set by you, or extracted from photo metadata)
- Location names derived from GPS coordinates in photo metadata
- GPS coordinates (latitude and longitude) extracted from photo metadata, where present
Automatically generated data
AI-generated descriptions and tags applied to your keeps (see section 4); product usage events and error diagnostics that help us run and improve the service; and security-check signals such as your IP address and browser or device characteristics when you sign in (see section 5).
Billing data
If you subscribe on the web, Stripe processes your payment directly. If you subscribe in the iOS app, Apple processes the payment and RevenueCat helps us keep your subscription access in sync. We never see or store your full card number. We hold your subscription status, plan, product identifier, renewal or expiry date, and the identifiers needed to match the purchase to your family.
3. Why we collect it
| Purpose | Legal basis |
|---|---|
| Providing the service | Performance of contract |
| Account sign-in and communication | Performance of contract |
| Family sharing | Performance of contract |
| AI classification of keeps | Legitimate interests |
| Billing | Performance of contract |
| Product analytics | Legitimate interests |
| Operational monitoring | Legitimate interests |
| Preventing automated sign-in abuse | Legitimate interests |
We do not use your data for advertising. We do not sell your data. We do not use your content to train AI models.
4. AI processing
keeps.family uses AI to classify and tag your memories to power smart search and cluster detection.
- Text keeps. Sent to Anthropic (Claude Haiku) for classification and tagging.
- Audio keeps. Transcribed via OpenAI's API, then classified by Anthropic Claude Haiku.
- Photo keeps. Described and tagged using Anthropic Claude Haiku vision.
We use Anthropic's and OpenAI's business APIs, not their consumer products. Neither company uses API inputs or outputs to train its models by default. Standard API data may be retained for up to 30 days for safety and abuse monitoring, with limited exceptions described in each provider's policy.
We do not use voice recordings for voice recognition or to identify who is speaking. We store and transcribe audio so you can search and read what was said.
5. Who we share data with
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database (accounts, keeps metadata, family data) | EU (AWS eu-west-1) |
| DigitalOcean Spaces | Media file storage (photos, audio, video) | EU/UK (London) |
| Vercel | App hosting | Global CDN |
| Anthropic | AI classification (API tier) | USA |
| OpenAI | Audio transcription (API tier) | USA |
| Apple | iOS payment processing | Global |
| RevenueCat | iOS subscription status and entitlement management | USA |
| Stripe | Web payment processing | Global, PCI DSS compliant |
| Brevo | Transactional and account emails | EU |
| EmailOctopus | Waitlist and welcome-list email | Provider infrastructure |
| PostHog | Product usage analytics | EU (Frankfurt) |
| Sentry | Error and crash diagnostics | EU (Frankfurt) |
| Cloudflare Turnstile | Automated sign-in abuse prevention | Global network |
We share no data with advertising networks. None of the above use your data for their own advertising or to train AI models on our customers' content.
Where personal data is transferred outside the UK, we rely on applicable UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. Children's information
Accounts must be held by adults (18+). Children do not have their own accounts and do not interact with the service directly. The moments recorded are theirs, so we hold ourselves to a higher standard for this data specifically:
- Only invited family members can access or add to your family space. A family member can deliberately create an unlisted link to share a set outside that space. Anyone with the link can view the set until it is made private again.
- Your children's data is never used for advertising, profiling, or anything beyond providing the service to your family.
- If the family owner deletes their account, the children's data and the rest of the family archive are deleted. If an invited family member deletes their account, the family archive remains.
- Nothing in keeps is designed to be used by children themselves, and we do not market to children.
7. How long we keep your data
- Your keeps and account data. Retained while your account is active. Existing keeps remain available to view and export if a trial or paid subscription ends.
- Deleted keeps. Kept in Recently Deleted for up to 30 days so you can restore them, then permanently removed.
- Account deletion. If the family owner deletes their account, the family archive, keeps, media, children, family records and owner account are permanently deleted from keeps. If an invited family member deletes their account, their membership and account are deleted while the family archive remains. We also request deletion of that person's PostHog profile and EmailOctopus entry. Provider-side deletion may complete asynchronously. A media link shared just before deletion remains valid only until it naturally expires, for at most one hour.
- Waitlist. Held separately from any account until you unsubscribe or ask us to remove it.
- Operational logs. Retained for up to 30 days, then deleted.
8. Security
We protect your data with HTTPS encryption in transit, short-lived signed URLs for media access and row-level security. Every table a signed-in family member can reach is scoped to their own family and was checked as part of our pre-launch security review.
9. Your rights
Under UK GDPR, you have the right to access, correct, export, and delete your data. Most actions are available directly in the app (Settings → Export, Settings → Delete account). To exercise any other right, email hello@keeps.family. We will respond within 30 days.
You can also complain to the Information Commissioner's Office (ICO).
10. Cookies and tracking
We use only essential cookies and similar storage required for signing in, keeping you signed in, and protecting sign-in from automated abuse. We do not use advertising or cross-site tracking cookies.
We use PostHog to understand how the product is used, but it is configured to store nothing persistently in your browser. It uses memory only, with no cookie and no cross-visit identifier. Nothing from PostHog is shared with advertisers or used to track you elsewhere.
11. Changes
We may update this policy. Significant changes will be communicated by email. The date at the top of this page reflects the current version.
12. Contact
Email: hello@keeps.family. We aim to respond within 5 business days.