Last updated: June 2026
Privacy Policy
keeps.family is committed to protecting your privacy. This policy explains what data we collect, why we collect it, and what rights you have. If anything is unclear, email us at hello@keeps.family.
1. Who we are
keeps.family is a family memory app based in the United Kingdom. This policy is governed by UK GDPR and the Data Protection Act 2018.
2. What data we collect
Account data
Your email address, used to sign in via magic link. We never store a password.
Family and children data
The names of your children and invited family members, as you enter them.
Your keeps
- Text: quotes, milestones, journal entries
- Photos, audio recordings, and video recordings
- Dates (set by you, or extracted from photo metadata)
- Location names derived from GPS coordinates in photo metadata
- GPS coordinates (latitude and longitude) extracted from photo metadata, where present
Automatically generated data
AI-generated descriptions and tags applied to your keeps by our classification system (see section 4), and basic operational logs for reliability purposes.
3. Why we collect it
| Purpose | Legal basis |
|---|---|
| Providing the service | Performance of contract |
| Sending magic link sign-in emails | Performance of contract |
| Family sharing | Performance of contract |
| AI classification of keeps | Legitimate interests |
| Operational monitoring | Legitimate interests |
We do not use your data for advertising. We do not sell your data. We do not use your content to train AI models.
4. AI processing
keeps.family uses AI to classify and tag your memories to power smart search and cluster detection.
- Text keeps — sent to Anthropic (Claude Haiku) for classification and tagging
- Audio keeps — transcribed via OpenAI Whisper, then classified by Anthropic Claude Haiku
- Photo keeps — described and tagged using Anthropic Claude Haiku (vision)
We send only the minimum data required. Your content is not used to train any AI models.
5. Who we share data with
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and file storage | EU (AWS eu-west-1) |
| Vercel | App hosting | Global CDN |
| Anthropic | AI classification | USA |
| OpenAI | Audio transcription | USA |
We share no data with any other third parties, advertising networks, or analytics platforms.
Where data is transferred outside the UK (Anthropic and OpenAI, USA), we rely on standard contractual clauses or equivalent safeguards.
6. Children's data
Accounts must be held by adults (18+). The app captures memories about children — children do not have accounts or interact with the service directly. Data relating to children is used only to provide the service and is handled with particular care.
7. How long we keep your data
- Your keeps and account data — retained while your account is active
- Deleted keeps — permanently removed on deletion
- Account deletion — all keeps, media, family data, and account information are permanently deleted
- Operational logs — retained for up to 30 days, then deleted
8. Security
We protect your data with HTTPS encryption in transit, short-lived signed URLs for media access, magic link authentication (no passwords stored), and row-level security ensuring users can only access their own family's data.
9. Your rights
Under UK GDPR, you have the right to access, correct, export, and delete your data. Most actions are available directly in the app (Settings → Export, Settings → Delete account). To exercise any other right, email hello@keeps.family. We will respond within 30 days.
You can also complain to the Information Commissioner's Office (ICO).
10. Cookies
We use only essential cookies required for authentication. No advertising, tracking, or analytics cookies.
11. Changes
We may update this policy. Significant changes will be communicated by email. The date at the top of this page reflects the current version.
12. Contact
Email: hello@keeps.family. We aim to respond within 5 business days.