← Back to keepli.app

Privacy Policy

Last updated: July 8, 2026

Private by default. Keepli is local-first for core data, with optional encrypted backup, AI, and sharing features when you choose to use them.

1. Introduction

Welcome to Keepli. We operate the Keepli mobile application (the "App") and the website at keepli.app (the "Site"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App and Site.

By using Keepli, you agree to the practices described in this policy. If you do not agree, please discontinue use of the App.

2. Information We Collect

2.1 Information You Provide Directly

  • Onboarding data: Your first name, last name, and chosen focus areas provided during setup.
  • Vault content: Documents, subscriptions, passwords, receipts, and personal records you save in the App. Stored locally on your device by default.
  • Journal and notes: Text you write in program dashboards, the daily journal, or the planning hub.
  • Health and wellness data: Data you manually enter or import from Apple Health / Android Health Connect for programs such as sleep, fitness, or cycle tracking.
  • Family Hub data: Names, shared documents, and messages within your family group — stored server-side only when you use the Family Hub feature.
  • Financial data: When you link a bank account via Plaid, we receive a temporary access token. We never store your banking credentials.

2.2 Information Collected Automatically

  • Device identifier: A randomly generated device ID (not linked to your Apple ID or Google account) used to associate your data with your device for cloud features.
  • Push tokens: If you grant permission, an Expo push token is stored to deliver notifications.
  • Analytics events (anonymised): Anonymised in-app events such as screen views and feature taps. No personally identifiable information or vault content is attached.
  • Crash reports (anonymised): Diagnostic crash reports containing device model, OS version, and a stack trace — never your vault data.

2.3 Information From Third-Party Services

When you connect third-party services (Gmail, Google Drive, Plaid, Apple Health, etc.), we receive only the data necessary to provide the requested feature. See Section 5 for details.

3. How We Use Your Information

We use information we collect to:

  • Provide, operate, and improve the App and its features.
  • Personalise your experience based on your chosen focus areas and programs.
  • Send push notifications, including daily re-engagement reminders (only with your permission).
  • Sync data between your devices when you enable cloud features.
  • Process subscription payments through RevenueCat.
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations.
  • Generate aggregated, anonymised product analytics.

We do not sell your personal information to third parties. We do not use your vault content to train AI models.

4. Data Storage & Security

4.1 Local-First Architecture

By default, all vault data, journal entries, and personal records are stored exclusively on your device. This data does not leave your device unless you explicitly enable a cloud feature such as:

  • Encrypted Cloud Vault Backup
  • Family Hub
  • My Circle social features
  • Bank account linking via Plaid

4.2 Cloud Storage

When cloud features are active, your data is transmitted over HTTPS and stored in a PostgreSQL database with encryption at rest and in transit.

4.3 Encrypted Vault Backup

When you use Encrypted Cloud Vault Backup, your data is encrypted on your device using AES-256-GCM with PBKDF2 key derivation before transmission. Your passphrase is never sent to our servers — we cannot decrypt your backup.

4.4 Retention

Server-side data is retained while your account is active. You may delete all your data at any time via Settings → Danger Zone → Delete All Data. Anonymised analytics events may be retained for up to 24 months.

5. Third-Party Services

Keepli integrates with the following third-party services. Each has its own privacy policy governing its data practices:

5.1 AI providers (OpenAI & Anthropic)

We use OpenAI's and Anthropic's APIs to power the AI document scanner, program insights, and the Ask Keepli (Melo) assistant. When you use these features, the relevant content you submit is sent to the applicable provider to generate a response. These providers process it on our behalf and do not use it to train their models. OpenAI Privacy Policy · Anthropic Privacy Policy.

5.2 RevenueCat

Subscription management is handled by RevenueCat, which receives your device ID and purchase information. RevenueCat Privacy Policy.

5.3 Plaid

If you link a bank account, Plaid facilitates the secure connection. We receive only account metadata and transaction data — never your banking credentials. Plaid Privacy Policy.

5.4 Google (Gmail & Google Drive)

If you connect Gmail for subscription detection or Google Drive for imports, we receive read-only access limited to the data you authorise. We do not store this data beyond what you save to your vault. Google Privacy Policy.

5.5 Apple HealthKit / Android Health Connect

If you grant health data access, Keepli reads metrics (steps, heart rate, sleep, etc.) solely to display them in your program dashboards. We do not share HealthKit or Health Connect data with third parties or use it for advertising.

5.6 Sentry

Crash reports are sent to Sentry and do not contain vault content or personally identifiable information. Sentry Privacy Policy.

5.7 Expo Push Notifications

Push notification tokens are transmitted via Expo's push service to deliver notifications to your device. Expo Privacy Policy.

6. Analytics & Crash Reporting

Keepli collects a minimal set of anonymised diagnostics to keep the app reliable:

  • Usage analytics: Anonymised in-app events such as screen views and feature taps. No vault content, names, or personal identifiers are included.
  • Crash reporting: Unhandled exceptions send a diagnostic report to Sentry, including device model, OS version, and a code stack trace. No personal data is included.

Neither stream can identify you or read your vault. To stop all data collection entirely, you can delete your data at any time (see Section 8).

7. Cookies & Tracking Technologies

The Keepli mobile app does not use cookies. Our website (keepli.app) uses only essential, first-party cookies necessary for site operation. We do not use advertising cookies, cross-site tracking, or third-party analytics cookies. We do not display advertising and do not work with advertising networks that set cookies.

8. Your Rights & Choices

Depending on where you live, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Delete all on-device data via Settings → Danger Zone → Delete All Data. For server-side deletion, email [email protected] with subject "Data Deletion Request".
  • Opt-out of analytics: Disable the "Share Analytics" toggle in Settings.
  • Push notifications: Disable via your device's system settings or via Settings → Notifications.

Residents of the European Economic Area, UK, and California have additional rights under GDPR, UK GDPR, and the CCPA respectively. Contact us at [email protected] and we will respond within 30 days.

9. Children's Privacy

Keepli is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, contact us immediately at [email protected] and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated "Last updated" date. Your continued use of Keepli after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, requests, or complaints about this Privacy Policy, please contact us: