Privacy Policy

Keepsake ("we," "our," or "us") is built and operated by Mason Brown and Juliana Perez. This Privacy Policy explains how we collect, use, share, and protect your information when you use the Keepsake mobile application. Keepsake is a couples-focused app designed to help you and your partner document, visualize, and celebrate the experiences you share together.

By creating an account or using Keepsake, you agree to the practices described in this policy. If you do not agree, please do not use the app.

1. Information We Collect

We collect the minimum data necessary to deliver the Keepsake experience. The information falls into three categories.

Information You Provide

• Account information: When you sign in with Google or Apple, we receive your name and email address from your chosen provider. We do not access or store your third-party passwords.
• Profile photo: You may upload a profile picture, which is stored securely in Firebase Storage.
• Relationship data: Your relationship start date, an optional partner nickname (visible only to you), and the invite code used to connect with your partner.
• Date spots: Location details (name, address, city, country, and geographic coordinates), visited date, tags, categories, ratings, notes, a spot nickname, and whether a spot is marked as a favorite or a bucket-list item.
• Photos: Images you upload to date spots or as profile pictures. When you add a spot from a photo, we may read EXIF metadata (GPS coordinates and date taken) from the image to pre-fill location and date fields. This metadata is processed on-device and is not uploaded unless you save the spot.
• Camera roll access: With your explicit permission, we access your photo library to let you attach photos to date spots and, if enabled in a future version, suggest date spots from recent photo metadata. Photo content is analyzed on-device; only locations and images you explicitly approve are uploaded to your account. You can revoke this permission at any time in your iOS Settings.
• Notification preferences: Your push notification settings for date spot activity, badge alerts, weekend planning prompts, and feedback prompts.
• Anonymous feedback: If you choose to submit feedback through the App, we collect the feedback text, selected category, app version, platform, and submission timestamp. Feedback submission requires an authenticated account to prevent abuse, but we do not store your user ID, name, email address, or partner information with the feedback document. Please avoid including personal, sensitive, or identifying information in feedback text.

Information Collected Automatically

• Push notification token: A device-specific token issued by Firebase Cloud Messaging (FCM) that allows us to deliver push notifications to your device. This is not a hardware identifier and changes if you reinstall the app.
• Login metadata: Timestamps for when your account was created and when you last signed in, along with a login count. This helps us understand engagement patterns.
• Usage analytics: We use Firebase Analytics to collect anonymous, aggregated data about app usage. This includes screen views, feature events such as adding a spot, engagement events, and onboarding progress. We also set limited user properties such as whether you have a partner connected. This data is used solely to improve stability and user experience, and is never used to build an advertising profile.
• Future subscription status: RevenueCat infrastructure exists for future Keepsake Pro features. If paid subscriptions are re-enabled, we may process whether your account or couple has active Pro access and its expiration date. We do not receive or store payment card details, billing addresses, or App Store transaction receipts.
• Recent searches: Your last 10 place search queries are stored on your account to improve search convenience. These are visible only to you.

Information from Third-Party Sign-In Providers

When you authenticate with Google or Apple, the provider shares your name and email address with us. Apple Sign-In users may choose to hide their email using Apple's private relay service, in which case we receive a relay address instead. We do not access your Google or Apple account beyond what is needed for authentication.

2. How We Use Your Information

We use the information we collect solely to power and improve the Keepsake experience:

• Account and couple management: To create your account, pair you with your partner via invite codes, and maintain your shared couple profile.
• Shared memories: To store, display, and organize the date spots, photos, badges, and streaks you build together.
• Notifications: To deliver push notifications for date spot activity, new badges earned, weekend planning prompts, and feedback prompts.
• Maps and location search: To display your spots on a map and help you search for places when adding new spots.
• Feedback and product improvement: To review bug reports, feature requests, and general comments you choose to submit, and to improve Keepsake's functionality, reliability, and user experience.
• Future subscription billing: If Keepsake Pro is re-enabled, to determine whether your couple has active Pro access and unlock premium features accordingly.
• Analytics and improvement: To understand which features are most valuable, identify issues, and guide future development.

We do not use your personal data for advertising, and we never sell, rent, or trade your data to third parties for their marketing purposes.

Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract performance: Account data, date spots, partner pairing data, and future subscription management, if applicable, are processed to deliver the service you signed up for (Article 6(1)(b)).
• Legitimate interests: Aggregated usage metrics and anonymous feedback are processed to improve app stability and user experience, where these interests are not overridden by your rights (Article 6(1)(f)).
• Consent: Push notifications are sent only with your explicit permission via your device's notification settings. Camera roll access is granted only with your explicit permission (Article 6(1)(a)).
• Legal obligation: We may process and retain data as required by applicable law (Article 6(1)(c)).

You have the right to withdraw consent at any time for any processing based on consent, without affecting the lawfulness of processing before withdrawal.

"Do Not Sell or Share" Notice (California Residents)

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes as defined under the California Privacy Rights Act (CPRA). Firebase Analytics collects anonymous, aggregated usage data under Google's terms; this does not constitute a "sale" or "sharing" of personal information under the CPRA. To exercise your California privacy rights, contact us at the email listed at the bottom of this policy.

3. Partner-Linked Data

Keepsake is built around the relationship between two people. When you pair with a partner, certain data becomes shared between your two accounts by design. It is important to understand how this works:

• What is shared: Date spots (including location, photos, ratings, and notes), earned badges, streak progress, relationship milestones, and partner-related notification activity are visible to both linked accounts.
• Future couple-level subscription: If Keepsake Pro is re-enabled and either partner subscribes, both partners may receive premium access. Subscription status may be stored on the shared couple record so both accounts can read it. No payment details are shared.
• What stays private: Your login credentials, push notification token, analytics data, partner nickname (which is your personal label for your partner), notification preferences, and feedback you submit through Share Feedback are private to your account and are not visible to your linked partner.
• Unpairing and breakups: If your relationship connection is removed, the shared couple record is deactivated. Spots you created remain on your account. Your partner will no longer have access to your data, and you will no longer have access to theirs.

4. Third-Party Service Providers

We rely on trusted third-party services to operate Keepsake. Each service processes data under its own privacy policy. We do not sell data to any of these providers.

5. Data Security & Encryption

We take the security of your data seriously and implement multiple layers of protection:

• Encryption in transit: All data transmitted between the app and our servers is encrypted using TLS (Transport Layer Security).
• Encryption at rest: Your data stored in Google Cloud (Firebase) is encrypted at rest using AES-256 encryption, managed automatically by Google.
• Access controls: We enforce Firestore security rules that ensure only you and your paired partner can read or write your shared relationship data. No other user can access your spots, photos, or couple information.
• Authentication security: Sign-in is handled entirely by Google or Apple. We never store your password. Firebase Authentication handles all credential verification on their servers.
• Limitations: Keepsake does not currently implement end-to-end encryption at the application layer. While your data is encrypted during transmission and at rest on Google's servers, it is theoretically accessible to authorized infrastructure administrators. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

6. Data Retention & Deletion

• Active accounts: We retain your personal data for as long as your account remains active and your relationship connection is in place.
• Automatic cleanup: Read push notifications are automatically deleted after 30 days by a scheduled Cloud Function. Temporary location data, if collected, is purged within 24 hours.
• Account deletion: You can permanently delete your account at any time from Settings → Delete Account. When you delete your account, your user profile, personal info, preferences, and Firebase Authentication record are removed. Your relationship connection is severed, and your partner will no longer see data attributed to you.
• Residual data: Anonymized, aggregated analytics data that cannot identify you may persist after deletion. Anonymous feedback may also remain after account deletion because it is not stored with a user identifier. If you include identifying information in feedback text and want it removed, contact us and we will make reasonable efforts to locate and delete it. Future subscription records, if any, managed by RevenueCat and the App Store follow those platforms' own retention policies.
• Data deletion requests: If you need assistance with data deletion or want to confirm that all data has been removed, contact us at the email listed at the bottom of this policy.

7. Children's Privacy

Keepsake is designed for adults in romantic relationships and is not directed at children. We do not knowingly collect personal information from anyone under the age of 13 (or the applicable age of digital consent in your jurisdiction — 16 in the EEA under GDPR). If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately. We will take steps to delete the information promptly.

8. Your Rights

Depending on your location, you may have the following rights under applicable data protection laws (such as the CCPA/CPRA, GDPR, or similar legislation):

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request that we correct inaccurate or incomplete data. You can also update your name and profile photo directly in the app.
• Right to deletion: Delete your account directly in Settings, or contact us to request deletion.
• Right to portability: Request an export of your data in a structured, commonly used format.
• Right to object: Object to certain processing activities where applicable (e.g., analytics based on legitimate interests).
• Right to restrict processing: Request that we limit how we process your data in certain circumstances.
• Right to withdraw consent: Withdraw any previously given consent (such as push notifications or camera roll access) at any time through your device settings.

To exercise any of these rights, email us at the address below. We will respond within 30 calendar days (or within 45 days for California residents under CCPA/CPRA, with a possible 45-day extension). We will not discriminate against you for exercising your privacy rights.

9. International Data Transfers

Keepsake is operated from the United States. If you are located outside the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country.

Our third-party providers (including Google Firebase and RevenueCat) maintain appropriate safeguards for international data transfers, including Standard Contractual Clauses (SCCs) where required by GDPR. By using Keepsake, you acknowledge and consent to such transfers as necessary to provide the Service.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, new features, or legal requirements. When we do, we will update the "Last Updated" date at the top of this page. For material changes that affect how your data is collected or used, we will notify you through the app before the changes take effect. Your continued use of Keepsake after a policy update constitutes acceptance of the revised terms. We encourage you to review this policy periodically.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, your personal data, or how Keepsake handles your information, please reach out:

Email: 650.mason.b@gmail.com
Address:
Mason Brown and Juliana Perez
San Francisco, CA