Privacy Policy

Keepsake ("we," "our," or "us") is built and operated by Mason Brown and Juliana Perez. This Privacy Policy explains how we collect, use, share, and protect your information when you use the Keepsake mobile application. Keepsake is a couples-focused app designed to help you and your partner document, visualize, and celebrate the experiences you share together.

By creating an account or using Keepsake, you agree to the practices described in this policy. If you do not agree, please do not use the app.

1. Information We Collect

We collect the minimum data necessary to deliver the Keepsake experience. The information falls into three categories:

Information You Provide

• Account information — When you sign in with Google or Apple, we receive your name and email address from your chosen provider. We do not access or store your third-party passwords.
• Profile photo — You may upload a profile picture, which is stored securely in Firebase Storage.
• Relationship data — Your relationship start date, an optional partner nickname (visible only to you), and the invite code used to connect with your partner.
• Date spots — Location details (name, address, city, country, and geographic coordinates), visited date, tags, categories, ratings, notes, a spot nickname, and whether a spot is marked as a favorite or a bucket-list item.
• Photos — Images you upload to date spots or as profile pictures. When you add a spot from a photo, we may read EXIF metadata (GPS coordinates and date taken) from the image to pre-fill location and date fields. This metadata is processed on-device and is not uploaded unless you save the spot.
• Camera roll access — With your explicit permission, we access your photo library to let you attach photos to date spots. Photo content is analyzed on-device; only locations and images you explicitly approve are uploaded to your account. You can revoke this permission at any time in your iOS Settings.
• Notification preferences — Your push notification settings for date spot activity, badge alerts, weekend planning prompts, and feedback prompts.
• Anonymous feedback — If you choose to submit feedback through the App, we collect the feedback text, selected category, app version, platform, and submission timestamp. We do not store your user ID, name, email address, or partner information with the feedback document. Please avoid including personal, sensitive, or identifying information in feedback text.

Information Collected Automatically

• Push notification token — A device-specific token issued by Firebase Cloud Messaging (FCM) that allows us to deliver push notifications to your device. This is not a hardware identifier and changes if you reinstall the app.
• Login metadata — Timestamps for when your account was created and when you last signed in, along with a login count.
• Usage analytics — We use Firebase Analytics to collect anonymous, aggregated data about app usage (screen views, feature events such as adding a spot, and onboarding progress). This data is used solely to improve stability and user experience, and is never used to build an advertising profile.
• Subscription status — We use RevenueCat to process whether your account or couple has active Keepsake Pro access and its expiration date. We do not receive or store payment card details, billing addresses, or App Store transaction receipts.
• Recent searches — Your last 10 place search queries are stored on your account to improve search convenience. These are visible only to you.

Information from Third-Party Sign-In Providers

When you authenticate with Google or Apple, the provider shares your name and email address with us (or an Apple private relay address). We do not access your Google or Apple account beyond what is needed for authentication.

2. How We Use Your Information

We use the information we collect solely to power and improve the Keepsake experience:

• Account and couple management — To create your account, pair you with your partner via invite codes, and maintain your shared couple profile.
• Shared memories — To store, display, and organize the date spots, photos, badges, and streaks you build together.
• Notifications — To deliver push notifications for date spot activity, new badges earned, weekend planning prompts, and feedback prompts.
• Maps and location search — To display your spots on a map and help you search for places when adding new spots.
• Feedback and product improvement — To review bug reports, feature requests, and general comments you choose to submit, and to improve Keepsake's functionality.
• Subscription billing — To determine whether your couple has active Keepsake Pro access and unlock premium features accordingly.
• Analytics and improvement — To understand which features are most valuable, identify issues, and guide future development.

We do not use your personal data for advertising, and we never sell, rent, or trade your data to third parties for their marketing purposes.

Legal Basis for Processing (EEA/UK Users)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract performance — Account data, date spots, partner pairing data, and subscription management are processed to deliver the service you signed up for (Article 6(1)(b)).
• Legitimate interests — Aggregated usage metrics and anonymous feedback are processed to improve app stability and user experience (Article 6(1)(f)).
• Consent — Push notifications and camera roll access are granted only with your explicit permission (Article 6(1)(a)).
• Legal obligation — We may process and retain data as required by applicable law (Article 6(1)(c)).

3. Partner-Linked Data

Keepsake is built around the relationship between two people. When you pair with a partner, certain data becomes shared between your two accounts by design:

• What is shared — Date spots (including location, photos, ratings, and notes), earned badges, streak progress, relationship milestones, and partner-related notification activity are visible to both linked accounts.
• Couple-level subscription — When either partner in a linked relationship subscribes, both partners receive premium access. Subscription status is stored on the shared couple record so both accounts can read it. No payment details are shared.
• What stays private — Your login credentials, push notification token, analytics data, partner nickname, notification preferences, and feedback you submit through Share Feedback are private to your account and are not visible to your linked partner.
• Unpairing and breakups — If your relationship connection is removed, the shared couple record is deactivated. Spots you created remain on your account. Your partner will no longer have access to your data, and you will no longer have access to theirs.

4. Third-Party Service Providers

We rely on trusted third-party services to operate Keepsake. Each service processes data under its own privacy policy. We do not sell data to any of these providers.

Infrastructure

• Google Firebase — Our core backend. Includes Cloud Firestore (database), Firebase Authentication (sign-in), Firebase Cloud Storage (photo hosting), Firebase Cloud Messaging (push notifications), Firebase Cloud Functions (server-side logic), and Firebase Analytics (usage metrics).

Payments

• RevenueCat — Infrastructure for subscription status, paywall presentation, purchase restoration, and billing support. RevenueCat receives your anonymous app user ID (derived from your Firebase UID) and purchase events from the App Store. It does not receive your name or email.
• Apple App Store — Processes payments for Keepsake Pro. Keepsake never receives or stores your credit card number, billing address, or Apple ID password.

Generative AI

• Google Gemini API — Powers our personalized Date Planner features. We share only structured category selections and preference choices (e.g., general area, date style, category) with Google's Gemini APIs to generate custom itineraries. No names, emails, exact locations, or other personally identifying information (PII) are shared with the Gemini service.

Maps and Location

• Apple Maps — Provides native map display capability via the MapKit framework.
• Google Places — Used for searching and selecting date spots. Place search queries are processed by Google Cloud in accordance with their privacy terms.

Authentication

• Google Sign-In & Apple Sign-In — Provides OAuth authentication. Shares your name and email (or Apple's private relay email) with us at sign-in.

5. Data Security & Encryption

We take the security of your data seriously and implement multiple layers of protection:

• Encryption in transit — All data transmitted between the app and our servers is encrypted using TLS.
• Encryption at rest — Your data stored in Google Cloud (Firebase) is encrypted at rest using AES-256 encryption.
• Access controls — We enforce Firestore security rules that ensure only you and your paired partner can read or write your shared relationship data.
• Authentication security — Sign-in is handled entirely by Google or Apple. We never store your password.
• Limitations — Keepsake does not currently implement end-to-end encryption at the application layer. No method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

6. Data Retention & Deletion

• Active accounts — We retain your personal data for as long as your account remains active and your relationship connection is in place.
• Automatic cleanup — Read push notifications are automatically deleted after 30 days.
• Account deletion — You can permanently delete your account at any time from Settings → Delete Account. When you delete your account, your profile, authentication records, and relationship connection are permanently removed.
• Residual data — Anonymized, aggregated analytics data and anonymous feedback may persist. Subscription records managed by RevenueCat and the App Store follow those platforms' own retention policies.

7. Children's Privacy

Keepsake is designed for adults in romantic relationships and is not directed at children. We do not knowingly collect personal information from anyone under the age of 13 (or 16 in the EEA).

8. Your Rights

Depending on your location, you may have the right to access, correct, delete, port, or restrict processing of your personal data. You can withdraw your consent for push notifications or photo library permissions in iOS settings at any time. To exercise your rights, email us at 650.mason.b@gmail.com.

9. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out to:

Mason Brown and Juliana Perez
San Francisco, CA
Email: 650.mason.b@gmail.com