Privacy Policy

Last updated: May 17, 2026

Keepsake ("we," "us," or "our") is a gifting assistant that helps you remember and celebrate the people in your life. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Information We Collect

We collect only what's necessary to provide the service:

• Account information: When you create an account or sign in, we collect information such as your name, email address, authentication provider, and profile details provided through Google OAuth, Apple sign-in, or magic link authentication. We do not receive or store your Google or Apple password.
• People & occasion data: The names, relationships, interests, budgets, birthdays, locations, notes, gift preferences, and occasions you enter for the people you gift to.
• Gift and recommendation data: Gift recommendations, saved ideas, gift history, purchases you mark, and recommendation activity such as saving, passing on, or opening ideas.
• Reminder and notification data: Reminder preferences, email reminder settings, mobile push notification tokens, and related device information needed to send notifications.
• Feedback and support data: Information you send us through feedback, support, or account deletion requests.

How We Use Your Information

• To authenticate you and maintain your account session
• To save your people, occasions, saved ideas, gift history, and preferences
• To generate personalized gift recommendations using AI. Recipient context is sent to the AI model only to generate suggestions for Keepsake.
• To send email reminders and product emails through Klaviyo, where enabled or permitted
• To send mobile push reminders about upcoming occasions, if you opt in
• To improve recommendation quality based on saved ideas, passed ideas, gift history, and related product activity
• To provide customer support, maintain security, debug issues, and operate the service

How Your Data Is Stored

User data is stored in Supabase, a secure cloud database platform. Data is encrypted in transit and managed through Supabase's database and authentication infrastructure. Authentication is handled by Supabase Auth, which integrates with Google OAuth, Apple sign-in, and magic link authentication.

Email reminders and lifecycle messages are powered by Klaviyo. Mobile push notifications are powered through Expo's notification infrastructure and platform notification services.

We Do Not Sell Your Data

We do not sell, rent, trade, or share your personal information with third parties for marketing or advertising purposes. Full stop.

Third-Party Services

We use the following third-party services to operate Keepsake:

• Google OAuth — authentication (Google Privacy Policy applies)
• Apple — authentication through Sign in with Apple, when used
• Supabase — database and auth infrastructure
• Anthropic Claude — AI model for generating gift recommendations
• Klaviyo — email reminders, lifecycle emails, and related email events
• Expo — mobile app services and push notification delivery infrastructure
• Netlify — frontend hosting
• Railway — backend hosting

These services have their own privacy policies and data handling practices.

Data Retention

We retain your data for as long as your account is active. You can delete your account in the Keepsake app or request deletion through our account deletion page. Email deletion requests are processed as quickly as possible and within 30 days. We may retain limited records only if required for security, fraud prevention, legal compliance, or operational logs.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and data
• Opt out of marketing emails using unsubscribe links in those emails
• Disable mobile push notifications through your device settings or Keepsake notification settings

Children's Privacy

Keepsake is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of Keepsake after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at jack@trykeepsake.ai.