Privacy Policy

Last updated: March 1, 2026

Keepsake ("we," "us," or "our") is a gifting assistant that helps you remember and celebrate the people in your life. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

Information We Collect

We collect only what's necessary to provide the service:

• Account information: When you sign in with Google, we receive your name, email address, and profile photo from Google OAuth. We do not receive or store your Google password.
• People & occasion data: The names, relationships, interests, budgets, birthdays, and occasions you enter for the people you gift to.
• Gift history: Records of gifts you mark as purchased, linked to the recipient and occasion.
• Notification preferences: Your SMS opt-in status, reminder timing preferences, quiet hours setting, and time zone.
• Phone number: If you opt into SMS reminders, we collect and store your phone number.

How We Use Your Information

• To authenticate you and maintain your account session
• To generate personalized gift recommendations using AI (your recipient data is sent to the AI model only to generate suggestions)
• To send SMS reminders about upcoming occasions, if you opt in
• To improve recommendation quality over time based on your gift history

How Your Data Is Stored

All user data is stored in Supabase, a secure cloud database platform. Data is encrypted at rest and in transit. Authentication is handled by Supabase Auth, which integrates with Google OAuth 2.0.

SMS reminders are powered by Twilio. If you opt in, your phone number is stored in our database and used solely to deliver reminder messages.

We Do Not Sell Your Data

We do not sell, rent, trade, or share your personal information with third parties for marketing or advertising purposes. Full stop.

Third-Party Services

We use the following third-party services to operate Keepsake:

• Google OAuth — authentication (Google Privacy Policy applies)
• Supabase — database and auth infrastructure
• Anthropic Claude — AI model for generating gift recommendations
• Twilio — SMS delivery (only if you opt in)
• Netlify — frontend hosting
• Railway — backend hosting

These services have their own privacy policies and data handling practices.

Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time by emailing us. We will process deletion requests within 30 days.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and data
• Opt out of SMS notifications at any time (reply STOP to any message)

Children's Privacy

Keepsake is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of Keepsake after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at hello@trykeepsake.ai.