Privacy Policy

Effective July 27th, 2026 · Version 2026-07-27

This policy describes what information Kept collects, how it is used, and with whom it is shared. It applies to kept.family and the Kept service.

1. Information we collect

• Account information: the email address you sign in with and the profile name you provide.
• Content that members create: text, voice recordings, and photos, together with associated records such as who created each entry.
• Invitation email addresses: when a member invites someone, the member enters that person’s email address so the invitation can be delivered.
• Requests you submit to Kept, such as a request for an invitation, including the email address and details you provide with it.
• Technical information: log data generated when you use the service, and cookies used for sign-in and security.

2. How we use information

We use information to:

• operate and provide the service and its features;
• secure the service and prevent abuse;
• maintain and improve the service;
• communicate about the service, including sign-in links, invitations, and service notices;
• comply with legal obligations and enforce our terms.

3. What Kept does not do

• Kept does not sell personal information.
• Kept does not show third-party advertising.
• Kept does not use third-party analytics or advertising trackers.
• Voice recordings are stored as recordings. Kept does not extract voiceprints from them and does not use them to identify anyone.

Because Kept does not track users across other websites, browser Do Not Track signals do not change how the service operates.

4. How information is shared

Kept shares information with service providers that process it to run the service: Supabase (database and file storage, hosted in the United States), Vercel (application hosting), Resend (email delivery), and Cloudflare (DNS). When payments open, Stripe will process payment information.

Kept may disclose information where required by law, or to protect the rights, safety, or property of Kept, its users, or others.

If Kept is acquired, merges, or reorganizes, information may transfer as part of that transaction, with notice.

Kept does not share personal information in any other way.

5. Retention

Kept retains information for as long as an account is active or as needed to provide the service. Deleted content and deleted accounts follow the deletion lifecycle, which includes a thirty-day restore window before permanent removal. Copies may remain in provider backups until those backups expire on the providers’ schedules. Kept may retain information longer where the law requires it.

6. Your choices

You may request an export of your information or deletion of your account by emailing hello@kept.family. Kept sends email needed to operate the service, such as sign-in links, invitations, and activity notices; questions about email preferences can be sent to the same address.

7. Children

Kept does not offer accounts to minors, and minors cannot be invited to create one. Content about children is created and managed by adult members of their family. Kept does not knowingly collect personal information directly from children.

8. Security

Kept runs on industry-standard infrastructure providers. Data is encrypted in transit and at rest as provided by those providers. No method of transmission or storage is perfectly secure.

9. Changes to this policy

Kept may update this policy. Material changes will be announced by email or in the app before they take effect. Continued use of the service after a change takes effect is acceptance of the updated policy. The effective date and version appear at the top of this page.

10. Contact

Questions about this policy or your information: hello@kept.family.