Keep This For Me
⚠ DRAFT — pending review

This document has not yet been reviewed by a legal adviser. It describes how the service actually works today, but the wording may change.

Privacy Policy

Who we are

Keep This For Me ("we", "us", "our") is the operator of this service. If you have a question about your data or want to exercise any of the rights below, contact us at support@keepthisfor.me.

What we collect

We collect the details you give us when you create an account, the documents you capture with the app, the fields our automated extraction reads out of those documents, and diagnostic and audit records generated as you use the service.

How your documents are read

When you capture a document, the entire content of that document is sent to Anthropic's Claude API so it can read the information out of it for you. We do not send anything you have not captured, and we do not use your documents to train any model.

Who processes your data

We use a small number of other companies to provide the service. Each one is listed below, along with what they do for us and where they process your data.

WhoWhat they doWhere they process itTheir privacy terms
AnthropicAutomated extraction — the entire content of each document you capture is sent to Anthropic's Claude API to read the information out of itUnited StatesAnthropic's privacy terms
SupabaseApplication hosting, database, file storage, and authenticationEuropean UnionSupabase's privacy terms
CloudflareWebsite and content delivery, and routing of inbound email importsGlobal edge networkCloudflare's privacy terms
Google (Firebase)Push notification delivery, and Google sign-in when you choose itUnited StatesGoogle (Firebase)'s privacy terms
AppleApple sign-in when you choose it, and distribution of the iOS appUnited StatesApple's privacy terms

International transfers

Some of the parties listed above process data outside the United Kingdom and European Economic Area, including in the United States, under a recognised data-transfer safeguard such as the UK's International Data Transfer Addendum or equivalent standard contractual clauses.

How long we keep it

Your documents and the data extracted from them are kept until you delete them individually or delete your account — deletion is immediate and permanent, with no grace period and no way to undo it. Diagnostic error records are kept for 180 days. Audit records of account and security events are kept for 730 days.

Your rights

You have the right to access the personal data we hold about you, the right to erasure, and the right to portability (a copy of your data in a usable format). You can exercise access and erasure directly in the app, or by contacting us. We will not charge you for a reasonable request.

Complaints

If you think we have mishandled your data, you can complain to us directly, or you can complain to the UK's supervisory authority, the Information Commissioner, at ico.org.uk, without contacting us first.

Age

This service is for people 18 or over. We do not knowingly provide accounts to anyone under 18, and we will close and delete any account we learn belongs to someone under that age.

Changes to this policy

When we make a substantive change to this policy, we update the version identifier printed in the footer below and the effective date. The version you accepted when you signed up is recorded against your account.