← Back to Keepah

Privacy Policy

Last updated: August 8, 2026

Effective date: 8 August 2026

This policy explains what personal data Keepah collects, why, who it goes to, and the choices you have. It describes what the app actually does. If anything here does not match the app, the policy is wrong and we fix the policy, not the disclosure.

1. Who we are and how to reach us

Keepah is operated by 7VN Intelligence LLC, a Wyoming limited liability company, which is the data controller.

  • Privacy contact: hello@keepah.com
  • Website: https://keepah.com
  • Mailing address: 7VN Intelligence LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA

2. Our promise, stated precisely

Your relationships are private and the details you entrust to Keepah belong to you. We do not sell your data, we do not use it for advertising, and we do not use it to train AI models. Data is encrypted in transit with TLS and at rest with AES-256. Fields you mark as Private, and profiles you Lock, are encrypted on your device with AES-256-GCM before they leave it, using a key held in your device's secure storage, so we cannot read those fields.

Everything outside those opt-in encrypted fields is readable by our servers and by the providers listed in section 5. We say that plainly because the difference matters.

3. What we collect

  • Account data. Your email address, your name as you give it, and your Apple or Google sign-in identifier. Used to create and secure your account.
  • Relationship content. The profiles you create about people, notes, important dates, gift ideas, journal entries, memories, and your chat messages with the AI. This is the core feature.
  • Health-adjacent content, optional. Medications, doses, schedules, allergies, and refill reminders you choose to record for yourself or for someone in your circle.
  • Intimacy content, optional and 18+. Our Flame logs: activity type, timing, mood, heat, and any note you write.
  • Mood and emotional data, optional. Mood entries and the emotional context you write.
  • Photos, video, and voice, optional. Images and video you upload, and voice recordings you make for voice input.
  • Location, optional. Device location, only when you turn on a location-based feature and grant the operating system permission.
  • Connection data. Who you are connected to, the sharing permissions you grant, and content you send to a connected partner.
  • Device and technical data. Device platform, app version, push token, crash reports and error stack traces, and your IP address at the network layer. Used to deliver notifications, keep the app working, diagnose crashes, and prevent abuse.
  • Subscription data. Purchase and entitlement state, store receipt identifiers, and your Keepah user id used as your subscription identifier.
  • Website data. Pages viewed on keepah.com, referrer, UTM parameters, a daily rotating hash of your IP address and browser string, messages you send to the Keebot chat widget, and anything you type into the waitlist or beta form, which includes a phone number on the beta form.

We do not run advertising SDKs, ad pixels, or data brokers. There is no Meta Pixel, no Google Analytics, and no Firebase Analytics in the app or on the site.

4. Sensitive data, said out loud

Some of what Keepah stores is sensitive by any reasonable definition: medications and allergies, intimacy logs, mood, and detailed notes about identifiable people who are not Keepah users. We do not sell it, we do not share it for advertising, and access by our team is limited to what is needed to operate and support the service.

Two consequences you should understand before you use those features:

  1. Unless you mark a field Private or Lock a profile, it is readable by our servers and by the AI providers in section 5 when a feature you use needs it.
  2. When you record information about another person, you are responsible for having the right to do so.

5. Third parties your data goes to

These are the actual processors. Each one is named because it receives data.

  • OpenAI. Chat messages, relationship and profile context, journal entries, mood and memory data, photos you send to the AI, either uploaded directly or fetched by OpenAI from our storage using a time-limited link, voice recordings for transcription, and text for speech synthesis. Used for AI chat, summaries, memory search, media understanding, and voice input and output.
  • Anthropic. The same categories as OpenAI, if and when a request is routed to it. An alternative AI provider that is configurable and may be inactive at any given time.
  • Railway. All API traffic and the application environment. Hosting for the Keepah backend.
  • Supabase. The primary PostgreSQL database contents. Managed database hosting.
  • iDrive e2. Photos, video, and other files you upload, plus encrypted nightly copies of the database and a mirror of uploaded files. Object storage and off-site backup. Backups are encrypted with a key we hold, so the provider cannot read them.
  • RevenueCat. Your Keepah user id, purchase and entitlement state, and store receipt data. Subscription management.
  • Apple. Sign in with Apple identifiers, in-app purchase and receipt data, and push notification content delivered through APNs. Authentication, payments, and notification delivery.
  • Google. Google Sign-In identifiers and push notification content delivered through FCM on Android. Authentication and notification delivery.
  • Expo. Push tokens and the title and body of every notification we send you, which can include names of people in your circle. Push notification delivery and app updates.
  • Sentry. Crash reports, error messages and stack traces, app version, and platform. Crash and error monitoring, configured without personally identifying request data.
  • Resend. Your email address, your name, and the content of the emails we send you. Transactional email such as sign-in codes, and waitlist email.
  • Stripe. Email, name, and payment identifiers, only if you subscribe through the web rather than the App Store. Payment processing on the web path.
  • Vercel, including Vercel Analytics. Requests to keepah.com and aggregate site analytics. Website hosting and site analytics.

We may change providers. When we do, this list changes with them, and it is the current list that governs.

We do not permit any of these providers to use your content to train their models. OpenAI and Anthropic API traffic is covered by their respective API terms, which exclude API content from model training by default.

6. What we never do

  • Sell or rent your personal data
  • Use your data for advertising, or share it with data brokers
  • Use your data to train AI models, ours or anyone else's
  • Read fields you have marked Private, or profiles you have Locked

7. Content you share with another Keepah user

Keepah lets you connect with other people. When you do:

  • Your display name and profile photo are visible to people you connect with, and to anyone who searches for your email address or phone number in the app.
  • You choose which categories of your own profile a connection can see. What you put in those categories, including free-text notes, becomes visible to them.
  • Questions and answers you write for a connected partner, and Our Flame notes at the sharing level that includes notes, are delivered to that person.
  • Push notifications we send your connections can include your display name.

Content you send to another person cannot be un-sent. Treat it the way you would treat a message.

8. Retention and deletion

We keep your data for as long as your account is active.

You can ask us to delete your account and everything in it at any time. Use Settings, then Privacy & Security, then Delete Account & All Data in the app, or write to hello@keepah.com from the address you sign in with and we will do it for you.

When we receive a deletion request:

  1. Your sessions are revoked and the account can no longer be used to sign in.
  2. Your account is marked deleted and is no longer served by the service.
  3. Your account and its associated records are permanently erased from our production database within 30 days.
  4. Encrypted backups are retained on a rolling schedule: daily backups cycle out within 35 days, and a monthly archive is kept for up to 400 days. Your data is gone from the live service first, and disappears from backups as those windows pass.
  5. Data held on your own device is removed when you delete the app.

If you want confirmation that it is done, or you want the photos and video you uploaded erased from our storage straight away, say so in your message and we will confirm when it is complete.

9. Your rights

Depending on where you live you may have the right to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. In the app you can view your data, edit it, and ask for it to be deleted. For anything else, write to hello@keepah.com and we will respond within 30 days.

If you are in the EEA or the UK, our legal bases are: performance of a contract for your account and the core features, consent for optional features such as location, health records, intimacy logs, and notifications, and legitimate interest for security, crash diagnostics, and abuse prevention. You may withdraw consent at any time by turning the feature off, and you may complain to your local data protection authority.

If you are in California, we do not sell or share personal information as those terms are defined by the CCPA and the CPRA, and we do not process it for cross-context behavioural advertising. You may exercise access and deletion rights as above, and we will not discriminate against you for doing so.

10. International transfers

Keepah is operated from the United States and our providers are primarily US based. If you use Keepah from outside the United States, your data is transferred to and processed in the United States.

11. Children

Keepah is rated 17+ and is not intended for anyone under 13. We do not knowingly collect personal information from children under 13. The Our Flame feature is restricted to users 18 and over. If you believe a child under 13 has given us personal information, write to hello@keepah.com and we will delete it.

12. Security

TLS in transit, AES-256 at rest, opt-in AES-256-GCM end-to-end encryption for Private fields and Locked profiles with the key held on your device, biometric gating on sensitive screens, and screenshot protection on Our Flame. No system is perfectly secure and we do not claim otherwise.

13. Changes

We may update this policy. Material changes will be announced in the app or by email, and the effective date above will change.

14. Contact

hello@keepah.com

7VN Intelligence LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, USA