Privacy Policy

Your data belongs to you

Kept is built on a simple principle: your photos are yours. We don't claim ownership of anything you upload, we don't use your content for advertising, and we don't sell or share your personal information with third parties for their own purposes.

What we collect

We collect only what we need to provide the service:

• Account information — When you sign in with Google, we receive your name, email address, and profile photo. We use this to identify your account. We do not request access to your contacts, email, or any other Google services.
• Photos you upload — Your images are stored at full resolution in secure cloud storage and delivered to your authorized viewers via a content delivery network. We do not compress, modify, analyze, or scan the content of your photos.
• Usage data — We track basic usage information like page views and album interactions to power features like analytics and likes. This data is tied to your account, not shared externally.
• Billing information — If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your credit card number or full payment details on our servers. See Stripe's Privacy Policy for how they handle your payment data.
• Cookies and sessions — We use session cookies to keep you signed in. We do not use tracking cookies, advertising pixels, or third-party analytics services.

Photos of children

We understand that many of our users share photos of their children and families. We treat this responsibility seriously. We do not analyze, scan, or profile the content of your photos. Access to your albums is controlled entirely by you — only the people you invite to your trusted circle can view your private albums. We do not make your content discoverable to the public or to other users unless you explicitly choose to share an album publicly.

How we protect your data

Your photos are stored using industry-standard cloud infrastructure with encryption at rest and in transit. Access to our systems is restricted and monitored. While we take reasonable measures to safeguard your data, no system is perfectly secure, and we encourage you to maintain your own backups of important photos.

Data retention and deletion

We retain your data for as long as your account is active. If you delete your account, we will remove your personal information and photos within a reasonable period. Some information may be retained as required by law or for legitimate business purposes (such as resolving disputes or enforcing our terms).

You can request deletion of your account and data at any time by contacting us at privacy@kept.photo.

Law enforcement and legal requests

Kept complies with all applicable laws and regulations. We will cooperate with lawful requests from law enforcement authorities when required to do so. If permitted by law, we will notify you of any such request that affects your data.

Third-party services

We use a small number of trusted third-party services to operate Kept:

• Google — authentication (sign-in only)
• Stripe — payment processing
• Amazon Web Services — photo storage and delivery
• Vercel — application hosting

Each of these services has their own privacy policies. We share only the minimum information required for each service to function.

Changes to this policy

We may update this policy from time to time. If we make meaningful changes, we'll notify you through the application or by email. Your continued use of Kept after changes take effect constitutes acceptance of the updated policy.

Contact us

If you have questions about this policy or how we handle your data, reach out at privacy@kept.photo.