Privacy policy

Your photos belong to you. We never sell them, never share them with advertisers, and never use them to train AI models — ours or anyone else's. You can delete any photo, or your whole account, at any time and we'll wipe it from our systems within 30 days.

To run Keepsake, we collect three kinds of information:

• Account information. Your email address, an encrypted phone number for verification, your password (stored as a one-way hash so we can never see it), and a device fingerprint we use to prevent abuse.
• Photos you upload. The original you give us and the restored version we produce. Both are encrypted at rest and in transit.
• Usage information. Which pages you visit, what errors you see, and which features you use. We use this to make Keepsake better, not to build a profile of you.

• Restore your photos. When you upload a photo, we send it to our restoration model to produce the restored version, then deliver it back to you.
• Keep your account secure. We use your email and phone to verify it's really you signing in.
• Improve Keepsake. We look at anonymous, aggregated usage patterns — things like "what percentage of people who upload also download" — never your individual photos.
• Send you the messages you asked for. Receipts, credit reminders, and the occasional product update. Never marketing from third parties.

• We do not train AI models on your photos. Not ours. Not OpenAI's. Not anyone's.
• We do not sell your photos or your personal information.
• We do not share your photos with anyone except you.
• We do not use your photos in marketing materials without your explicit, written consent.

To run Keepsake, we use a small number of trusted service providers. Each one only sees the minimum data they need to do their job:

• Supabase — stores your account, credits, and encrypted photo files.
• Stripe — processes payments. We never see your full card number; only the last 4 digits.
• Twilio — sends the verification code to your phone.
• Resend — delivers email receipts and notifications.
• OpenAI — runs the restoration model on your photo for as long as it takes to produce the result, then deletes it from their side. They are contractually forbidden from training on it.
• PostHog — anonymous product analytics. No photos.

• Free-tier photos: deleted automatically 24 hours after you upload them, unless you upgrade.
• Paid-tier photos: kept in your gallery until you delete them, or for 30 days after your subscription ends in read-only mode.
• Account information: kept while your account is active. Deleted within 30 days when you close your account.
• Payment records: kept for 7 years after purchase because tax law requires it.

You can, at any time:

• See what we have about you — head to your account page.
• Delete any individual photo from your gallery.
• Delete your whole account — Account → Privacy and deletion → Delete my account. Everything goes within 30 days.
• Export your photos as a zip — email hello@keepsake.studio.
• Correct anything we have wrong about you — same email.

We respond to every request within 30 days, usually much sooner.

Photos and account data are encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is limited to a small number of engineers and is logged. We have never had a breach. If we ever do, we'll tell you within 72 hours.

Keepsake is for adults. We do not knowingly collect information from anyone under 18. If you believe we have, please email us and we'll delete it.

If we change this policy in a meaningful way, we'll email you before the change takes effect. Small clarifications get posted here with a new "last updated" date.

Questions about your privacy? Email hello@keepsake.studio and a real person will reply, usually the same day.