Privacy policy
Last updated: October 23, 2026. This policy covers the Keepsake app, Keepsake Cloud, and Keepsake Export, made by welkin9 (“we”).
The short version
- Keepsake works fully on your phone without an account. Without Keepsake Cloud, your stories, photos, contacts and notes never leave your phone.
- With Keepsake Cloud, they're stored on servers in Canada so you can get them back and use them on your other devices.
- No ads, no tracking, no selling or sharing your data with advertisers.
On your phone
Everything you put in Keepsake is stored on your phone. Notes you lock are encrypted with a key kept in your phone's secure storage. When something is shared to Keepsake from another app with a link, Keepsake fetches that page's preview (title, image) from the website it points to.
If you use Keepsake Cloud
We keep:
- Your account: your email address, and your mobile number if you add one, to send you sign-in codes and important notices (such as a sign-in on a new device).
- Your devices: for each phone, tablet or computer you sign in on: its kind (e.g. iPhone), the app version and system version, a device key that proves requests come from it, and when it was last used.
- Your content: your photos (as taken, which can include where they were taken, plus smaller copies without location), and your stories, trips, contacts, notes, shared items, profile and settings, so we can back them up and keep your devices in sync. Locked notes stay encrypted with your notes key: we can't read them.
- Sign-in records: when and from which network address you signed in or asked for a code, to protect your account. They're kept for 90 days, then archived, encrypted.
- Your plan: which plan you have and when it renews or ends. Purchases are handled by Apple or Google; we receive what was bought and its price, never your payment details.
We use this only to run Keepsake for you: to back up and sync your content, to sign you in, and to keep the service secure and working. We look at an account's data only when you ask us for help, or to protect the service.
Where it's stored, and who helps us
- OVHcloud (Canada): our servers and storage, in Beauharnois, Quebec. Your content is encrypted at rest.
- Resend: sends our emails (sign-in codes, notices). It receives your email address and the message.
- MoceanAPI or Twilio: send sign-in codes by text message, if you add a mobile number. They receive your number.
- Apple, Google and RevenueCat: handle subscriptions. RevenueCat tells us when a purchase is made, renewed or cancelled.
Some of these companies may process data outside Canada. They're bound to use it only to provide their service to us.
How long we keep it
- Your account and content stay while you have an account.
- When a plan ends, your cloud copies are kept for 60 days (so your photos come back to your phone), then deleted.
- When you delete your account (in the app: Profile → Cloud backup → Delete account), we delete your cloud copies, backups, synced content, email and mobile number. Records of purchases are kept, without your email, as the law requires.
Your choices and rights
You can use Keepsake without an account, sign out at any time, change your mobile number, and delete your account from the app. You can ask us for a copy of your information, to correct it, or to delete it, by writing to support@welkin9.com. Keepsake Export gives you a copy of your photos and contacts at any time.
Children
Keepsake isn't directed to children under 13, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update this page and the date above, and tell you in the app for important changes.