Kept Privacy Policy

Effective date: [date]

Kept is an app for keeping receipts, made by Spintech LLC ("Kept", "we", "us"). This policy explains what information Kept collects, how we use it, who helps us run Kept, and the choices you have. It covers the Kept app for iPhone and Android and the Kept website. Kept is available only in the United States.

The short version

• We collect what Kept needs to keep your receipts: your email address, the receipts you add, and the details read from them.
• Kept reads your receipts with AI only if you allow it. Then your receipt images, PDFs, and forwarded emails go to Anthropic, our AI provider, which doesn't use them to train its models. You can turn this off at any time.
• We don't sell your information, show you ads, or track you across other companies' apps and websites.
• Usage analytics never include what's on your receipts, and you can turn them off.
• You can export everything, and delete your account in the app or on our website.

Information we collect

Your account.

• Your email address.
• If you sign in with Apple or Google, the name and email address they share with us. With Apple's Hide My Email, that's a relay address that forwards to you.
• Your time zone.
• The private email address Kept gives you for forwarding receipts.
• If you signed in with Apple, a token from Apple that we keep only so we can revoke Kept's access when you delete your account.

Your receipts and records.

• The receipts you scan, import, or share into Kept: images and PDFs.
• The details on them:
  • merchant, date, and amounts (total, subtotal, tax, tip);
  • payment brand and the last four digits of the card (never the full card number);
  • the text read from the receipt;
  • a few words on what was bought.
• What you add: categories, business or personal, notes, and tags.
• What you add for your tax professional: what was bought, the business purpose, and who was there. If you name the people at a business meal, Kept keeps those names with the receipt, like a note, and uses them only to show them to you and put them in your exports.
• The rules Kept learns when you change a merchant's category, which it applies to that merchant's next receipts.
• The exports you create.

Email you forward to Kept.

• Receipts you forward from an email address you've verified, and the files attached to them.
• If an email has no attachment, a cleaned copy of the email, with scripts, forms, and remote images removed.
• For each email: its sender, subject, and message ID. For email from an address you haven't verified, only the sender and message ID; we don't keep the message. Kept tells you about it, showing the sender and when, until you dismiss it or for 30 days.
• The email addresses you verify to forward from.

Your subscription.

Whether you have Kept Pro, which plan, which store, whether it's a trial, whether it renews, and until when. Apple or Google handles your payment; we never see your card details.

Usage analytics, if you leave them on.

• Which features you use, as events with fixed names and simple values: counts, durations, yes or no. For example, that a receipt was captured, or which kinds of filter a search used (a date, a category), never the words searched.
• Your app version, platform, operating system version, and screen size.
• These are linked to your Kept account ID. They never include what's on your receipts, amounts, text you type, file names, your email address, or your name.

Diagnostics.

• When the app crashes or hits an error, a report of what went wrong: the error, the code involved, your app version and device model. It never includes receipt contents.
• When the app checks for updates, it sends your app's version and a random ID for this installation, not your account.
• On Android, Google's on-device document scanner sends Google its own diagnostics (device and app information, performance, and error codes), never the images.

Device information.

• If you allow notifications, a push token that lets us send them to your phone.
• Whether you turned on the app lock. Your phone checks your face or fingerprint itself and tells Kept only whether it passed.

Messages to us. When you email support, your message and email address. When you write from the app's Contact support, the email also includes your app version, your phone's platform and system version, and your Kept account ID, so we can find your account without asking about your receipts.

Records we keep to run Kept.

• How many receipts were read each month, and which fields you corrected (never the values).
• Counts of requests, used to limit abuse, kept for two days.

Network information. Like any online service, our servers see your IP address when the app connects. Our sign in service keeps a history of sign ins, with IP addresses, for security. The company that hosts our website sees your IP address and the pages you visit, in its request logs. We don't use IP addresses to find your location.

How we use information

• To provide Kept: store and sync your receipts across your devices, read them (if you allow it), let you search and export them, receive forwarded email, and send the notifications you've allowed.
• To manage your account and subscription, including sign in codes and verification emails.
• To keep Kept secure and working: prevent abuse, investigate problems, fix crashes, and keep costs in check.
• To improve Kept, using usage analytics (if on) and diagnostics.
• To communicate with you about your account, changes to Kept or these policies, and your support requests.
• To meet legal obligations and enforce our Terms of Use.

We don't use your receipts for advertising, sell them, or use them to train AI models.

Automatic reading with Anthropic

Kept can read your receipts for you with Claude, an AI model made by Anthropic. Kept asks first, after you create your account, and sends nothing to Anthropic unless you allow it.

What's sent, if you allow it:

• your receipt images and PDFs;
• the text of emails you forward (not their formatting);
• the descriptions you type into search, with your category and tag names and today's date, so Kept can turn them into filters.

What isn't sent: your account details or email address. We don't keep your searches.

How Anthropic handles it: under Anthropic's commercial terms and data processing addendum, Anthropic processes this information only on our behalf, as our service provider:

• It may not use it to train its models.
• It deletes it within 30 days, unless it must keep it longer to enforce its usage policy (up to 2 years for content flagged as violating it) or to comply with the law.
• Anthropic stores data in the United States, and may process it in other countries where it operates.

Turning it off: in Settings, Data and privacy, AI reading. Kept then sends nothing more to Anthropic, and new receipts wait for you to enter their details. Turning it off doesn't recall what was already sent.

Who we share information with

We share information only with service providers that help us run Kept. They act on our instructions, under contracts that limit their use of it to providing their service to us, and that require them to protect it at least as well as this policy does:

Notifications name at most a receipt's merchant, never an amount.

We also disclose information:

• if the law requires it, for example in response to a valid subpoena or court order;
• to protect the rights, safety, or security of our users, the public, or Kept;
• as part of a merger, acquisition, or sale of Kept's business. The buyer would be bound by this policy for the information it receives.

We don't sell or "share" personal information as California law defines those terms: we don't exchange it for money or use it for cross-context behavioral advertising. We don't track you across other companies' apps or websites, and Kept has no advertising.

How long we keep information

• Your receipts, files, and account: until you delete them, or your account. Receipts are tax records, which you may need for years, so nothing expires on its own: Kept never deletes a receipt because of its age.
• Receipts you delete: they go to the trash for 30 days, then they're removed from our servers.
• Your account, when you delete it: your receipts, files, and every record tied to your account are deleted right away, and your other phones signed in to Kept are signed out within an hour.
• Backups: we keep encrypted backups to protect against loss:
  • daily database copies for 30 days;
  • monthly copies, and older versions of changed or deleted files, for 12 months.

  So deleted information leaves our backups within 12 months of being deleted: within 13 months for a receipt, counting its 30 days in the trash. Backups don't include sign in sessions or one-time codes.

• Usage analytics: kept until you delete your account, when we ask PostHog to delete them. Turning analytics off stops new events; it doesn't delete past ones.
• Sign in history: 90 days, and deleted with your account.
• Server logs: our hosting provider's logs of requests to Kept's servers, with IP addresses, are kept for [7 days; confirm Supabase plan], then deleted.
• Crash reports: kept by Sentry for [up to 90 days; confirm plan].
• Support emails: deleted 12 months after the conversation ends.
• Service providers: keep information only as long as their service to us requires.

Your choices

• AI reading: Settings, Data and privacy, AI reading.
• Usage analytics: Settings, Data and privacy, Share usage analytics.
• Notifications: your phone's settings for Kept, and Settings, Notifications in Kept for each kind of reminder (quarterly reminders, review nudges, year in review, billing alerts, and the yearly copy).
• Export: Settings, Export all my data gives you every receipt and file, on any plan.
• Correct: edit any receipt's details in the app.
• Delete: in the app, Settings, Data and privacy, Delete account; or at https://spintechhq.com/kept/delete-account, where you sign in to confirm. Deleting your account doesn't cancel a Kept Pro subscription; cancel it in your App Store or Google Play settings.
• Signing out removes your receipts from that phone. Anything that hasn't synced yet is lost, and Kept warns you first.

Your privacy rights

You can ask us to:

• tell you what personal information we have about you;
• give you a copy of it;
• correct it;
• delete it.

Most of this you can do yourself in the app, as above. You can also email support@spintechhq.com, and we'll respond within 45 days. We'll confirm your request comes from your account, for example by asking you to write from your account's email address.

Depending on where you live, state laws such as California's may give you these rights. We extend them to everyone who uses Kept. We won't treat you differently for using them.

Security

• Every connection to Kept is encrypted (TLS).
• Our database, files, and backups are encrypted at rest.
• Each account can reach only its own data. Your sign in is kept in your phone's keychain or keystore.
• On your phone, your receipts are protected by the phone's own encryption, and you can add an app lock.

No system is perfectly secure. If a breach affects your information, we'll notify you as the law requires.

Your phone

Kept keeps a copy of your receipts on each phone you sign in on, so it works offline. Signing out removes it. [Device backups: confirm per DIK-32 whether Kept's data on the phone is included in iCloud and Google backups.]

Children

Kept isn't directed to children under 13, and our Terms require users to be 18 or older. We don't knowingly collect information from children under 13. If you believe a child has given us information, contact us and we'll delete it.

United States only

Kept is offered only in the United States. Your information is stored in the United States. Some of our service providers may process it in other countries where they operate, such as Anthropic for automatic reading, under the same protections.

Do Not Track

Kept doesn't track you across other companies' websites or apps, so there is no such tracking for a browser's Do Not Track signal to turn off. The Kept website uses no advertising or tracking cookies.

Changes to this policy

When we make an important change, we'll tell you in the app or by email before it takes effect, and update the date above.

Contact

Spintech LLC, [mailing address]. Email: support@spintechhq.com.