Privacy Policy

Last updated: April 21, 2026

Keepsule ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Data Controller: For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, the data controller responsible for your personal data is Abdoul Aziz Paye. You can contact the data controller at keepsuleapp@gmail.com.

1. Information We Collect

Account Information: When you create an account, we collect your email address, chosen handle, and display name. You may optionally add a profile photo and bio.

Capsule Content: The text, images, and media you include in your capsules are stored securely in our systems. We do not read, analyze, or share the private contents of your capsules.

Social & Activity Data: Comments, likes, Space memberships, share records, follows, reports, and blocks you create are stored to operate the social features of the App.

Location Data (Optional): If you choose to attach a location to a capsule, we store the latitude, longitude, and optional location label you provide. Location is never collected without your explicit action.

Device & Technical Data: We automatically collect technical information necessary to operate the App, including your device model, operating system version, app version, language preference, approximate geographic region, and Internet Protocol (IP) address. This data is used for security, service operation, and diagnostics.

Push Notification Tokens: If you enable notifications, we store an anonymous device token (provided by Apple Push Notification service or Firebase Cloud Messaging) so we can deliver notifications to your device. You can disable notifications at any time in your device's system settings.

Usage Data & Crash Reports: We collect anonymized analytics and crash diagnostics to improve the app experience, including feature usage frequency, session duration, and technical error information.

Subscription Data: If you subscribe to Keepsule Plus, your purchase is processed by Apple through the App Store. We do not collect or store your payment details (credit card numbers, billing address). We receive a subscription status (active/expired) and transaction identifiers from Apple and RevenueCat to manage your access to premium features.

Website Local Storage: Our marketing website (keepsule.co) uses your browser's local storage only to remember your theme preference (light/dark). We do not use advertising cookies or cross-site tracking.

2. How We Use Your Information

• To provide and maintain the Keepsule service
• To send you notifications when your capsules unlock
• To improve app performance and fix bugs
• To communicate important service updates

3. Data Storage, Security & International Transfers

Your data is stored using Firebase (Google Cloud Platform) with industry-standard encryption in transit (TLS) and at rest. Capsule content is stored in Firestore and Firebase Storage with security rules that ensure only you can access your private capsules.

International Data Transfers: Our infrastructure providers (Google / Firebase) primarily process data in the United States. If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, your personal data will be transferred to and processed in the United States. These transfers are made in reliance on Standard Contractual Clauses approved by the European Commission and, where applicable, the UK International Data Transfer Addendum, which provide appropriate safeguards for your personal data.

Data Breach Notification: In the event of a data breach affecting your personal information, we will notify you and the applicable supervisory authorities without undue delay, and within 72 hours where required by law (GDPR Article 33). Notifications will be sent to your registered email address and/or through the App.

We do not sell, trade, or share your personal data with third parties for advertising or marketing purposes.

4. Public Capsules & Spaces

If you choose to make a capsule public or post to a Space, that content becomes visible to other Keepsule users. You can control visibility on a per-capsule basis. Private capsules are never visible to anyone but you.

5. Capsule Sharing

When you share a capsule via a share link, a temporary record is created containing your display name, profile photo, and capsule metadata (title, type, cover image, and lock status). The capsule body text is never included in the share preview.

Share links expire automatically after 10 minutes and are permanently deleted from our systems. If a recipient accepts the share, a snapshot of the capsule may be stored in their account so they can view or save it in Keepsule, depending on the capsule's visibility and unlock state. You can revoke a share link at any time before it is accepted, which immediately deletes the share record.

Anyone with an active share link can view the capsule preview and accept or decline it. Share links responsibly — treat them like a password during their short lifetime.

6. Data Retention

Your personal data is retained as long as your account is active. If you delete your account, your personal content (capsules, profile information, uploaded media, comments, likes, activity history, and other account-linked records) will be permanently deleted within 30 days.

Exceptions: Anonymized or aggregated analytics and crash diagnostics may be retained beyond 30 days in accordance with our third-party service providers' standard retention schedules (up to 14 months for Firebase Analytics and Crashlytics) for legitimate business purposes such as product improvement, security, and fraud prevention. This data cannot be traced back to you individually. Additionally, we may retain information for longer periods where required by law, to enforce our Terms, or to resolve disputes.

7. Third-Party Services

We use the following third-party services:

• Firebase Authentication — for secure sign-in
• Firebase Crashlytics — for crash reporting and stability
• Firebase Cloud Storage — for media storage
• RevenueCat — for subscription management and receipt validation. RevenueCat receives your anonymous user ID and subscription status. See RevenueCat's Privacy Policy.

8. Legal Basis for Processing (GDPR / UK GDPR)

If you are in the EEA or UK, we process your personal data on the following legal bases:

• Contractual necessity: to provide the Keepsule service you signed up for (storing your capsules, delivering notifications, managing your subscription).
• Legitimate interests: to operate and secure the App, detect fraud and abuse, moderate user-generated content, and improve features. We balance these interests against your rights.
• Consent: for optional features such as location attachment, push notifications, and non-essential analytics. You can withdraw consent at any time in the App settings.
• Legal obligation: where required by applicable law (e.g., responding to valid legal process or preserving evidence of abuse).

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete information.
• Deletion (Right to be Forgotten): request deletion of your account and associated data. You can delete your account directly in the App settings.
• Portability: export your capsule data in a structured, commonly used format.
• Restriction & Objection: request that we restrict or stop certain processing activities based on your particular situation.
• Withdraw Consent: where we rely on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
• Lodge a Complaint: if you are in the EEA or UK, you have the right to lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at keepsuleapp@gmail.com. We will respond within 30 days.

10. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: what categories of personal information we collect, use, and disclose.
• Right to Delete: request deletion of your personal information, subject to legal exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt-Out of Sale or Sharing: Keepsule does not sell or share your personal information as those terms are defined under the CCPA/CPRA. We do not engage in cross-context behavioral advertising.
• Right to Limit Use of Sensitive Personal Information: we do not use sensitive personal information for purposes beyond those permitted by law.
• Right to Non-Discrimination: we will not discriminate against you for exercising any of these rights.

To exercise these rights, contact us at keepsuleapp@gmail.com.

11. Children's Privacy

Keepsule requires all users to be at least 13 years old, consistent with our Terms of Service. Keepsule is not intended for, and we do not knowingly collect personal information from, children under 13.

We rely on self-reported age at sign-up and do not have independent mechanisms to verify user age. If we become aware that a user is under 13, we will terminate their account and delete their personal information promptly. If you are a parent or guardian and believe a child under 13 has provided us with personal information, please contact us immediately at keepsuleapp@gmail.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the App or by email, and update the "Last updated" date at the top of this page. Your continued use of the App after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

If you have questions about this Privacy Policy or would like to exercise any of your rights, please contact us at keepsuleapp@gmail.com or visit our Contact page.