Legal

Privacy Policy

Last updated 16 October 2026

KEEPR™ is operated by Raajveer Bhatia (“we”, “us”), who decides how your personal data is used (the “Data Fiduciary” under India's Digital Personal Data Protection Act, 2023). This policy covers the website at keeprworld.com, the web app, and the iPhone, iPad and Android apps. We collect only what KEEPR needs, we never sell personal data, and we show no ads.

1. What we collect, and why

We do not collect your contacts, location, card or UPI details, or anything from your device you haven't chosen to give us. If you use Choose from contacts, your phone's own contact list opens and KEEPR receives only the name of the one person you pick: their name is the only thing used. KEEPR never sees their phone number, email or other details, or anyone else in your contacts. KEEPR does not use Face ID or other biometrics.

2. Who can see your data

• You, on any device where you're signed in.
• People you share with in Circle. Friends and group members see your name and exactly what you share with them: shared records, group chat messages, urgent requests, board posts and replies. They never see your phone number or email, or anything you haven't shared.
• KEEPR (the operator) only when needed to run the Service: for support you ask for, to review a report, to prevent abuse or fraud, or when the law requires it. The admin console shows account details (name, email, plan), payments, bug reports and reports, not your records, and never your vault.
• Authorities, only when Indian law requires us to disclose information.

We never sell or rent personal data, and we don't share it for advertising.

3. Service providers

These companies process data for us, only to provide their service, under their own security and privacy terms:

Because some providers are outside India, your data may be processed abroad, as the DPDP Act permits, with the same protections described here.

4. AI features

• AI runs only when you use it: Ask KEEPR, Scan anything or Scan a photo. The request goes from our server to our AI provider, currently Google’s Gemini API; your device never sends data to them directly.
• For Ask KEEPR, we send your question and a summary of your saved records (names, amounts, dates, items), not your vault, Circle messages or account details. For scans, we send only the text or photo you chose, shrunk on your device first.
• We don't keep your AI questions or photos after answering. Important: we currently use Gemini's free tier, under which Google may keep what you send and use it (including human review) to improve its products. So don't put sensitive details (passwords, bank or card numbers, health information) into an AI question or scan. Don't use the AI features if you'd rather Google didn't see that content; everything else in KEEPR works without them.
• If a message suggests someone may be in danger or thinking about self-harm, it never goes to the AI: KEEPR replies with helplines instead.

5. Children and families

KEEPR is made for kids and families. We ask everyone their date of birth once. If you're under 18, a parent or guardian must agree before you use KEEPR: you give us their email, we send them a link, and they choose yes or no. Until they agree, nothing you add is stored on our servers; if they say no, your account and its data are deleted. As the record of consent we keep your date of birth, your parent's or guardian's email, and when they agreed (with a one-way code made from their internet address, never the address itself). Only an adult can pay. For every user, and especially children: we don't show ads, don't do targeted advertising, don't sell data, and don't build behavioural profiles. A parent or guardian can ask us to see, correct or delete a child's data at any time by emailing the Grievance Officer.

6. How long we keep data

• Your records and vault: until you delete them or your account. Deleted records are removed from our live database straight away.
• Group chat messages: deleted automatically after 30 days, or as soon as you delete them.
• Your whole account: Settings → Delete account permanently deletes your account and its data (records, vault, Circle friendships, group memberships, messages, shared records, push registrations, sessions and reviews). Groups you created pass to their next member. App events and bug reports are kept only without your account attached.
• Backups: our database provider keeps rolling backups for disaster recovery; deleted data leaves them as they expire (within about 30 days).
• Payment records: kept, without your account, for as long as Indian tax law requires (up to 8 years).
• Reports: kept while needed to deal with them and to prevent repeat abuse.

7. Security

Everything travels over encrypted connections (HTTPS, with HSTS). Data is encrypted at rest by our providers. Session tokens and sign-in codes are stored only in hashed form. Your Password Vault is end-to-end encrypted with a master password only you know. Sessions end after 30 days without use, and Settings → Sign out everywhere ends them on every device. Only our server can reach the database. No system is perfect: if a breach affecting you ever happens, we will tell you and the Data Protection Board of India as the law requires.

8. Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and who we've shared it with;
• ask us to correct, complete or update it;
• get a copy of it: Settings → Privacy & data → Download my data gives you your records as one file;
• delete it: most of it yourself in the app, all of it with Delete account;
• withdraw your consent at any time (for example by switching off notifications or deleting your account). This doesn't affect what we did before;
• nominate someone to exercise these rights if you die or can't act yourself;
• complain to our Grievance Officer, and if you're not satisfied, to the Data Protection Board of India.

Email the Grievance Officer to use any of these rights. We acknowledge within 24 hours and aim to respond within 15 days.

9. Cookies and tracking

KEEPR uses no advertising or third-party tracking cookies, pixels or analytics tools. The app stores a few things on your device only to work: your session; your preferences (theme, start screen, sounds, vibration, calmer motion); your UPI ID, if you add one to “Ask to pay back” (it goes only into the messages you choose to send, and is deleted when you log out); a random device ID for the app events above (sent only once you're signed in); and a copy of your records so KEEPR opens quickly and works offline. That copy is tied to your sign-in and deleted when you log out. If your sign-in ends by itself before your latest changes were saved, those changes are kept on the device for up to 7 days, only so they can be saved when you sign in again with the same account; logging out deletes them. Your Password Vault is never kept there unencrypted. The Google sign-in button and Razorpay checkout load their own scripts only when you use them.

10. Changes

If we change this policy in a meaningful way, we'll update the date above and tell you in the app before it takes effect.

11. Grievance Officer and contact