Privacy Policy

Last updated: 29 July 2026

1. Who we are

Keepio ("we", "us", "our") is a personal document management app. We are the data controller for the personal data processed through the Keepio app.

2. What data we collect

Account data: Your email address, name, and encrypted password when you create an account.

Document data: Photos of documents you scan and the information extracted from them (titles, dates, reference numbers, provider names). This is the core data you choose to store in Keepio.

Chat data: Questions you ask Keepio and the answers provided, stored to maintain your conversation history.

3. How we use your data

We use your data solely to provide the Keepio service to you:

• To store and organise your documents
• To extract information from scanned documents using AI
• To answer your questions about stored documents
• To send you reminders before documents expire
• To authenticate your account

4. Legal basis for processing (GDPR)

We process your data based on:

• Contract: Processing necessary to provide the Keepio service you signed up for.
• Consent: You explicitly choose which documents to scan and store. You can delete any document at any time.
• Legitimate interest: To improve the app and prevent fraud.

5. How we store your data

Your data is stored securely using Supabase (hosted on AWS in the EU/US). All data is encrypted in transit (TLS) and at rest. Document images are stored in private storage buckets accessible only to your account. Row Level Security ensures you can only access your own data.

6. AI processing (Anthropic)

Keepio uses a third-party AI service — the Claude API, operated by Anthropic PBC (United States) — for two features:

• Scanning a document: the photo you take or choose is sent to Anthropic to extract its details (title, dates, reference numbers, provider names).
• Ask Keepio: the question you type, together with the details of documents you have saved, is sent to Anthropic to generate an answer.

No other data is sent — no contacts, location, identifiers, or anything from outside the app. Nothing is sent until you give explicit permission in the app, which is asked before the first scan or question and can be reviewed or withdrawn at any time in Settings → Privacy.

Anthropic processes this data solely to return the response, does not use it to train AI models, does not retain it after the request is completed, and does not use it for advertising. Anthropic is contractually required, under its commercial terms and data processing agreement, to protect your data to a standard equal to this policy.

7. Data sharing

We do not sell your data. We do not share your data with third parties for marketing. Your data is only shared with:

• Supabase: Our database and authentication provider
• Anthropic: For AI document reading and Q&A (data not retained)

8. Your rights (GDPR)

You have the right to:

• Access: Request a copy of all your data
• Rectification: Correct any inaccurate data
• Erasure: Delete your account and all associated data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing of your data
• Withdraw consent: You can delete individual documents or your entire account at any time

9. Data retention

Your data is kept for as long as you have an active account. When you delete a document, it is permanently removed. When you delete your account, all associated data (documents, images, reminders, chat history) is permanently deleted.

10. Children

Keepio is not intended for children under 16. We do not knowingly collect data from children.

11. Contact us

For any privacy-related questions or to exercise your rights, contact us at:
support@keepio.xyz