Keepr Privacy Policy

This Privacy Policy describes how Keepr, a product of Aeru Labs (“Keepr”, “we”, “us”, “our”), handles personal data. It applies to the Keepr service delivered through WhatsApp, the Keepr web application, and the pages of this website that describe them.

By using Keepr you accept the practices set out in this policy. If you do not agree with them, please do not use the service. Keepr is currently in development, and this policy will be revised as the product develops.

For the purposes of this policy, personal data means information that satisfies each of the following:

• it relates directly or indirectly to a living individual;
• it makes it practicable, whether on its own or together with other information in our possession, to identify that individual; and
• it exists in a form in which access to or processing of the data is practicable.

The content you send to Keepr is treated as personal data throughout this policy, because it is stored against your account and is capable of identifying you.

The table below sets out the data we collect, the point at which we collect it, and the purpose for which it is used. Fields marked with an asterisk (*) are mandatory — without them Keepr cannot provide the service.

We do not require your legal name, your postal address, or any payment details in order to save and return your items.

Keepr is delivered through WhatsApp, which is operated by Meta Platforms and is not owned or controlled by Aeru Labs. When you send a message to Keepr, WhatsApp transmits to us your phone number, your display name, and the content of that message. WhatsApp's own privacy terms govern the handling of your data on its platform, and we would encourage you to read them.

We may also receive technical and aggregate information from the infrastructure, storage, and analytics providers that support the service. We do not purchase personal data from data brokers, and we do not enrich your account with data acquired from external sources.

We do not sell, rent, or trade personal data. We do not use the content you send to Keepr for advertising, and we do not use it to build a profile of you. Personal data is disclosed only in the following circumstances:

• Service providers. Hosting, storage, transcription, and analytics providers that process data strictly on our instructions and are not permitted to use it for their own purposes.
• Legal and regulatory obligations. Where disclosure is required by law, by a court, or by a regulator with jurisdiction over us.
• Protection of persons. Where we reasonably believe disclosure is necessary to prevent serious harm to any person, or to investigate suspected abuse of the service.
• With your consent. In any other case, we will seek your consent before disclosing your personal data.

Some of the third-party processors described above operate facilities outside your country of residence, and your data may be transferred to and processed in those jurisdictions.

This website, and content you save in Keepr, may contain links to third-party websites. Those sites are governed by their own privacy policies and are outside the scope of this one. We accept no responsibility for the content of third-party sites or for the manner in which they handle your data.

Your items are stored and processed on infrastructure operated by third-party cloud providers. These facilities may be located outside your country of residence, and by using Keepr you consent to that transfer.

Where data is transferred internationally, we require the receiving provider to maintain data protection standards consistent with this policy, and to process the data only for the purposes for which we supplied it.

We maintain technical and organisational measures appropriate to the nature of the data we hold. Data is encrypted in transit, and access to stored content is restricted to those personnel who require it to operate and support the service.

No method of transmission or storage is completely secure. We take reasonable steps to protect personal data, but to the maximum extent permitted by law we do not accept liability for unauthorised access, disclosure, or loss arising from circumstances outside our reasonable control. Where a breach affecting your data occurs, we will notify you promptly and describe the scope of what we know.

The content you send to Keepr belongs to you. You may submit a data access request or a data correction request at any time, and we will respond within 30 calendar days of receiving sufficient information to verify your identity. We do not charge for responding to such requests.

Access and correction

You may request confirmation of the data we hold about you, a copy of that data in a usable format, and the correction of any data that is inaccurate.

We may decline a request, in whole or in part, where any of the following applies:

• we are unable to verify, to our reasonable satisfaction, that you are the account holder;
• complying with the request would disclose the personal data of another individual;
• we are directed or prevented from complying by law, a court, or a regulator with jurisdiction over us;
• the data is relevant to an ongoing investigation, dispute, or legal proceeding;
• the request is manifestly unfounded, excessive, or repetitive in nature;
• you have not supplied sufficient information for us to locate the data or to make the correction requested; or
• we are not satisfied that the data recorded is inaccurate.

Withdrawal of consent

You may withdraw your consent to our processing of your personal data at any time. Because that data is what the service operates on, withdrawal will ordinarily mean we can no longer provide Keepr to you, and your account will be closed.

Erasure

You may request the deletion of individual items or of your account in its entirety. We may decline an erasure request where retention is required by law, or where deletion is not technically practicable — for example, where data already exists in backup media. In that case the data is isolated from active use and removed on the ordinary backup cycle.

How to make a request

Keepr is intended for adults. You may not use the service if you are under the age of 18, and we do not knowingly solicit or collect personal data from anyone under that age.

Where we become aware that an account has been created by a person under 18, we will close the account and delete the personal data held against it. If you believe a child has been using Keepr, please tell us so that we can act.

We retain your items for as long as your account remains active, or for as long as is necessary to provide the service to you. Retention beyond that period occurs only where required by law.

• Deleting an individual item removes it from your account immediately, and it is purged from backup media on the ordinary backup cycle.
• Closing your account deletes your stored items and your phone number, subject to any retention obligation imposed by law.
• Technical, security, and error logs are retained for a limited period and then discarded.

We may revise this policy from time to time to reflect changes to the service, to our practices, or to applicable law. Revisions are indicated by the “last updated” date shown at the top of this page.

Where a change materially affects how your data is handled, we will provide notice through the service before that change takes effect. Your continued use of Keepr after a revision constitutes acceptance of the revised policy.

Cookies are small amounts of data stored on your device by your browser when you visit a website. They allow a site to recognise your browser between requests and to record limited information about how the site is used.

What we use them for

• Maintaining your session so you remain signed in to the Keepr web application as you move between pages.
• Remembering interface preferences so they persist across visits.
• Measuring how the web application performs and which features are used, so we know what to improve.

Managing cookies

Most browsers allow you to view, block, or delete cookies through their settings. Blocking cookies is your right and we will not obstruct it, but note that session cookies are required to stay signed in — disabling them will limit or prevent use of the Keepr web application.

Do Not Track

Some browsers transmit a “Do Not Track” signal indicating that you do not wish to be tracked across websites. There is no agreed industry standard for responding to that signal, and third-party services that set their own cookies may not honour it. We do not accept responsibility for the cookie practices of third parties.