Privacy Policy

1. What We Collect

Your account

Your email address and name. If you sign in with Google or Apple, we receive your email, name and profile photo from them. If you sign up with an email and password, your password is handled by Firebase Authentication and we never see it.

What you tell us during onboarding

Optional planning preferences: travel style, household size, budget comfort, and dietary needs such as vegetarian, vegan or gluten-free. You can skip this. Dietary needs can say something personal about you, so we use them only to shape planning suggestions. We never share them with advertisers and we never sell them.

What you create

Your plans, recipes, sections, itineraries, budgets, checklists, comments, and any photos you upload. This is the app, so we store it until you delete it.

Who you share with

The circles you create, the people you invite, and their names and profile photos, so members can see who else is in a plan.

Technical data

A device token if you turn on notifications. Error reports when something breaks, which include the error message and where in the app it happened. A record of when you tap a booking link, which stores the link, the plan, and your user ID.

2. What We Do Not Collect

No location data. The app never asks for your device location. When you search for a place, we send only the text you typed.

No payment or billing information. We do not take payments in the app.

No advertising identifiers, ad networks, or analytics SDKs. We do not track you across other apps or websites, we do not sell your data, and we do not build profiles for advertising.

3. Why We Collect It

To run the app: to sign you in, store the plans you create, show them to the people you invite, and send the notifications you asked for. We use your planning preferences to shape suggestions, and error reports to find and fix bugs. We count taps on booking links to understand which parts of the app are useful and because we earn a commission on bookings.

4. Who Processes Your Data

• Google Firebase: sign-in, database, file storage, server functions and push notifications. Your account and everything you create live here.
• Google Maps Platform: when you search for a place, we send that search text to look up the location, address and photos.
• Anthropic: when you paste notes or a link and ask Keeps to build a plan from them, that text is sent to Anthropic’s Claude API to structure it. It is not used to train models.
• Pexels: stock photos for plan covers. We fetch images; we do not send them anything about you.
• Resend: sends transactional email such as circle invitations.
• Google reCAPTCHA, via Firebase App Check: on the website, to tell real users from bots.
• Cloudflare: hosts the app.

Booking.com and Viator links in the app are ordinary outbound links with a referral code. We earn a commission when you book. We do not send them your name, email or anything else about you. Once you land on their site, their privacy policy applies instead of ours.

5. Who Else Can See Your Plans

Only people you invite. A plan is private to you until you share it with a circle, and circle members see what you put in that plan.

If you publish a plan, anyone with the link can open it. Treat a published plan as public.

6. How Long We Keep It

We keep your data while your account is open. Delete a plan or a recipe and it is removed from the app.

You can delete your whole account from inside the app. Open your profile, tap the account menu in the top corner, then Keeps Account, then Delete Account. It happens straight away, and it removes your plans, your recipes, your photos, your profile and your sign-in credentials.

Two things work differently, and we would rather tell you than let you assume. A circle you created passes to another of its members rather than being destroyed, so a shared space does not disappear for people who did not ask for that. And we keep our records of clicks on booking links, because we are paid on them, but we disconnect those records from you.

Deleted data can also sit in our encrypted backups for up to 7 days before they are cycled out.

You can still email [email protected] if you would rather we did it for you.

7. Data Security

Data is stored on Google Firebase and encrypted in transit. Access to your plans is enforced by server-side security rules, so another user cannot read a plan you have not shared with them. No system is perfectly secure, and we cannot promise that it is.

8. Your Rights

You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Email [email protected]. Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including the right to object to processing and the right to lodge a complaint with your data protection authority.

9. Children

Keeps is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will remove it.

10. Changes

If we change this policy in a way that affects what we collect or who sees it, we will update the date at the top and tell you in the app.

11. Contact

Cbook Inc.
16133 Ventura Blvd, 7th Floor
Encino, CA 91436
United States
[email protected]

This policy describes our practices in plain language. It is not legal advice, and we are not a legal professional. If you need advice about your own rights, speak to someone qualified.