Effective date: July 30, 2026
Everything you do in this app stays on your device. There are no accounts, no ads, no analytics, and no tracking, and we never sell or share your information.
The one exception is the optional in-app purchase. Buying or restoring it sends a purchase receipt and an anonymous install ID to our purchase-management provider so the unlock can be verified — no name, email, or payment details. That is the only data that ever leaves your phone, and it is described in full below.
This data lives in a local database on your phone. It is never uploaded anywhere. We have no servers and no way to see it.
The optional "Full Catalog" unlock is a one-time purchase processed entirely by Apple (App Store) or Google (Google Play). We never see or store your payment information.
To confirm that a purchase is genuine and to make "Restore Purchases" work when you switch or reset a device, the app uses RevenueCat, a purchase-management service. RevenueCat receives the store's purchase receipt, a randomly generated anonymous ID that identifies the install (not you), and basic device and country information. It never receives your name, email address, Apple ID, Google account, or payment details, and we do not use it for advertising or tracking. See RevenueCat's privacy policy.
Your underlying purchase record is held by your Apple or Google account, so your unlock survives even if this app or RevenueCat goes away.
The app is family-friendly and collects no data from anyone, including children.
Your data is yours. You can erase it at any time from Settings → Danger Zone inside the app ("Reset year" or "Reset everything"), or by uninstalling the app, which removes the local database entirely.
If a future version of the app changes how data is handled (for example, if optional online leaderboards are added), this policy will be updated and the change will be described in the app's release notes before it takes effect.
Questions about this policy: jared@keepsakecurators.com