中文

Keepsday Privacy Policy

Last updated:

This policy explains what leaves your device when you use Keepsday and why.

1. Overview

Keepsday does not require a name, email address, or password to register. A guest account is created when you first use the online service. A random user identifier and device identifier authenticate requests, apply creation limits, and verify subscription access. These identifiers can still be associated with the same guest or device, so we do not describe them as fully anonymous data. Most memory content stays on your device.

2. Information we process

3. Information that stays on your device

Your saved memory titles, notes, voice recordings, dates, places, and collection organization are stored locally by Keepsday and are not uploaded as part of the normal creation service. A selected photo is uploaded only after you start a creation.

Place searches and maps use Apple MapKit. When you use these system services, Apple may process search requests and necessary location and network information under its privacy practices. This does not mean Keepsday submits your saved memory locations or voice recordings to the AI model.

4. AI image processing

Before the first photo upload for creation, the app separately explains the purpose and recipients and asks for your explicit consent. Declining or dismissing the prompt cancels the creation without uploading the photo. After consent, later creations use the same process. You can withdraw consent in Settings → AI image processing.

To create a magnet, the selected photo is uploaded over an encrypted connection to the private object storage we use. Keepsday’s server submits it to OpenRouter, which routes it to Seed (ByteDance Seed’s Seedream image model). The request contains the selected photo and the generation instructions needed for the creation. The result is then returned and stored.

OpenRouter and the model provider receive, transmit, and process this content. They may also process necessary request metadata, security, abuse-prevention, or compliance records under the applicable service arrangements and legal requirements. We do not describe all third-party processing as occurring only during a single generation; their processing and retention rules are discussed below.

5. Retention

Media copies we control. Uploaded photos and generated images are retained on servers and object storage under our control for no longer than 30 days from their respective upload or generation dates, and are removed within that period. Cloud processing storage is not a permanent backup service. Clearing a cloud copy does not actively delete content already saved on your device.

Service records. Task, usage, subscription, abuse-prevention, security, and support records are retained only for as long as reasonably needed to provide the service, handle requests, meet legal obligations, or resolve disputes. They are not necessarily deleted at the same time as images.

Third-party systems. The 30-day period above applies to media copies we control, not uniformly to all data in independent third-party systems. Their retention of request content, logs, and metadata depends on the specific service, privacy settings actually enabled, and applicable arrangements. This policy does not promise end-to-end zero retention. Using third-party services does not remove our data-protection obligations under applicable law.

6. Sharing

We do not sell personal information or use Keepsday data for cross-app advertising or tracking. Describing third parties is not blanket permission for undisclosed purposes. Where separate notice or consent is legally required, it must be provided or obtained before the relevant processing.

7. Your choices and deletion

System permissions. You choose whether to grant photo-library, camera, microphone, and location permissions and can change them in iOS Settings. You can delete individual local memories in the app. Deleting a local memory or uninstalling the app does not delete the server-side guest account or automatically cancel a subscription.

Withdraw AI consent. Open Settings → AI image processing and choose Withdraw consent. A new creation will then require your consent again. You can still view existing memories and manage subscriptions. Withdrawal does not affect processing previously authorized; submitted tasks may continue, and uploaded photos are not automatically deleted. To request deletion, use the account-deletion option below.

Delete a guest account. Confirm Settings → Delete guest account and related data. The app requests deletion of the old guest account, revokes its access credentials, and clears local memories, drafts, media, and AI consent. The server removes the old account’s authentication, task, upload, detailed usage, and subscription association records and schedules cleanup of its stored media and RevenueCat customer profile. External-resource cleanup may be delayed or retried after failures; an account-deleted confirmation does not mean every third-party copy has been immediately erased. Media copies we control remain subject to the maximum 30-day period above.

Necessary retained information. To prevent repeated free allowances, subscription-limit circumvention, and unsafe deletion retries, we retain the device identifier and aggregate usage without retaining their association with the old account’s photos, memories, or detailed tasks. Deletion confirmation records contain a credential digest and device identifier, remain valid for 7 days, and are removed by cleanup after expiry. Pending external cleanup jobs retain the necessary resource identifiers until completed. Deleting a Keepsday account does not automatically erase Apple transaction records or security and compliance records that third parties retain under applicable law or arrangements.

After deletion, continuing to use the online service creates a new guest account. Keeping the device identifier does not restore old memories or reset used free allowances. Account deletion does not cancel Apple auto-renewal; use Apple subscription management separately.

If deletion fails, you cannot access the app, or you wish to ask about, access, correct, export, or delete relevant information, contact the email below. We may request the minimum information necessary to verify and handle your request under applicable law. Content stored only on your device and unavailable to us must be managed on that device.

8. Security and changes

We use access controls, encrypted network transport, private object storage, and limited credentials designed for the service. No system is completely secure. We may update this policy when the product or its data practices change and will revise the date below.

9. Contact

Privacy questions and deletion requests can be sent to keepsday-support@orolumi.com.