Privacy

Who you are dealing with

Kept is made by Akintade Oluwaseun, trading as Kept, an individual developer based in the United Kingdom. For data protection purposes that means I am the data controller for the small amount of information described here. You can reach me at hello@getkept.xyz.

This policy covers the Kept iPhone app and this website. It does not cover Apple's own services, which are governed by Apple's privacy policy.

What stays on your phone

Reading a receipt and scheduling a reminder both happen on the device.

• Text recognition. Kept reads receipts using Apple's Vision framework, which runs entirely on the device. The recognised text can leave, and only as described below.
• Reminders. Expiry notifications are scheduled locally by iOS.

What leaves your phone, and why

Four things leave the device for the app to work. Each is limited to what the task actually requires.

Your records, through your own iCloud

iCloud sync is on for every user, with no setting to turn it off. Kept uses SwiftData with CloudKit to sync purchases, warranties, and receipt photos through your own private iCloud account. Those records sit in your iCloud private database, which Apple encrypts and which I cannot read. A purchase holds the merchant, total, coverage dates, return window, and any notes or edits you make, and the receipt photograph syncs with it.

Receipt text, so it can be structured

After Vision reads a receipt on your device, Kept sends the recognised lines of text and their positions on the page to its extraction service on Cloudflare Workers (/extract). That service passes the text through Cloudflare AI Gateway to OpenAI, the only AI processor. Free use is processed with gpt-4o-mini; verified Kept Pro use is processed with gpt-4o. OpenAI returns the structured fields you then confirm: merchant, item, date, total, and a suggested coverage length.

Request bodies are not logged at the gateway, and the extraction service writes nothing to storage — the text is held in memory for the length of the request and then discarded. Under OpenAI's API terms, requests sent through it are not used to train its models, though OpenAI may retain a request briefly for its own abuse monitoring.

Receipts can contain more than the thing you bought. If a receipt shows something you would rather not send, you can edit the record by hand instead of running extraction on it.

Wallet pass details, so the pass can be signed

Apple requires that the private key used to sign a Wallet pass never sit inside an app. When you add a purchase to Wallet, Kept sends the merchant, item name, total, currency, purchase date, coverage end date, and a serial number identifying the pass to its signing service on Cloudflare Workers, which returns a signed pass. Those fields are processed in memory and are not stored.

Subscription state, so Kept Pro works

Kept Pro is handled by RevenueCat, Inc., which records your purchase and entitlement status against an app user identifier derived from your iCloud account. Apple processes the payment itself — your card details never reach RevenueCat or me.

One technical detail

The extraction and signing services see the IP address your request comes from, because that is how requests are rate limited to thirty per minute. Addresses are used for that check and are not stored, logged against your records, or used to build any profile.

What Kept never does

• No advertising, and no advertising identifiers.
• No analytics or telemetry SDKs. Kept does not measure how you use it.
• No tracking across apps or websites, and no data shared for anyone else's marketing.
• No selling of personal information, in any form, to anyone.
• No account. Kept does not ask for your name, email address, or a password.

RevenueCat is the app's only third-party SDK, and it exists solely to handle subscriptions.

The legal basis for processing

Under the UK GDPR, processing needs a lawful basis. Two apply here:

• Performance of a contract (Article 6(1)(b)) — structuring your receipts, signing Wallet passes, syncing your records through your iCloud, and running your subscription are the service you asked for.
• Legitimate interests (Article 6(1)(f)) — checking an IP address against a rate limit keeps the service available and resistant to abuse, which is a narrow interest that does not override your rights.

Where your data is processed

Cloudflare, which hosts the extraction service on Workers and provides AI Gateway, and OpenAI, the only AI processor, operate outside the United Kingdom, including in the United States, so receipt text may be processed abroad. Those transfers rely on the safeguards in each provider's data processing agreement, which incorporates the UK International Data Transfer Addendum to the European Commission's Standard Contractual Clauses. RevenueCat processes subscription data on the same basis. Purchases, warranties, and receipt photos that sync through iCloud are processed by Apple under Apple's privacy policy.

How long anything is held

• On your device — until you delete it. Nothing expires on its own.
• In your iCloud — purchases, warranties, and receipt photos sync to your private iCloud account until you delete them. Settings → Data → Delete all data removes that copy as well as the one on your device. I do not hold that copy.
• Extraction and pass signing — for the duration of a single request, in memory. Nothing is written to storage.
• Subscription records — held by RevenueCat while your subscription and its history are relevant, under their retention terms.

To remove everything the app holds, open Settings → Data → Delete all data in Kept. That deletes the records on your device and the copy in your iCloud. Deleting the app also removes its local database.

Your rights

Under UK data protection law you have the right to access your personal data, to have it corrected or erased, to restrict or object to how it is processed, and to receive it in a portable form.

In practice most of these you can exercise yourself, because your records are on your device and in your own iCloud, and I hold no copy of them. Settings → Data → Delete all data erases both copies. Kept keeps no account and no identifier that would let me look you up, so for anything held by a processor I may need details from you to locate it. Write to hello@getkept.xyz and I will respond within one month.

If you think your data has been handled improperly you can complain to the Information Commissioner's Office at ico.org.uk. I would rather you raised it with me first, but the route is yours.

Children

Kept is not directed at children under 13 and I do not knowingly collect information from them. If you believe a child has provided personal information through the app, contact me and I will remove what I can.

Changes to this policy

When this policy changes, the date at the top of the page changes with it. If a change materially affects what leaves your device, Kept will tell you inside the app rather than relying on you to re-read this page.

Contact

Questions, corrections, or requests about any of the above go to hello@getkept.xyz.