KeepSake
Privacy
Signing in
You sign in with your email address and a six-digit code emailed to you by Supabase, the service KeepSake’s servers run on. Your address is kept with your account, and your phone stays signed in until you sign out.
What KeepSake keeps
On its servers, at Supabase:
- your email address, and the name and photo you set;
- each keepsake you seal: its photos, video, sound, letters, songs, title and message, and how it is laid out;
- who is on your Circle, the lines you leave each other, and the names and photos you give people, which only you see;
- your labels, and for each keepsake whether you have opened, archived or deleted it, and where it sits;
- your invites: when each was made, opened, used or cancelled and by whom, with a scrambled form of its code, never the code;
- a token for each phone you allow notifications on, and which notifications you want.
On your phone: a keepsake stays there until you seal it, with copies of what you have opened and your settings.
Who sees what
- A keepsake you seal: you and the person you send it to. One for someone new: you, and whoever takes up its invite.
- People on your Circle: your name and photo.
- Anyone who opens your invite, by its link or its code: your name and photo, until the invite is used, cancelled or 14 days old.
- When you open a keepsake, its sender gets a notification saying so, unless either of you has turned that notification off.
Keepsakes are not end-to-end encrypted: whoever runs KeepSake’s servers can read them.
Other services
- Supabase keeps everything above and sends the sign-in email.
- Notifications pass through Expo’s push service and Apple. Each holds a name and a few words, such as “sent you a keepsake”, never what a keepsake holds.
- To find a song, KeepSake sends the words you search for, or the link you paste, to Apple, Spotify or YouTube; the song’s artwork and preview come from them.
- What you share leaves through your phone’s share sheet, to whoever you choose.
KeepSake has no ads, analytics or trackers.
Your phone
KeepSake asks for the camera and microphone, to record video and sound, and for notifications. It reads only the photos, videos and sound files you pick, and the clipboard when you paste a song’s link.
Deleting
- Deleting a keepsake takes it out of your view. The other person keeps theirs, and it stays on KeepSake’s servers: a sealed keepsake never changes.
- You can cancel an invite before it is used, remove a line you left, and change your name and photo.
- Signing out takes the phone off your notifications and clears KeepSake’s drafts, files and caches from it.