KeepSeek Privacy Policy

Draft of August 31, 2026

1. Who we are

KeepSeek ("KeepSeek," "we," "us," "our") is a service that helps a person (a "Keeper") build a digital archive of family history — photos, keepsake items, the people behind them, and the stories attached to them — and share it with invited family members (a "Seeker").

This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices available to you, whether you are a Keeper, a Seeker, or someone whose information a Keeper has added to their collection without creating an account themselves.

Legal entity: Keepseek LLC, a North Carolina limited liability company, located at 4030 Wake Forest Road, Ste. 349, Raleigh, NC 27609. Contact: hello@mykeepseek.com

2. The two kinds of accounts on KeepSeek

• Keepers create and control a collection: they add items, photos, stories, and people, and decide who to invite.
• Seekers are invited by a Keeper to view a specific Keeper's collection. A Seeker's access is read-only and is granted (and can be revoked) by the Keeper who invited them.

Both Keepers and Seekers create an account (email and password) to use KeepSeek. This policy covers both.

3. Information we collect

3.1 Information you give us directly

When you create an account (Keeper or Seeker): name, email address, and password. Passwords are stored by our authentication provider (Supabase) in hashed form — we do not store or have access to your plaintext password.

When you build a collection (as a Keeper):

• Items you add to your archive: photos and videos of keepsake objects, captions, written stories, and audio or video recordings you make describing an item.
• People you add to your family tree: first and last name, relationship to you (e.g., grandmother, cousin), which side of the family, birthdate, generation, and photos of that person.
• Voice and video recordings: if you record yourself (or narrate on behalf of someone else) answering a prompt about an item's story, that recording is sent to our transcription provider to be converted to text (see Section 5).

Important — information about people who are not KeepSeek users: Because KeepSeek is built around family history, a large part of what a Keeper stores is information about other people — parents, grandparents, children, and other relatives, including people who are deceased and people (such as young children) who cannot create their own account. That information — names, birthdates, relationships, and photos — is provided to us by the Keeper, not by the person it describes. See Section 9 for how we handle this.

When you invite someone (as a Keeper): the invitee's name and email address, so we can send the invitation on your behalf.

When you communicate with us: anything you send through our feedback tool, support replies, or direct correspondence.

When you ask to hear from us without creating an account: if you leave your email address in the sign-up form on our website, we store that address, your name if you give one, and which page you left it on. That is all we store, and we use it only to send you the email you asked for. See Section 8 for how to stop it.

3.2 Information collected automatically

• Account and usage records: login timestamps, trial status, and basic activity needed to operate the service (e.g., which items are in draft vs. published state).
• Functional browser storage: keeping you signed in, and saving an in-progress form (like a half-finished item you're adding) so you don't lose it on an accidental reload.
• Analytics: we use two analytics services — PostHog and Google Analytics — to understand how people find KeepSeek and where they get stuck. Both set cookies or equivalent browser storage. Section 3.2.1 describes exactly what they can and cannot see, and Section 3.2.2 describes how to turn them off.

We do not use advertising trackers or ad pixels, we do not show ads, and we do not share analytics information with advertisers or data brokers.

3.2.1 What our analytics can and cannot see

Both services are deliberately configured more narrowly than their own defaults, because a KeepSeek collection contains private family material.

What they receive:

• A pseudonymous identifier for your browser, and — once you sign in — your KeepSeek account ID (a random string, not your name or email).
• Which pages you visit, with every address reduced to its general shape before it is sent. A page about one of your keepsakes is reported as /item/:id — never the address of your actual item. The same applies to pages about individual people and to your collection's own address.
• A short, fixed list of events we defined by name — for example, that an item was started, given a title, or finished; that an invitation was sent; that an account was created.
• Standard technical information any website receives: approximate location derived from your IP address, device and browser type, and the site or search campaign you arrived from.

What they never receive:

• Your name or email address, or your collection's web address (which is built from your name).
• Any photo, video, story, caption, item name, or relative's name from your collection.
• Anything you type into KeepSeek.
• The web addresses of individual items or people, as described above.
• A recording of your screen. Session replay is switched off.
• An automatic record of everything you click. That feature captures on-screen text — which in a collection means item names and relatives' names — and is switched off.

Where each one runs: Google Analytics runs only on our public marketing pages (the home page and the blog) and is switched off the moment you enter the app itself, so it does not see pages relating to your collection. PostHog runs across both, under the limits above.

3.2.2 Cookies and your choice

Where local law requires your consent before analytics cookies may be set — including the EU, the UK and the EEA — KeepSeek shows a banner on your first visit and loads nothing until you choose. If you decline, no analytics scripts are loaded at all.

Elsewhere, analytics runs by default and you can switch it off at any time using the Cookie settings link in the footer. Choosing to decline stops both services from collecting anything further.

Whether that banner is shown is decided from your browser's own time-zone setting. We do not use a geolocation lookup service for this, so nothing about you is sent anywhere in order to make that decision.

The cookies that keep you signed in are strictly necessary for the service to work and are not covered by that choice.

3.3 Payment information

KeepSeek Premium is a paid subscription, and payments are processed by Stripe. You enter your card details on Stripe's own checkout page: your card number never reaches KeepSeek, and we never see or store it.

What we receive back from Stripe and keep on your account is the fact of a subscription — a Stripe customer identifier, a subscription identifier, whether the subscription is active, and the date the period you have paid for ends. Stripe separately collects the billing address it needs to work out sales tax. See Section 11.

3.4 Information we do not intentionally collect

We do not ask for or knowingly collect Social Security numbers, government ID numbers, or card numbers.

4. How we use information

We use the information above to:

• Create and secure your account, and authenticate you when you log in.
• Store, display, and let you organize your collection (items, people, photos, stories).
• Send invitation emails on a Keeper's behalf, and check that the person accepting an invitation is the one it was sent to.
• Notify a Seeker by email when a Keeper they're connected to publishes new items.
• Transcribe voice and video recordings you make into text captions/stories.
• Track free-trial status and, when a trial lapses, place the account into read-only mode and send a one-time notice explaining that (see Section 11).
• Take payment for a subscription, apply sales tax where it is due, process refunds, and tell you about renewals, failed payments, and cancellations.
• Keep the accounting and tax records that a business is required to keep about the payments it has taken.
• Send marketing email — new blog posts, news about KeepSeek, and occasional offers — to the people who have asked for it, see Section 8.
• Respond to support requests and feedback.
• Maintain the security and integrity of the service (e.g., detecting abuse of the invite system).

We do not sell personal information, and we do not use your photos, stories, or family information to train third-party AI models, market to you on behalf of advertisers, or share it with data brokers.

5. Who we share information with

We share information with a small number of service providers who help us run KeepSeek (our "sub-processors"). We do not sell or rent personal information to anyone, and we do not share it with third parties for their own marketing purposes.

Each of these providers is contractually restricted to using the data only to provide their service to us.

Where your information is stored. KeepSeek is operated from the United States and your collection is stored there: our database and files are held in Amazon Web Services' US West (Oregon) region through Supabase, and our media, hosting, email, transcription, analytics and payment providers are likewise US-based, some of them operating global delivery networks. If you use KeepSeek from outside the United States, your information will be transferred to and processed in the United States, which may have different data-protection rules from your own country.

We may also disclose information if required by law, subpoena, or valid legal process, or to protect the rights, property, or safety of KeepSeek, our users, or others.

Future features: We intend to offer printed-book ordering, letting a Keeper order a physical book made from their collection. That is not available yet. When it launches we will share with the print partner only what is needed to make and post that specific book — the pages themselves, and a delivery address — and we will update this policy and the table above before it goes live.

6. Seeker access and what Seekers can see

When a Keeper invites a Seeker, the Seeker can view that Keeper's published items and people in read-only form. A Keeper controls who has access and can revoke a Seeker's access at any time. Seekers cannot edit, delete, or export the Keeper's collection.

7. Data retention

• While your account is active, we retain your collection for as long as you keep using KeepSeek.
• Free trial: new Keeper accounts get a 14-day free trial. If a trial lapses without upgrading, the account is switched to read-only — you (and any Seekers you've connected) can still view everything, but adding, editing, or deleting is paused. We send a one-time email explaining this.
• After a trial ends without upgrading: your collection doesn't disappear when the trial does, but it doesn't stay forever either. We keep it, readable, for one month from the day the trial ends, so you have time to decide whether KeepSeek is for you. We'll email you a week before that month is up. If you haven't upgraded or asked us to keep it by then, the collection and its photos are deleted.
• After a paid subscription ends: six months — counted from the last day of the period you had already paid for, not from the day you cancel. Your collection stays readable throughout, and we'll email you a month before that period is up. If you resubscribe at any point in that window, nothing about your collection has changed.
• Deletion at the end of either period is permanent. It removes the items, people, stories, and the photo and video files themselves. If you want to keep the material, ask us before the period ends and we will work it out with you.
• A note on timing, because KeepSeek is new. The periods above run from the dates given, and KeepSeek has not been running long enough for any collection to have reached one of them. Nothing has ever been deleted for inactivity, and nothing will be until an account actually reaches the end of its period. We would rather over-explain this than have anyone assume a deadline has already passed. If these periods change, Section 14 covers how we'll tell you.
• Account deletion: you can close your account yourself, from your account screen. When you ask, we do not delete straight away — we schedule the deletion 7 days out and email you the date, so that an account cannot be destroyed by one mistaken click or by somebody who has got hold of your login. You can cancel it at any point in those 7 days, from the app or from a link in that email. On the scheduled date the collection, its photo and video files, your Seeker connections and your login are deleted, permanently. If any part of a deletion has to be finished by hand, we will complete it within 30 days of your original request.
• Payment and tax records: if you have ever paid us, the record of what you paid and when is kept for as long as tax and accounting law requires, separately from your collection and after your collection has been deleted. It has never included your card number, which we do not receive.

8. Your choices and rights

• Access and correction: you can review and edit most of your own account and collection information directly in the app.
• Deletion: you can delete your account and everything in it yourself, from your account screen — see Section 7 for how the 7-day scheduling works. If you would rather we did it for you, or you cannot get into your account, email hello@mykeepseek.com and we will.
• A copy of your collection: the Download Collection option in the app gives you your own items, photos and stories in a form you can keep. It stays available in read-only mode, so you can always take a copy out — including after a trial or a subscription has ended.
• Seeker access: a Seeker can ask the Keeper who invited them to revoke their access, or can stop using the invite link at any time.
• Marketing emails: most of what KeepSeek sends is transactional — invitations, new-item notices, the trial-ended notice — and those come with your account. Separately, we send marketing email — new blog posts, news about KeepSeek, and occasional offers. That kind only ever goes to people who asked for it: either you ticked the box when you created your account, or you typed your address into the form on our website. There is no other way onto that list. We do not buy, rent, sell or swap mailing lists, and we do not add you because you signed up, paid, or were invited by somebody else. Every one of those emails carries an unsubscribe link and our postal address, we act on an unsubscribe straight away, and unsubscribing changes nothing about your account or about the transactional email you still need to receive. You can also ask us to stop by emailing hello@mykeepseek.com.
• Analytics: you can turn analytics off at any time from the Cookie settings link in our footer — see Section 3.2.2. This does not affect your account or your collection in any way.

Depending on where you live, you may have additional rights — see Section 10.

9. A note on information about people who aren't KeepSeek users

KeepSeek's whole purpose is preserving family history, which means a Keeper will often store names, birthdates, relationships, and photos of relatives — including children, elderly relatives, and people who have passed away — who never signed up for KeepSeek and never gave us that information themselves.

A Keeper is responsible for having the right to include information about the people in their collection — for example, as a family member documenting their own family's history, or with the knowledge/consent of the people (or the parents/guardians of minors) they're writing about, consistent with our Terms of Service.

If you are someone described in a Keeper's collection (rather than the Keeper yourself) and you have questions or concerns about that information — including a request to have your information removed — please contact us at hello@mykeepseek.com. We will work with the relevant Keeper to address it. We generally cannot unilaterally alter another person's private collection without the Keeper's involvement, except where required by law.

We are not aware of any feature in KeepSeek that performs facial recognition or biometric identification on photos; our photo-editing features (like background removal) process images for visual editing only, not identity matching.

10. Children's information

KeepSeek is not directed to children, and we do not knowingly allow anyone under 18 to create a Keeper or Seeker account, or knowingly collect account information (email, password) directly from a child.

That said, because KeepSeek is a family-history tool, a Keeper's collection will often include information about children — a grandchild's birthdate, a childhood photo, a family relationship. That information is provided by the adult Keeper, not collected by us from the child. See Section 9 for how we handle information about people who aren't account holders.

11. Free trial, subscriptions, and payment

New Keeper accounts start with a 14-day free trial and a limit on how many items they can hold. When the trial ends without a subscription, the account moves to read-only: everything stays visible to you and to the Seekers you invited, but nothing new can be added. Seeker accounts are free and always have been.

KeepSeek Premium is a paid subscription, billed yearly or monthly, which removes the item limit. Payment is handled by Stripe, and the practical consequence for your privacy is this: the card details go to Stripe, not to us. We never receive them, so we cannot lose them.

What we hold on your account is the fact of the subscription — Stripe's identifiers for you and for your subscription, whether it is active, and when the paid period ends. We use those to know whether your account is read-only, to tell you about a renewal or a failed payment, and to work out a refund if you ask for one.

Sales tax. Where tax is due on a subscription — for KeepSeek that means customers in North Carolina, at the rate for their county — Stripe determines it from the billing address you give at checkout. That address is collected and held by Stripe for that purpose. It is shown to you before you pay.

Stripe processes this information as its own controller as well as on our behalf, under its own privacy policy. We do not receive, and could not give anyone, your card number.

12. Regional privacy rights

How to exercise any right below: email hello@mykeepseek.com from the address on your account, or use the tools in the app — most of these rights are things you can simply do yourself. We will not charge you, and we will not treat you differently for asking. We aim to respond within 30 days.

12.1 Everyone

Whatever the law where you live says, KeepSeek gives every account the same core set: you can see what we hold (it is your collection, and it is on the screen), correct it, take a copy of it with Download Collection, delete it, and switch analytics off. Those are described in Sections 7 and 8.

12.2 If you are in the EEA, the UK, or Switzerland

You may have rights under the GDPR (or the UK GDPR) to access, correct, delete, restrict, object to, and port your personal data, and to complain to your national supervisory authority. Our legal bases are:

Your collection is stored in the United States — see Section 5.

12.3 If you are in California

Under the CCPA/CPRA you may ask what personal information we have collected about you, ask us to delete it or correct it, and ask us not to sell or share it. The categories we collect are identifiers (name, email, account ID), commercial information (your subscription and what you paid), internet activity (the analytics in Section 3.2.1), approximate location derived from an IP address, and the audio, visual, and other content you choose to put in your collection. We collect these from you, from your device, and from Stripe. We use them for the purposes in Section 4.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We never have. We do not knowingly sell or share the personal information of anyone under 16.

12.4 Other US states

Several other states — Virginia, Colorado, Connecticut, Utah, Texas and others — now give their residents rights along the same lines. Rather than sort you by state, we will honour a request of this kind from anyone who makes one.

13. Security

How we protect your information

• In transit: all traffic between your device and KeepSeek is encrypted using HTTPS/TLS.
• Passwords: handled by our authentication provider (Supabase), hashed and salted. We never see or store your password.
• Access controls: our database enforces row-level security, so each account can reach only its own collection and any collection it has been explicitly granted access to.
• Credentials: the keys that allow privileged access to our systems are held server-side and are never sent to your browser.
• Card details: these go straight to Stripe from your browser and never pass through KeepSeek. There is no card number in our systems to be stolen.
• Review: we review our access rules and third-party dependencies periodically, and act on issues we find.

What we can't promise

No online service can guarantee perfect security, and we don't. Threats change, and third-party providers can be compromised through no fault of ours. Please see Section 11 of our Terms of Service for how responsibility is allocated if that happens, and keep your own copies of photos and recordings that are irreplaceable to you.

If there's a data breach

If we become aware of a security incident that has led to, or is reasonably likely to lead to, unauthorized access to or disclosure of your personal information, we will:

1. Investigate and contain it promptly.
2. Notify you by email at the address on your account, without undue delay and within the time required by applicable law.
3. Tell you what we know — what categories of information were involved, roughly when it happened, what we've done about it, and anything you should do in response.
4. Notify regulators where the law requires it.
5. Keep you updated as we learn more, rather than sending one notice and going quiet.

We'll do this whether or not a formal legal notification duty is triggered.

If a breach involves information about someone who isn't a KeepSeek user — a relative whose photo or details a Keeper added — we will notify the Keeper who added that information, since we generally have no way to contact the person directly. See Section 9.

What you can do

Use a strong, unique password. Don't share your account. Invite as Seekers only the people you actually want to have access, and remove access you no longer want to grant. If you think someone has gotten into your account, email hello@mykeepseek.com right away.

14. Changes to this policy

We may update this policy as KeepSeek changes. If we make material changes, we'll notify Keepers by email and/or an in-app notice before the changes take effect.

15. Contact us

Questions about this policy or your data: hello@mykeepseek.com Mailing address: 4030 Wake Forest Road, Ste. 349, Raleigh, NC 27609

Read the Terms of Service →  ·  Ask us about any of it