keepary

Privacy Policy

Effective Date: October 1, 2026 • Last Updated: October 25, 2026

1. Who We Are and What This Policy Covers

Keepary is operated by Keepary, LLC (“Keepary,” “we,” “us,” or “our”), a Washington limited liability company. Keepary is a workflow ecosystem for analog film photographers, comprising the Keepary mobile app, the Keepary web app, and the website at keepary.app (together, the “Service”).

This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have.

2. Information We Collect

Information you provide. This includes: (a) account information such as your email address, display name, and password credentials; (b) photography metadata you log, such as rolls, frames, film stocks, cameras, lenses, aperture, shutter speed, ISO, exposure compensation, development notes, and any free-text notes; (c) photos you upload (such as reference photos for a frame) and their thumbnails; (d) precise location coordinates for a shot or roll, if you choose to enter them or turn on location in the mobile app; (e) voice recordings, if you use voice dictation in the mobile app; and (f) communications you send us, such as support requests and beta feedback.

Voice dictation. If you use voice dictation in the mobile app, Apple’s speech recognition (which runs on your device or on Apple’s servers, depending on your device and settings) produces a live transcript. The recorded audio clip is then passed through Keepary’s servers to OpenAI’s Whisper speech-to-text service to produce a more accurate transcript, which is saved with your notes. Keepary does not store the audio: our servers return only the text, and the app deletes its copy of the clip from your device after each attempt. OpenAI does not use audio sent through its API to train its models. Dictation is optional; you can always type your notes instead.

Location and weather. Location is off unless you turn it on. When it is on, the mobile app records the coordinates of a shot or roll and uses Apple’s weather service (WeatherKit) to look up the weather conditions at that time and place. Apple states that location information sent to its weather service is used only to provide weather data, is not associated with personally identifiable information, and is not tracked between requests. No Keepary account information is sent with the request.

Information collected automatically. When you use the Service, we collect device and usage information such as device model, operating system version, app version, language, crash logs, diagnostic data, and performance data. Crash reports are sent to Sentry, which we have configured not to collect your IP address, not to identify you automatically, and not to capture screenshots. On our website and web app, we use Vercel Web Analytics, which does not use cookies and does not track you across other websites. Our hosting provider, Vercel, also keeps standard server logs, which can include IP addresses, for security and troubleshooting. We use this to operate, secure, and improve the Service.

Cookies. We do not use advertising or tracking cookies, Google Analytics, or advertising pixels. The web app uses only cookies or similar browser storage that are strictly necessary to keep you signed in. Our website analytics are cookieless.

Information from third parties. When you purchase a subscription through Apple, we receive limited transaction information such as purchase confirmation, product tier, and subscription status. We do not receive or store your payment card details; Apple handles them.

3. How We Use Your Information

  • To provide and operate the Service, including syncing your rolls, frames, and images across your devices.
  • To transcribe voice dictation and record weather conditions for your shots, if you choose to use those features.
  • To manage your account, subscriptions and entitlements.
  • To respond to support requests and communicate with you about the Service, including service announcements and beta programs. You can unsubscribe from marketing and beta waitlist emails at any time.
  • To monitor, secure, debug, and improve the Service, including diagnosing crashes and sync issues.
  • To create aggregated and de-identified data, as described in Section 4.
  • To comply with legal obligations and enforce our Terms of Use.

Legal bases for processing (EEA, UK, and Switzerland)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases:

  • Contract: to create and run your account, store and sync your data, provide subscriptions, and respond to support requests.
  • Consent: for location and weather, voice dictation, and marketing or beta waitlist emails. You can withdraw consent at any time by turning the feature off or unsubscribing; this does not affect processing that happened before.
  • Legitimate interests: for crash reporting, security, server logs, cookieless analytics, and creating aggregated and de-identified data, based on our interest in keeping the Service reliable and secure and understanding how it is used. You can object to this processing (see Section 10).
  • Legal obligation: for tax, accounting, and responding to lawful requests.

4. Aggregated and De-Identified Data

We may aggregate and de-identify information derived from use of the Service so that it no longer identifies you or any other individual, and we may use and share that aggregated data to understand and improve the Service and to publish insights about film photography, as described below. Examples of aggregated data we may produce include:

  • Trends in film stock usage across the Keepary community (for example, the most-logged film stocks in a given month or region).
  • Shooting statistics, such as the most commonly used apertures, shutter speeds, ISO ratings, or camera and lens combinations.
  • Feature usage and adoption trends within the Service.

Our commitments. Aggregated data will never include your name, email address, or other personal identifiers; will never include your photos, scans, or negative files; and will not be presented in a manner that could reasonably be used to identify you. We only publish or share aggregates drawn from enough users that no individual’s activity can be singled out. We will not attempt to re-identify aggregated or de-identified data, and we require any third party that receives it to agree not to do so.

We may publish or share aggregated data publicly (for example, in community trend reports about the state of film photography) or with partners such as film manufacturers and labs.

5. Your Photos and Images

You own your photos, scans, and negatives. We store and process them only to provide the Service to you — for example, syncing them across your devices, generating thumbnails and previews, and storing the photos you upload. We do not sell your images, use them in our marketing without your permission, or use them to train machine learning models. No AI or machine-learning service processes your photos or scans. The only AI service we use is OpenAI’s Whisper, to transcribe voice dictation you choose to record.

6. How We Share Information

Service providers. We share information with the service providers listed below, who help us operate the Service. These providers may access information only to perform services for us and must protect it.

  • Supabase (United States): account sign-in, database, and storage for the photos you upload and their thumbnails.
  • PowerSync: syncs your data between our database and your devices.
  • Vercel: hosts our website and web app, provides cookieless web analytics, and keeps server logs.
  • Sentry: crash and error reporting, configured without IP addresses, automatic user identification, or screenshots.
  • OpenAI: transcribes voice dictation audio (Whisper).
  • Apple: speech recognition for live dictation, weather data for a shot’s location when location is turned on (WeatherKit), App Store distribution, in-app purchases, and TestFlight beta testing. Beta feedback sent through TestFlight is collected by Apple and shared with us under Apple’s terms.
  • Loops: beta waitlist and product emails.
  • Resend: account and sign-in emails.
  • Sanity: manages our website’s content; it does not hold user data.

We will update this list when we add or change a service provider.

Payment processing. Apple processes in-app subscription purchases. Apple’s handling of your payment information is governed by Apple’s privacy policy.

Legal and safety. We may disclose information if required by law, legal process, or governmental request, or to protect the rights, safety, or property of Keepary, our users, or others.

Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal information and we do not share it for cross-context behavioral advertising.

7. Data Retention and Deletion

We retain your information for as long as your account is active or as needed to provide the Service. You can remove individual rolls, frames, or photos from your account at any time. Photo files you remove are deleted from our servers within about 8 days. You can delete your entire account in the mobile app (Settings > Danger Zone) or by contacting us at support@keepary.app. When you delete your account, we immediately delete your uploaded photos and their thumbnails, your rolls, frames, gear, and print data, your profile, and your login, and the app clears the copy of your data stored on your device. We keep a minimal record of the deletion (your email address, plan, subscription identifiers, and the time of deletion) for 12 months so we can reconcile and cancel billing. Film stocks you submitted to our shared catalog stay in the catalog with no link to you. If you joined our waitlist or mailing list on our website, that is separate from your account: use the unsubscribe link in any of those emails, or contact us and we will remove you. Apple keeps its own records of your purchases under its privacy policy. Aggregated data that no longer identifies you may be retained. Deleted data does not remain in database backups. We do not store voice dictation audio.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect your information, including encryption in transit, access controls, and hosting with providers that maintain industry-standard security programs. No system is perfectly secure, and we cannot guarantee absolute security. Because Keepary includes offline-first sync, copies of your data are also stored locally on your devices; protecting your devices is your responsibility.

9. International Data Transfers

The Service is operated from the United States and information is stored and processed on servers located in the United States. If you use the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where privacy laws may differ from those in your jurisdiction. When personal information from the European Economic Area, the United Kingdom, or Switzerland is processed in the United States, we rely on the European Commission’s Standard Contractual Clauses (with the UK Addendum and Swiss amendments) in our data processing agreements with our service providers, or on a provider’s certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions where available. You can contact us for more information about these safeguards.

10. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know, delete, and correct, and the right not to be discriminated against for exercising those rights. Residents of the EEA, UK, and other jurisdictions may have rights under the GDPR or similar laws, including the right to lodge a complaint with a supervisory authority.

EEA, UK, and Switzerland

You have the right to access, correct, delete, or receive a portable copy of your personal information; to restrict processing or object to processing based on legitimate interests (including the creation of aggregated data); to withdraw consent at any time; and to complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

Canada

Under PIPEDA and applicable provincial laws, you may access and correct your personal information and withdraw your consent, subject to legal and contractual limits, and you may complain to the Office of the Privacy Commissioner of Canada. Quebec residents also have rights under Quebec’s Law 25, including the right to data portability, and may complain to the Commission d’accès à l’information. The person in charge of the protection of personal information at Keepary is Nichole Marsano, Founder, reachable at support@keepary.app.

United States

Depending on the state you live in, you may have the right to know about, access, correct, delete, and get a copy of your personal information, and to opt out of its sale, use for targeted advertising, or profiling. We do not sell personal information or use it for targeted advertising or profiling. Where your state allows, you may use an authorized agent. If we deny your request, you may appeal by replying to our response; if we deny your appeal, you may contact your state attorney general.

You can exercise most rights directly in the app (editing or deleting your data, deleting your account) or by contacting us at support@keepary.app. We will verify your request and respond within the time required by applicable law.

11. Children

The Service is not directed to children under 13 (or the higher minimum age required in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

12. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you through the Service or by email before the changes take effect. The “Last Updated” date above reflects the most recent revision.

13. Contact Us

Keepary, LLC (a Washington limited liability company)

522 W Riverside Ave Ste N, Spokane, WA 99201

support@keepary.app