Privacy policy
Last updated: 31 October 2026
Kept is built to keep your work on your own drive. This page explains the little personal data we do handle, why, and what you can do about it.
Who is responsible
The data controller under the EU General Data Protection Regulation (GDPR) is:
[Full name or company name]
[Street address, postcode, city, country]
[VAT number, if any]
Email: [contact email]
The Kept app
The app works entirely on your Mac. It does not send your photos, videos, file names, folder structure or its file index anywhere, and it contains no analytics or tracking. The index of your files is stored on your own drive, in a hidden .kept folder you can delete at any time.
If a future version checks your licence key online, it will send only the key and an anonymous identifier of your Mac. We will update this policy before that happens.
This website
- No cookies, no analytics, no advertising. Fonts are served from this site, so no third party sees your visit through them.
- Hosting. The site is hosted by Cloudflare, which processes technical request data (such as IP address, browser and time of request) to deliver the pages and protect them from abuse.
The launch list
If you sign up to be notified at launch, we store:
- your email address and the time you gave consent;
- optionally, the camera brand you use and whether you shoot mostly photos or video;
- your browser language, the page you came from and any campaign tags in the link (
utm_parameters), so we know which channels work; - how many times you submitted the form.
Purpose: to email you when Kept launches, with the reserved price. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Retention: until you unsubscribe or ask us to delete it, and in any case no longer than 12 months after launch.
Purchases
Checkout is handled by Stripe. Your card details go directly to Stripe and never reach us. For each purchase we receive and store your email address, name, billing country, Stripe customer and payment references, the amount and currency, the order status, and the licence key we generate for you.
Purpose: to deliver and manage your licence, handle refunds and support, and keep the accounting records required by law. Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and legal obligations (Art. 6(1)(c) GDPR). Retention: for as long as your licence is active and then for the period required by tax and accounting law (up to 10 years in Italy).
Depending on your country, Stripe (or its affiliate Link) may act as the reseller of record and process your data as an independent controller under Stripe's privacy policy.
Who processes data for us
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and server functions for the launch list, orders and licences | EU (Paris, France) |
| Cloudflare | Website hosting and delivery | Global network |
| Stripe | Payments, receipts and taxes | EU and United States |
Where data is transferred outside the European Economic Area, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission's Standard Contractual Clauses.
We do not sell your data, use it for advertising or profiling, or make automated decisions about you.
Your rights
You can ask to access, correct, delete or export your data, to restrict or object to its processing, and withdraw your consent at any time, by writing to the email address above. We reply within one month.
You also have the right to lodge a complaint with a data protection authority. In Italy this is the Garante per la protezione dei dati personali; you can also contact the authority of the EU country where you live.
Children
Kept and this website are not directed at children under 16, and we do not knowingly collect their data.
Changes
If we change how we handle data, we will update this page and the date at the top. For significant changes affecting the launch list or your purchase, we will tell you by email.