Privacy Policy
Last updated May 31, 2026
Keepsake (“we”, “us”) helps you find and rescue personal photos buried in your email. This policy explains what we collect, how we use it, and the choices you have. We collect as little as possible and never sell your data.
Information we collect
- Account info: the email address you sign up with, used to authenticate you.
- Google authorization: an OAuth token that lets us scan your inbox for photo attachments and, with your consent, move junk mail to your Trash. We never receive your Google password.
- Rescued photos: the image attachments our AI identifies as personal photos, plus basic metadata (sender, subject, date) so we can organize them.
- Payment info: processed by Stripe. We store a customer and payment reference, never your full card number.
How we use Google user data
We request Gmail access for two purposes only: to locate and retrieve the photo attachments you ask us to rescue, and — with your permission — to move unwanted bulk mail to your Trash so you can reclaim storage. Items are only ever moved to Trash, where Gmail keeps them recoverable for about 30 days; we do not permanently delete your mail. We do not read, store, or index the body text of your emails, we never use Gmail data for advertising, and we never send email on your behalf. High-confidence junk may be cleared automatically only if you opt in; otherwise we ask you to review and approve before anything is moved.
To decide whether an attachment is a genuine personal photo (versus a logo, receipt, or tracking pixel), images are sent to our AI provider (Anthropic) for classification. They are processed transiently for this purpose and not used to train models.
Keepsake’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who we share data with
We use a small number of trusted processors to run Keepsake:
- Supabase — authentication, database, and secure photo storage.
- Stripe — payment processing.
- Anthropic — transient AI image classification.
We do not sell your personal information to anyone.
Retention and deletion
You can disconnect your inbox at any time, which revokes our access. You may request deletion of your account and all rescued photos by emailing support@keepsake.app. We delete your data within 30 days of a verified request.
Security
Data is encrypted in transit. Access tokens and stored photos are kept in access-controlled infrastructure. No system is perfectly secure, but we work to protect your memories as if they were our own.
Contact
Questions about this policy? Email support@keepsake.app.