Privacy Policy

1. Who we are

KeepWorthy is operated by KeepWorthy, Inc. (“KeepWorthy”, “we”, “us”). We are the data controller for the personal information described here. You can reach us at support@getkeepworthy.com or at 350 Bay St, Suite 1300B, Toronto, Ontario, M5H 2S6.

This policy covers our website and our iOS and Android apps (together, the “Service”).

2. What we collect

Information you give us

• Account details. Your email address, the username you choose, and a password. Passwords are hashed by our authentication provider — we never see or store your plain password.
• Your shelf content. The products you add, including photos, names, notes, ratings, tags, categories, and the collections you organise them into.
• Places. When you record where you found something, we store that place’s name, address, and latitude and longitude. This is optional and only captured for the products you choose to attach a place to.
• Your device’s location, if you grant permission. We use it while you have the app open to show you finds near you and to suggest nearby stores as you search for one — which means what you type into store search, and your approximate location at that moment, go to Google Maps Platform. We do not store a record of where you have been, and we never access your location in the background.
• Profile settings. Your avatar, profile visibility (public, followers-only, or private), follow-request preference, and notification preferences.

Information created by using the Service

• Social activity. Who you follow, follow requests, likes, saved products, and the notifications generated from them.
• Viewing history. Which products you have viewed and when, used to power view counts and avoid showing you the same thing repeatedly.
• Push notification tokens. A device identifier issued by Expo, our app platform, so we can deliver notifications you have enabled. Notifications reach your device through Expo and then Apple or Google.
• Usage and diagnostics. On our website, only if you accept analytics cookies: pages viewed and how you navigate the site. In our mobile apps: analytics events, app version, device model and operating system, and crash reports. These include your IP address, from which an approximate (city-level) location can be inferred.
• What our analytics and crash reports contain. We think this is worth spelling out rather than leaving to the word “analytics”. These records are linked to your account and carry your email address and username, so we can trace a bug back to the person who hit it. Analytics events also include the search terms you type and the names of products and collections you create. They are used to fix problems and improve the product — never to advertise to you, and never sold.

Payment information

If you subscribe to KeepWorthy Pro, payment is handled by Stripe. Card numbers never reach our servers — they go directly to Stripe. We receive and store only a Stripe customer identifier, a subscription identifier, and your subscription status.

3. How we use it

• To provide the Service — your shelf, search, collections, and feed.
• To operate social features: showing your content to the audience your privacy settings allow, and notifying you about relevant activity.
• To automatically categorize products you add, which involves sending the product name and description you type to our AI provider — not your photos (see section 5).
• To process payments, manage subscriptions, and send billing notices.
• To send service email you cannot opt out of while you have an account: email confirmation, password resets, and billing notifications.
• To diagnose crashes, fix bugs, prevent abuse, and understand which features are used so we can improve them.
• To comply with legal obligations.

We do not sell your personal information, and we do not share it with advertisers or use it for cross-context behavioural advertising.

4. Legal bases (EEA and UK)

Where the GDPR or UK GDPR applies, we rely on: contract — to provide the Service and process your subscription; legitimate interests — to secure the Service, prevent abuse, and improve the product; consent — for optional push notifications and, where required, analytics; and legal obligation — for tax and accounting records. Where we rely on consent, you can withdraw it at any time.

5. Who we share it with

We share personal information only with service providers that process it on our behalf, under contract, for the purposes below:

We may also disclose information if required by law, to enforce our Terms of Service, or to protect the rights and safety of our users. If we are ever involved in a merger or acquisition, we will notify you before your information becomes subject to a different privacy policy.

6. What other people can see

KeepWorthy is a social product, so some information is visible to others by design. Your username, avatar, and shelf are shown according to your profile visibility setting — public, followers-only, or private — which is enforced on our servers, not just in the app.

Anything you make public may be seen, saved, or shared by others. Photos and notes attached to public products are public, including any place information you attached to them. Consider that before adding a home address or anything else you would not want visible.

7. How long we keep it

• While your account is open — your account and shelf content are kept until you delete them or close your account.
• After deletion — your account and content are removed from our live systems. Encrypted backups may retain copies for up to 30 days before rolling off.
• Billing records — retained for as long as tax and accounting law requires, typically six to seven years, even after account deletion.
• Diagnostics — crash data and analytics events are retained on a rolling basis, generally no more than 12 months.

8. Your rights

Depending on where you live, you may have the right to access a copy of your information, correct it, delete it, export it in a portable format, object to or restrict certain processing, and withdraw consent. Residents of California, the EEA, the UK, and Canada have these rights; we extend them to everyone.

Much of this is self-serve: you can edit your profile and content, adjust visibility and notification settings, and change your password in the app. For a copy of your data, or anything else not covered below, email support@getkeepworthy.com and we will respond within 30 days. We will never charge you or degrade your service for exercising these rights.

Deleting your account. You can do this yourself at any time — in the app under account settings, or on the web from your account page, which stays available even if you have uninstalled the app. Deletion is immediate and permanent: your profile, shelf, photos, collections, and social activity are removed from our live systems, and encrypted backups roll off within 30 days as described in section 7.

If you have a Pro subscription, deleting your account cancels it immediately — you will not be charged again. As set out in section 7, we keep the billing records themselves for as long as tax and accounting law requires, which is why payment history is the one thing deletion does not erase.

If you are in the EEA or UK you may also complain to your local data protection authority. In Canada you may complain to the Office of the Privacy Commissioner.

9. International transfers

Our database is hosted in the United States, and several of our providers operate globally. If you use KeepWorthy from outside the United States, your information will be transferred there. Where required, these transfers rely on the European Commission’s Standard Contractual Clauses or an equivalent safeguard.

10. Security

Data is encrypted in transit and at rest. Access to your content is enforced at the database level by row-level security, so privacy settings apply regardless of which client is making the request. Payment card data is handled entirely by Stripe, a PCI-DSS Level 1 provider. No system is perfectly secure, but if a breach affects your personal information we will notify you and the relevant regulators as required by law.

11. Children

KeepWorthy is not intended for children under 13, and in the EEA not for anyone under 16 unless local law sets a lower age. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.

12. Cookies and similar technologies

Our website always uses strictly necessary cookies — the session cookies that keep you signed in — which don't require consent. With your consent, given through the cookie banner shown on your first visit, we also use PostHog (see section 5) to collect analytics events, so we can see how visitors move through the site and where the purchase flow breaks down. We do not record or replay your sessions, and we do not use this for advertising or run third-party advertising cookies on the website.

You can change your choice at any time using the “Cookie preferences” link in the site footer. Our mobile apps use local device storage and the analytics and crash-reporting tools listed in section 5.

13. Changes to this policy

We will update this page when our practices change and revise the “last updated” date. If a change materially affects your rights, we will give you notice in the app or by email before it takes effect.

14. Contact us

Questions, requests, or complaints: support@getkeepworthy.com, or write to KeepWorthy, Inc., 350 Bay St, Suite 1300B, Toronto, Ontario, M5H 2S6.

Person responsible for personal information. [privacy officer name], [title], is accountable for the personal information we hold and for the practices described in this policy. You can reach them directly at privacy@getkeepworthy.com. If you are in Quebec, this is our Privacy Officer for the purposes of Law 25.

This policy is governed by the Province of Ontario and the laws of Canada.