Privacy Policy

This Privacy Policy explains how KeepWorthy Inc. ("KeepWorthy", "we", "us" or "our") collects, uses, discloses, retains and protects personal information when you use the KeepWorthy mobile application, getkeepworthy.com and related services (collectively, the "Service").

This Policy describes the Service as offered to residents of Canada, excluding Quebec, and the United States. The Service is not offered to residents of Quebec. At signup you select the province, territory or state where you live, and that selection determines the minimum age that applies to you. If the Service is made available in another jurisdiction, additional notices or rights may apply. Nothing in this Policy limits rights that cannot lawfully be limited.

1. Privacy at a glance

• An account is required. Signup asks for a username, email address, password, and the province, territory or state where you live. We do not ask for or collect your date of birth. Instead, we show you the minimum age that applies where you live and ask you to confirm you meet it. We retain that confirmation, the jurisdiction you selected, the minimum age that applied, and the time.

• A new profile is public by default. You can change it to followers-only or private in Settings. Product posts, usernames, avatars and social activity may be visible according to your selected visibility settings.

• Location and camera access are optional. Foreground location is used for nearby-store and feed features and is not stored as your device location. A store you choose to attach to a post may be visible with that post.

• We use service providers in the United States and other locations, including Supabase, Resend, Stripe, Vercel, PostHog, Sentry, Expo, Apple, Google, RevenueCat, and OpenAI.

• We do not sell personal information, do not run advertising in the Service, and do not collect an advertising identifier for cross-app advertising.

• You can delete your account in the app or online through Account Settings after logging in. You can ask for a copy of your information, ask us to correct it, or make another privacy request in the same way, or by emailing privacy@getkeepworthy.com. We generally respond within 30 days.

2. Who is responsible for your information

KeepWorthy Inc., a corporation incorporated under the Canada Business Corporations Act (corporation no. 1813762-5), is responsible for personal information under its control. Mohamed Dabbagh is the designated Privacy Officer. Operational privacy requests are handled through the contact information in section 18.

3. Personal information we collect

3.1 Account and eligibility information

• username, email address, hashed password, account-confirmation status and authentication records;

• the province, territory or state you select at signup;

• the minimum age that applied in that jurisdiction, your confirmation that you meet it, and the time of that confirmation; and

• the version and acceptance timestamp for the Terms of Service and this Privacy Policy.

Authentication is provided through Supabase. Resend delivers confirmation and password-reset emails. Passwords are stored as hashes by Supabase. Our website servers temporarily process passwords when handling signup, password changes and password resets; we do not intentionally retain readable passwords.

3.2 Profile, product and social information

• your public username, avatar, profile visibility, follow-request preference, notification preferences and theme;

• product names, notes, tags, ratings, categories, collection names and optional photos;

• stores attached to products, including store name, address and coordinates;

• the external link a product was captured from, when you save an item using the share-to-KeepWorthy feature;

• follows, follow requests, likes, saved products, collections, blocks and notifications;

• category-interest scores for purposes of ranking the Explore feed;

• product-view events, including the product, viewing account and time; only an aggregate count is shown to the product owner; and

• edit-history snapshots of prior versions of product entries, maintained for audit and integrity purposes while the account remains active, subject to our retention practices.

3.3 Location, camera and device permissions

If you grant permission, the Service may use your device's foreground location to rank nearby product finds and suggest stores. Current coordinates are used for the request and are not stored as a location history. The province, territory or state you select at signup is separate from device location. It is a declaration you make, is not derived from your device, is not used for nearby-store or feed ranking, and is retained with your account. Store-search text and location are sent from your device to Google Maps Platform (Places). You may deny or revoke location permission in your device settings, although nearby features may then be unavailable. Camera access is optional and is used only when you choose to take a product photo. The Service does not request microphone access or legacy external-storage access. You may upload a product without a photo.

3.4 Usage, diagnostics and technical information

• product analytics, pages and features used, app and device version, and an account UUID through PostHog. Searches are not sent to PostHog. If you have allowed analytics, each search is added to a daily total in our own systems: for product searches we keep the search text, unless it looks like personal information such as an email address or phone number; for people searches we keep no text. These totals do not record who searched, from which device, or when during the day;

• crash and error diagnostics, device details, account UUID and network information through Sentry; request URLs sent to Sentry have their query strings removed before leaving the device;

• push tokens and notification contents through Expo and the Apple or Google push-delivery service;

• website request logs and IP address through Vercel; country inferred from IP is used to choose CAD or USD; and

• cookies and similar technologies on the website. Non-essential website analytics remain off until accepted through the cookie banner, and session replay is disabled.

An account UUID is a persistent identifier and may still be personal information even when it does not contain your email address or username. In the mobile apps, product/user analytics is off unless you allow it. You can change your answer in Settings at any time. Crash reporting is on by default and can be turned off in Settings. Available controls are described in section 6.

3.5 Payments and subscriptions

Web purchases are processed through Stripe. Mobile payments are processed through Apple or Google. We use RevenueCat to validate purchases, restore purchases and manage subscription entitlements. When you sign in to a mobile app with purchasing enabled, we provide RevenueCat with your account UUID, including if you have not purchased a subscription. RevenueCat also processes purchase, receipt, subscription and entitlement information. We may receive and store a customer identifier, subscription identifier, subscription status, plan, transaction or receipt information, currency and entitlement status. Payment providers may collect your name, email, billing address and payment method. Full payment-card data does not pass through or remain in KeepWorthy systems.

3.6 Reports, support and legal communications

If you report content, we collect the reporter, reported user, selected reason, optional free text, the reported product and review status. A report record may include a snapshot of the usernames, email addresses and product title existing when the report was made. We also collect information you provide when contacting support, privacy or abuse channels, and information reasonably needed to investigate fraud, security, legal or policy issues.

If you make a privacy request, we collect the type of request, any detail you write, and the status and outcome of our response. The record also includes your username and email address as they were when you made the request.

When you submit in-app feedback, we collect its type, summary and description. If you enable diagnostic attachments, we also collect device and operating-system details, app version and recent application logs processed through our redaction filters. Depending on your analytics and crash-reporting settings, we may link the feedback to a PostHog session and a Sentry diagnostic event. Your feedback summary and description are not sent to those services.

3.7 Information from other sources

We may receive purchase and entitlement information from Apple, Google, RevenueCat, or Stripe; place information from Google Maps Platform; delivery and diagnostic information from our service providers; and reports or complaints from other users or rights holders.

4. Why we use personal information

We use personal information to:

• create, authenticate, maintain and secure accounts;

• provide product, search, social, privacy, notification, sharing and subscription features;

• display content according to the visibility setting selected by the user;

• rank and personalize the Explore feed using inferred interests, likes, saves, follows, previously seen products, nearby stores and randomized exploration;

• suggest categories and subcategories for product entries;

• process purchases, manage entitlements, prevent duplicate or unauthorized charges, and maintain accounting records;

• measure feature use, diagnose errors, improve performance and develop the Service;

• detect, investigate and respond to abuse, policy violations, security incidents, fraud, intellectual-property complaints and legal requests;

• communicate transactional, service, privacy, security and legal notices;

• comply with law, enforce agreements, establish or defend legal claims, and protect users, KeepWorthy Inc. and others; and

• to determine the minimum age that applies to you and to record the basis on which your account was accepted

We limit collection, use and disclosure to purposes a reasonable person would consider appropriate in the circumstances and to purposes identified at or before collection, unless law permits or requires otherwise.

5. AI-assisted categorization and feed personalization

When you type a product name and description, the text may be sent to the OpenAI API to suggest a category and subcategory. Photos are not sent for this purpose. If the API is unavailable, the Service may use a local keyword method or manual entry. KeepWorthy does not use your content to train its own AI models. OpenAI processes submitted text as a service provider under its applicable business terms and data controls. The Explore feed uses automated ranking to personalize the order of content. It does not make decisions that produce legal or similarly significant effects. Suggestions and rankings may be incomplete, inaccurate or influenced by limited data.

6. Consent and your choices

We obtain consent in a form appropriate to the sensitivity of the information and the reasonable expectations of users. Some processing is necessary to create and operate an account; optional features require separate choices or device permissions.

• Profile visibility: change public, followers-only or private visibility in Settings. Public is the initial setting, and we provide an onboarding notice before content is posted.

• Location and camera: grant or revoke permissions through your device settings.

• Push notifications: change notification categories in the app and device settings.

• Website analytics: use the cookie banner or available cookie controls.

• Mobile analytics: use the Analytics and Crash Reporting toggles in Settings. Turning analytics off stops future analytics collection. Turning crash reporting off stops the error reports and activity trail we send to Sentry and removes your account identifier from them, although Sentry's automatic crash and performance monitoring may still send limited diagnostics. Neither setting deletes data already collected. If a control is not yet available or you’d like all your analytics data purged, contact privacy@getkeepworthy.com for assistance.

• Consent withdrawal: delete your account, change the relevant setting, or contact us. Withdrawal does not affect processing already lawfully completed and may make some features unavailable.

We will not require consent to collection, use or disclosure beyond what is reasonably necessary to provide a requested product or service, except where you are offered a genuine choice for an optional feature.

7. When we disclose personal information

7.1 Service providers

We use service providers to operate the Service. They may process personal information only for authorized purposes and subject to contractual, technical and organizational controls appropriate to the service.

7.2 Other disclosures

We may also make disclosures to:

• other users and the public, according to your visibility settings and sharing choices;

• a purchaser, investor, lender or adviser in a proposed or completed corporate transaction, subject to appropriate safeguards and legal requirements;

• law enforcement, regulators, courts, emergency services, rights holders or others where disclosure is required or permitted by law or reasonably necessary to protect rights, safety or security; and

• another organization where reasonably necessary to reduce or mitigate harm from a security breach.

8. Public and social information

A public profile and public product post may be found through in-app search and viewed by other users. Shared links open only in the KeepWorthy app, but anyone who can see your content can still capture or redistribute it, for example by screenshot. Followers-only content may be seen by approved followers. Private profiles are not intended to appear in user search or social feeds. No technical control can prevent an authorized viewer from copying or redistributing what they see, so do not post information you do not want disclosed to the selected audience. Your current device location is not shown to other users. If you attach a store to a product, the store name, address, coordinates or distance may be displayed with that product according to the post and profile visibility settings. If a product includes a captured source link, that link may also be displayed with the product according to those same settings.

9. No sale of personal information or behavioural advertising

KeepWorthy does not sell or rent or share personal information for money. The Service does not contain advertising, does not use an advertising SDK and does not collect an advertising identifier for targeted advertising across unaffiliated apps or websites. We disclose information to service providers and other recipients only as described in this Policy.

10. Processing outside Canada

KeepWorthy and its service providers process and store personal information in the United States and may process it in other countries where they operate. In particular, core Supabase services use an AWS region in the United States. Personal information in another country may be subject to that country's laws and may be accessible to courts, law-enforcement or national-security authorities. KeepWorthy remains accountable for personal information transferred to service providers for processing and uses contractual and other measures appropriate to the circumstances.

11. Retention

• Account, shelf, social and settings data: generally retained while your account is active or until you delete particular content.

• Product edit history: generally retained while the account is active, subject to periodic review and any shorter operational retention schedule adopted by KeepWorthy.

• Analytics and crash data: configured for a rolling period of no more than 12 months, subject to provider functionality and legal requirements. Separately, our search statistics contain screened product-search text and aggregate counts without account or device identifiers. A weekly maintenance job removes low-frequency search text from daily records older than seven days, converts daily records older than 90 days into monthly totals, and deletes monthly totals once their month is more than 24 months old. Screening does not guarantee that search text contains no personal information.

• Trust-and-safety reports: routine reports closed without substantiated findings are retained for 12 months following closure. Substantiated safety reports are retained for 24 months following closure. Either period may be extended for a specific report under a documented legal hold. Reports are not retained beyond these periods merely because retention may someday be useful.

• Privacy requests: a record of each request — access, correction, export, portability, consent withdrawal, complaint or other — including its type, the date, the response deadline, and the outcome, is retained for 24 months after the request is closed. Text you write when making a request is retained on the same schedule as the rest of the record, unless your account is deleted first: deleting your account removes that text early, once any request open at the time has since been closed, while the record that a request was made and how it was resolved is kept for the full 24 months either way.

• Billing and transaction records: retained by Stripe, Apple, Google and, where applicable, KeepWorthy for tax, accounting, chargeback, fraud-prevention and legal periods, commonly six to seven years.

• Security and legal records: retained for the period reasonably necessary for the relevant incident, investigation, legal hold, limitation period or regulatory requirement.

• Eligibility and legal-acceptance records: retained while the account is active and for the period reasonably necessary afterwards to evidence the terms accepted and the basis on which the account was created. The normal retention period after account deletion is one year, followed by removal through our scheduled weekly purge. These records are added to rather than overwritten, so a later acceptance does not erase an earlier one.

When an account is deleted, data is removed from live KeepWorthy systems as part of the deletion workflow. Encrypted backups roll off within up to 7 days. Some information may remain with a service provider for a limited period under its deletion cycle or where retention is legally required. We de-identify, minimize or restrict retained information when full deletion is not appropriate or legally permitted.

These deletion periods are suspended for records, including request text, subject to a documented retention hold for an outstanding regulatory complaint or unresolved correction dispute; the hold is reviewed and removed when the matter is resolved.

Feedback and its attached diagnostics, logs and diagnostic reference identifiers are deleted from our database when you delete your account. Related events already held by PostHog or Sentry follow their separate retention and deletion processes.

12. Account and content deletion

You may delete your account inside the app or on our website by signing in and visiting Account Settings at https://getkeepworthy.com/account. Where you have an active subscription purchased directly through KeepWorthy using Stripe, account deletion cancels the recurring Stripe subscription immediately, and unused prepaid time is not automatically refunded unless required by law or expressly promised. To keep access until the end of your paid period, cancel through the billing portal instead.. Subscriptions purchased through Apple or Google must be managed through the applicable app store.

Deletion removes the login, profile, product and collection content, stored photos and avatar, product edit history, viewing records, follows, notifications, push tokens, settings, likes, and blocks from live KeepWorthy systems. Eligibility and legal-acceptance records survive account deletion, including snapshots of your account UUID, username and email address, your jurisdiction and age confirmation, and the document versions and acceptance timestamps. These records are normally retained for one year after deletion and then removed through our scheduled weekly purge.

We also submit deletion requests to applicable analytics providers. Limited billing, security, fraud, trust-and-safety, privacy-request or legal records may be retained as described in section 11. Privacy-request records survive account deletion on the schedule described in section 11. Request text is removed after the request is closed, except while a documented retention hold applies; what remains is the record that you made a request and how it was resolved, kept on the schedule in section 11.

13. Access, correction and portability

You may request access to personal information under our control, ask how it has been used or disclosed, request correction of inaccurate or incomplete information, and request a copy of your information in a structured, commonly used, machine-readable format.

How to make a request: In the app, go to Settings → Privacy & your data. On the website, sign in and go to Account Settings, then select Privacy & your data. Either way, choose what you are asking for, add any detail, and submit. You can also email privacy@getkeepworthy.com.

How we verify your identity: A request submitted in the app or on the website is made from your signed-in account, which is how we confirm the request is yours. We send our response to the email address on your account. If you email us instead, we will reply to the address on the account rather than to the address that wrote to us, and we may ask you to submit the request from the app or the website, or to reset your password first so that you can submit through the application. We generally do not require government-issued identification. Before the request is sent to us to prepare a copy or portable export of your information, the app asks you to re-enter your account password and confirm you are requesting it. No password is required for our other privacy responses. If we cannot reasonably verify a request through the signed-in account and verified account email, we may request proportionate additional information.

How long we take: We generally respond within 30 days, subject to any extension permitted by applicable law. If an extension applies, we will provide any notice required by law. When you submit a request in the application we show you the date your answer is due, and the status of every request you have made. Access is free, subject only to fees permitted by law and disclosed to you in advance.

What a copy of your information includes: Your account details and settings; your recorded Terms and Privacy Policy acceptance and your age confirmation; your products, including names, notes, tags, ratings, categories, stores and captured source links; your collections; your likes, follows, blocks, product views and notifications; any feedback you have sent us; your privacy requests; the edit history of your products, which is not otherwise shown to you in the app; and the category interest scores we infer in order to rank your Explore feed. Photos are stored separately and are provided with your copy.

What we may withhold: We will tell you what was withheld and on what basis.

• information about another person, including the identity of people who liked, followed, viewed or blocked you;

• Where a specific legal exception applies, such as privilege, confidential commercial information or a genuine threat to another person’s safety;

• trust-and-safety records to the extent withholding or redaction is permitted or required by law, including where disclosure would reveal another person's personal information, create a safety or security risk, disclose privileged information or otherwise fall within a lawful exception. Where appropriate, we will provide reasonably severable portions;

• information held by a service provider on its own terms rather than as our record, such as app-store purchase history. We will tell you who holds it;

We will explain any refusal and the recourse available to you.

14. Safeguards

We use administrative, technical and physical safeguards appropriate to the sensitivity, amount, distribution, format and risks of the information. Measures include server-side access controls for profile visibility, private storage buckets with expiring signed links, restricted moderation tables, verified account-deletion authorization, signature verification for Stripe webhooks, encrypted transport and backups, role-based access and service-provider controls.

No system is completely secure. You are responsible for using a strong, unique password and protecting access to your device and email account. Contact support@getkeepworthy.com immediately if you suspect unauthorized account activity.

15. Security incidents

We investigate suspected breaches, maintain records as required, and notify privacy regulators, affected individuals and other organizations where applicable law requires or permits notification. Relevant factors include the sensitivity of the information and the probability and seriousness of misuse or harm.

16. Age eligibility

The Service is not directed to children. You must be at least 18 years old and have reached the age of majority where you live. At signup you select the province, territory or state where you live. We show you the age of majority in that jurisdiction and ask you to confirm that you meet it. We do not collect a date of birth and do not independently verify your age. We retain your confirmation, the jurisdiction you selected, the minimum age that applied, and the time. If we reasonably believe an ineligible person has created an account, we may request proportionate verification and suspend or delete the account. Contact privacy@getkeepworthy.com if you believe a child has provided personal information.

17. Communications and changes to this Policy

We send account confirmation, password-reset, purchase, security, privacy and other service communications. We do not currently send promotional messages. If we introduce marketing, we will obtain and document consent where required and include prescribed sender identification and an effective unsubscribe mechanism.

We may update this Policy to reflect changes in law, technology, vendors or the Service. We will post the new version, update the date and give at least 30 days’ advance notice of material changes by email, in-app notice or another method that lets us demonstrate notice, unless a shorter period is required for urgent legal or security reasons. Where a change requires new consent, we will obtain it before the new collection, use or disclosure begins. Continued use alone will not substitute for consent where law requires an affirmative choice.

18. Contact and complaints

Privacy Officer: privacy@getkeepworthy.com

Support and abuse reports: support@getkeepworthy.com

KeepWorthy Inc., 350 Bay Street, Suite 1300B, Toronto, Ontario M5H 2S6, Canada

We will investigate privacy complaints and explain the outcome. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada or the privacy regulator in your province or territory. Their current contact information is available through their official websites.