Privacy Policy
Last updated: 27 September 2026
Who we are
Kept is made by Levtics, registered with the Dutch Chamber of Commerce (KVK) under number 76956865. For any question about this policy or your data, contact us at support@levtics.com.
Your photos and videos never leave your device
Kept asks for permission to access your photo library so it can help you review and clean it up. All of that processing happens entirely on your device. Kept does not upload your photos or videos to us or to any third party, and we never see them.
Data we collect
We do not collect or store your photos, videos, or their content. The limited data described below is handled by the third-party services listed in the next section, each acting within its own role.
Third parties we work with
- RevenueCat — handles subscription and purchase management for Kept (including your subscription status and purchase history), so we can unlock the features you've paid for. RevenueCat processes purchase data on our behalf; it does not have access to your photos.
- Supabase — powers Kept's referral system. This uses anonymous authentication only: it creates an anonymous identifier for your device so referrals can be tracked, without asking for a name, email, or other identifying account information.
- PostHog — used for product analytics (for example, which screens are used and how often), to help us improve Kept. This is not yet active; once it ships, it will collect anonymized or pseudonymous usage events. It never has access to your photos or videos.
We do not sell your data, and we do not use any of the above for advertising.
Purchases and subscriptions
Kept offers weekly and yearly auto-renewing subscriptions, as well as a one-time lifetime purchase. All payments are processed by Apple through the App Store; we never see or store your payment details. See our Terms of Use for subscription terms.
Data retention
Since your photos and videos are never sent to us, we have nothing of yours to retain. Data held by RevenueCat and Supabase (and, once live, PostHog) is retained only for as long as needed for the purposes described above, or as required by law.
Children
Kept is not directed at children under 16, and we do not knowingly collect data from children.
Your rights
If you are in the European Economic Area, you have the right to access, correct, or request deletion of any personal data held about you, and the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens). To exercise any of these rights, email support@levtics.com.
International transfers
Our service providers (RevenueCat, Supabase, and PostHog) may process data outside the European Economic Area. Each provider maintains its own safeguards for such transfers, in line with applicable data protection law.
Security
We rely on the security practices of Apple and our service providers to protect the limited data described above, and we only work with providers that maintain industry-standard security measures.
Changes to this policy
We may update this policy from time to time, for example when PostHog analytics goes live. We will update the "Last updated" date above whenever we do.
Contact
Questions about this policy? Email support@levtics.com.