Privacy Policy

Who we are

KeepHive ("KeepHive", "we", "us") is a private app for keeping a living record of everything you own — its receipts, warranties, documents, value, and the dates that matter — with reminders before anything expires. KeepHive runs on Android, iOS, and the web.

This policy explains what we collect, why, who we share it with, and the controls you have. KeepHive is operated by Harsh Shah, based in Gujarat, India. Questions? Email hello@keephive.app.

Information we collect

We collect only what a feature needs. Specifically:

• Account details — your email address, a securely hashed password (or a Google sign-in identifier if you use Google), and an optional display name.
• Content you create — the things you add and their details (name, category, value, purchase and warranty dates), the receipts and documents you upload, insurance policies, expenses, and maintenance schedules.
• Household data — if you use a Family plan, the members you invite and what you choose to share with them.
• Purchase information — your subscription status and the transaction identifiers from Google Play, Stripe (web), or RevenueCat. We never see or store your full card number.
• Diagnostics and usage — if enabled, crash reports and basic, privacy-respecting product analytics (which features are used) to keep the app stable. These contain no advertising identifiers.

What we do NOT collect

• No contacts, no phone book access.
• No advertising identifiers and no ad tracking.
• No background or continuous location.
• We never sell your data, never share it with advertisers, and never use your content to train AI models.

How we use your information

• To run the product for you — store your things, scan receipts, send reminders, and sync across your devices.
• To read receipts you scan (optical character recognition) so we can pre-fill merchant, date, and total.
• To process subscriptions and unlock Premium/Family features.
• To keep the service secure, prevent abuse, and fix crashes.
• To respond to your support requests.
• To meet legal obligations (for example, tax records for purchases).

Legal bases (EEA/UK users)

Where GDPR applies, we process your data to perform our contract with you (running the app), for our legitimate interests (security, product improvement), with your consent where required (e.g. optional analytics), and to comply with the law.

Who we share it with (subprocessors)

We share data only with the vendors that operate the service, each for a specific purpose:

• Supabase — database, authentication, file storage, and backend functions (hosted in the United States).
• Google Cloud Vision — reads the text on receipt images you choose to scan.
• RevenueCat, Google Play Billing, and Stripe — subscription management and payments.
• Resend — transactional email (reminders, password resets, confirmations).
• Expo / EAS — app delivery and push notifications; Sentry — crash reporting; PostHog — product analytics (the last two only if enabled).

Where your data is stored & how it is secured

Your data is stored in the United States (Supabase, US region). It is encrypted in transit with TLS and at rest with AES-256. Document and receipt files live in a private store reachable only through short-lived signed links.

Access is enforced at the database level with row-level security, so only you (and household members you invite) can read your records. You can also lock the app with Face ID or your fingerprint.

Data retention

We keep your data for as long as your account is active. When you delete your account, we permanently erase your data within 7 days, and it rolls off our backups within 30 days. We may retain a minimal set of records where the law requires it (for example, purchase records for tax).

Your rights and choices

You can, at any time:

• Access and export all of your data from Settings.
• Correct or update your information in the app.
• Delete your account and data — see "Deleting your account" below.
• EEA/UK users: object to or restrict processing, and lodge a complaint with your local data-protection authority.
• California users: we do not sell or "share" your personal information as defined by the CCPA, and we will not discriminate against you for exercising your rights.

Deleting your account

Open KeepHive → Settings → Delete account, and confirm. Your account is deactivated immediately and your data is permanently erased within 7 days. If you can't access the app, email hello@keephive.app from your account email and we'll delete it for you.

Full instructions are on our account-deletion page: keephive.app/delete-account.

Children

KeepHive is not directed to children. You must be 18 or older (or the age of majority where you live) to create an account. We do not knowingly collect data from children; if you believe a child has given us data, contact hello@keephive.app and we will remove it.

International transfers

Because our infrastructure is in the United States, using KeepHive involves transferring your data there. Where required, we rely on appropriate safeguards for such transfers.

Changes to this policy

We may update this policy. We'll revise the date above and, for material changes, notify you in the app or by email. Continued use after an update means you accept it.

Contact

Privacy questions, data requests, or general support: hello@keephive.app.