Privacy Policy

What we collect

• Account details: your name, email address and, if you sign in with Google or Microsoft, the basic profile those providers share.
• What you add: products, purchase and warranty details, receipts, invoices, photos and other documents, notes, reminders and household members you invite.
• If you connect Gmail, Outlook or Google Calendar: read-only access used only to find purchase emails or add your reminders. You can disconnect at any time in Settings.
• Security and usage data: sign-in history, devices and IP addresses for account protection, and product analytics events that never include your emails, names, serial numbers, prices or document contents.

How we use it

To run KeepOwned: storing your records, reading invoices you upload to fill in details automatically, sending warranty and maintenance reminders, keeping your account secure and improving the product. We do not sell your data or use it for advertising.

Who helps us run the service

• Supabase: database hosting.
• Cloudflare R2: encrypted storage for your documents and photos.
• OpenRouter and the AI model providers it routes to: reading invoices and answering assistant questions you ask.
• Resend: sending emails such as reminders and sign-in links.
• Razorpay: processing payments for paid plans. We never see or store your full card details.
• PostHog: privacy-preserving product analytics.
• Google and Microsoft: only if you choose to sign in or connect accounts with them.

Google user data

KeepOwned's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to detect purchases you choose to import and is never used for advertising or shared with others except as needed to provide that feature.

Your choices

• Export or delete your data from Settings at any time. Deleting your account removes your records from our systems.
• Disconnect Google, Microsoft, Gmail, Outlook or Calendar access from Settings.
• Turn email reminders on or off in notification settings.

Security

Data is encrypted in transit, documents are only reachable through short-lived signed links, and connected-account tokens are encrypted at rest. You can add a passkey or two-step verification to your account.