Privacy Policy

Effective Date: February 10, 2026 · Last Updated: February 10, 2026

This Privacy Policy describes how Keepthat (“we,” “us,” “our,” or the “Company”) collects, uses, stores, shares, and protects your personal information when you use the Keepthat mobile application (the “App”) and any related services (collectively, the “Service”). By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

We are committed to protecting your privacy and handling your data in an open and transparent manner. If you do not agree with any part of this Privacy Policy, please do not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: When you create an account, we collect your email address, display name, and authentication credentials. If you use Sign in with Apple, we receive your Apple ID, name (if you choose to share it), and email address (which may be a private relay address).
• User Content: We collect the content you submit to the Service, including URLs, article text, plain text, facts, tags, categories, and any modifications you make to extracted content.
• Preferences: We collect your in-app preferences such as notification settings, preferred quiz times, display theme, and custom topic names.
• Support Communications: If you contact us for support, we may collect your name, email address, and the content of your communication.

1.2 Information Generated Through Use

• Quiz and Learning Data: We collect data about your quiz sessions, including questions asked, answers provided, accuracy rates, completion times, streaks, and spaced repetition metrics (ease factor, review intervals, repetition counts).
• Usage Metrics: We collect information about how you interact with the Service, including daily fact extraction counts, notification interaction data, and feature usage patterns.
• Subscription Information: We record your subscription tier (Free or Pro), subscription status, and expiration dates. We do not collect or store payment card details—all payment processing is handled by Apple.

1.3 Information We Do Not Collect

• We do not access your camera, microphone, photo library, or contacts.
• We do not collect precise geolocation data.
• We do not collect device advertising identifiers for ad targeting.
• We do not use cookies or web tracking technologies within the App.
• We do not serve advertisements or share data with advertising networks.

2. How We Use Your Information

We use the information we collect for the following purposes:

3. Third-Party Services

We use the following third-party services to operate the App. Each processes data only as necessary to provide their respective functionality:

3.1 Supabase (Backend Infrastructure)

We use Supabase for database hosting, user authentication, and API services. Your account data, content, and usage data are stored on Supabase infrastructure. Supabase processes data in accordance with their Privacy Policy. Row-level security policies ensure that only you can access your own data.

3.2 Anthropic (AI Processing)

We use Anthropic’s Claude API to extract facts from content you submit and to generate quiz questions. When you submit a URL or text for processing, the content text is sent to Anthropic’s servers for AI analysis. Anthropic processes this data in accordance with their Privacy Policy and API terms. We do not send your personal account information (name, email) to Anthropic—only the content you choose to process.

3.3 Apple

We use Apple services for authentication (Sign in with Apple), subscription management (StoreKit/App Store), and local push notification scheduling. Apple processes data in accordance with their Privacy Policy.

4. Data Storage and Security

4.1 Where Your Data Is Stored

• Cloud Storage: Your account data, content, and learning progress are stored securely on Supabase-hosted infrastructure.
• On-Device Storage: Certain preferences (theme, custom topics, notification settings) are stored locally on your device using standard iOS storage mechanisms.

4.2 Security Measures

We implement appropriate technical and organizational measures to protect your personal information, including:

• All data transmitted between the App and our servers is encrypted using HTTPS/TLS.
• Database access is protected by row-level security policies, ensuring strict user-data isolation.
• Authentication is managed through industry-standard protocols (JWT tokens, OAuth 2.0).
• Passwords are never stored in plain text; authentication is delegated to Supabase Auth and Apple.

While we take reasonable precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

5. Data Retention

• Active Accounts: Your data is retained for as long as your account is active and you continue to use the Service.
• Archived Content: Facts you archive remain in our systems but are hidden from your active view. You may permanently delete archived content at any time.
• Account Deletion: When you delete your account, all associated data (profile, facts, sources, quiz history, preferences) is permanently deleted from our servers. This action is irreversible.
• Backup Retention: Residual copies in backups may persist for a limited period after deletion but will be overwritten in the normal course of operations.

6. Your Rights and Choices

6.1 General Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: You may request a copy of the personal data we hold about you. Pro subscribers can export their full knowledge base as a JSON file directly from the App.
• Correction: You may update or correct your account information through the App settings.
• Deletion: You may delete individual facts, clear all data, or delete your entire account through the App. You may also request deletion by contacting us.
• Portability: Pro subscribers may export their data in a machine-readable format (JSON).
• Objection/Restriction: You may object to or request restriction of certain processing activities by contacting us.
• Withdraw Consent: Where processing is based on consent (e.g., notifications), you may withdraw consent at any time through the App settings or device settings.

6.2 Notification Controls

You can manage push notifications at any time by:

• Toggling notification preferences in the App settings.
• Adjusting notification permissions in your device’s iOS Settings.
• Customizing the time of day you receive reminders.

6.3 Subscription Management

You can manage or cancel your subscription through your Apple ID account settings. We do not have the ability to cancel subscriptions on your behalf.

7. European Economic Area (EEA) and UK Residents

If you are located in the EEA or UK, you have additional rights under the General Data Protection Regulation (GDPR) and UK GDPR, including the right to lodge a complaint with your local data protection authority. The legal bases for our processing are set forth in Section 2 above.

Data transfers outside the EEA/UK are protected by appropriate safeguards, including the use of Standard Contractual Clauses where applicable.

8. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request information about the categories and specific pieces of personal information we collect, the purposes of collection, and the categories of third parties with whom we share information.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, please contact us at the address provided in Section 14.

9. Children’s Privacy

The Service is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child under the applicable age, we will take steps to delete such information promptly. If you believe a child has provided us with personal information, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your country. By using the Service, you consent to the transfer of your information to such countries. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

11. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• Service Providers: With third-party service providers described in Section 3, solely to provide the Service.
• Legal Requirements: When required by applicable law, regulation, legal process, or enforceable governmental request.
• Safety and Rights: To protect the rights, property, or safety of Keepthat, our users, or the public as required or permitted by law.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control.
• With Your Consent: We may share information with your explicit consent for purposes not described in this policy.

12. Third-Party Links

The Service may contain links to third-party websites and content sources (articles, videos) that you choose to process. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App or through other reasonable means. The “Last Updated” date at the top of this policy indicates when it was last revised. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We will respond to your inquiry within 30 days.