Privacy Policy

1. Information we collect

"We," "us," and "our" in this policy refer to the business that operates Kept, named in full in section 9 below.

Kept collects the information needed to run the service:

• Account information: your name, email, and phone number.
• Recipient information you provide: names, birthdays and occasions, budgets, interests, foods they avoid (only if you turn on food add-ons), and any notes you add.
• Order and billing activity: which suggestions were approved or declined, gift order status, and your reactions to delivered gifts. Payment details themselves are handled and stored by Stripe, not Kept.
• Communications: the emails Kept sends you, and your replies to them. Section 6 lists exactly what kinds.
• Site visits: which pages are opened and the site that linked to them, counted without cookies. Each visitor is represented only by a scrambled code made from their connection that changes every day, so visits can be counted but no one can be followed from one day to the next, and it is never linked to an account. Browsers that send a do-not-track or global privacy control signal are not counted.
• How you found Kept: if you arrive from another site or a link tagged for a campaign, your browser keeps one small Kept cookie for 90 days holding only that site's name, the link's tags and the first page you opened. If you sign up in that time, it is saved with your account, along with your answer to "How did you hear about Kept?" if you give one, so we know which places bring people to Kept. It is never shared. Browsers that send a do-not-track or global privacy control signal don't get the cookie.

2. How we use it

We use this information to generate gift suggestions, send approval requests, process payments, fulfill approved orders, and improve suggestion quality over time. Kept does not sell your information to advertisers or data brokers.

3. Information about your recipients

Because Kept's job is to remember details about the people you're gifting to, you'll naturally enter information about people who aren't the ones using the account. That information is used only to serve your account, to generate and fulfill suggestions for you, and isn't used to build a separate profile on that person or shared with anyone outside of coming up with and fulfilling your gift (see the providers in section 4).

Fulfilling a gift does mean sharing an address with the brand's own store, so it can send the parcel. By default that address is yours, not your recipient's: gifts ship to you and you hand them over, so a store learns nothing about the person the gift is for. If you switch to shipping straight to your recipient (which asks you to confirm you have that person's permission first), that store is then given their name and address, exactly as it would be if you had placed the order yourself. Nothing else about a recipient is ever shared: not their occasion, their interests, your notes about them, or the fact that Kept was involved.

Many gifts are ordered by hand: a person on the Kept team opens the store's own checkout and enters the shipping address for that order. Kept asks you to agree to this before your first gift is ordered, and never orders a gift until you have. The address is used only to complete that checkout. You can withdraw your agreement at any time in Settings; Kept then won't order further gifts for you until you agree again.

4. Service providers we use

Kept relies on a small number of vetted providers to operate, each of which only receives the information needed to do its job:

• Stripe: payment processing and billing.
• Resend: sending account emails, like password resets.
• Supabase: secure database hosting for your account and recipient data.
• Vercel: hosting for the Kept website and app.
• Anthropic: its Claude AI reads the details you enter about a person (relationship, interests, notes, dislikes, the occasion and budget) to come up with gift ideas. It isn't sent their address or your contact details.
• Sentry: error reports when something on the site breaks, with personal details stripped out first.

5. Data retention and deletion

We keep your data for as long as your account is active. From Settings, you can export a copy of your data at any time, or permanently delete your account. Deletion removes your account and recipient data from Kept's active systems. When you remove a single person or occasion, Kept keeps a copy for 90 days so you can bring it back from Recently deleted; after that it's erased for good.

6. Your choices

You can review, edit, or remove recipient information at any time.

Every email Kept sends falls into one of two kinds. The first runs your account: sign-in, security, billing, and the gifts themselves, and can't be turned off, because turning it off would mean Kept could no longer do the thing it exists to do. The second is about your own activity and can be turned off any time from Settings. Kept sends no other kind of email: nothing promotional, and nothing on behalf of anyone else.

• Account and security, always sent: a welcome email when you sign up; password reset links and the confirmation once it's changed; two-factor being turned on or off; a sign-in from a place your account hasn't been used from before; a backup code being used; your account being locked out after repeated failed attempts.
• Billing, always sent: your subscription starting, and your monthly receipt.
• About a gift, always sent, because this is the product: a suggestion ready for your review; a gift needing your approval; a gift shipping; a gift arriving.
• Account activity, optional, turn off in Settings: a nudge to finish setup if you haven't come back since signing up; a reminder for feedback after a gift arrives.

7. Children's privacy

Kept is not directed at children under 13, and we don't knowingly collect account information from anyone under 13.

8. Changes to this policy

If we make a material change to how we handle your information, we'll notify active members by email before it takes effect.

9. Contact

Questions about this policy can be sent to keptgifting@gmail.com.

Cara Engst.