Privacy Policy

Keepsakes operates the website at https://keepsakes.photos and the Keepsakes photo-book application. For data-protection purposes we are the data controller.

Contact: privacy@keepsakes.photos

We collect the following categories of personal data:

• Authenticate you and maintain your account (legal basis: contract performance).
• Store your photos, trips, and layouts while you design your book (contract performance).
• Pass photo and order details to our print partner Prodigi to fulfil your physical book order (contract performance).
• Use the Claude AI (Anthropic) to generate story suggestions, captions, and book layouts based on your inputs (contract performance / legitimate interest).
• Detect and group faces in your photos to help you tag people (on-device processing; no biometric data stored server-side) (legitimate interest).
• Geocode GPS coordinates from your photos to place-name text using the Nominatim API (legitimate interest).
• Send you transactional emails about your order status (contract performance).
• Improve and debug the service using aggregated, anonymised usage analytics (legitimate interest).

We do not sell your personal data, use it for advertising, or share it with any party other than those listed in Section 5.

When you choose to import from Google Photos, we request the following OAuth scope:

• photoslibrary.readonly — allows us to read (not write) your Google Photos library so you can select images to import into your Keepsakes project.
• openid email profile — provides your name and email to create and identify your account.

We do not:

• Write to, modify, or delete any content in your Google Photos library.
• Share your Google Photos content with third parties other than the print partner (Prodigi) solely to fulfil your book order.
• Use Google user data to train AI or machine-learning models.
• Store Google Photos beyond what is needed for your active project (see Section 6 for retention).

• Active projects: Your photos and project data are stored for as long as your project exists in your account.
• After delivery (default): Photo files and layouts are permanently deleted from our storage within 90 days after your book order is marked delivered.
• Account deletion: When you delete your account, all associated photos, trips, and personal data are permanently deleted within 30 days.
• Order records: Basic order records (amount, date, delivery country) are retained for 7 years to comply with financial regulations.
• Backups: Data may persist in encrypted backups for up to 30 additional days after deletion before being fully purged.

If you are in the European Economic Area, UK, or another jurisdiction with equivalent data-protection laws, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate data.
• Erasure ("right to be forgotten"): Ask us to delete your data. You can do this directly from your dashboard or by emailing us.
• Portability: Receive your data in a machine-readable format.
• Objection / Restriction: Object to or restrict processing based on legitimate interests.
• Withdraw consent: Where we rely on consent, you may withdraw it at any time by disconnecting Google Photos or deleting your account.
• Lodge a complaint: You have the right to complain to your local data-protection authority.

To exercise any right, email privacy@keepsakes.photos. We will respond within 30 days.

We use essential cookies only — primarily a session cookie to keep you signed in. We do not use advertising cookies, third-party trackers, or analytics cookies that identify you personally.

Keepsakes is not directed at children under 13 (or 16 in the EEA). We do not knowingly collect data from children. If you believe a child has submitted data to us, contact us and we will delete it promptly.

We use industry-standard safeguards: TLS encryption in transit, AES-256 encryption at rest, row-level access controls (Supabase RLS), and least-privilege access policies. No system is completely secure; in the event of a breach affecting your rights, we will notify you and relevant authorities as required by law.

We may update this policy. If the changes are material, we will notify you by email or by a prominent notice on the site before the change takes effect. The current effective date is always shown at the top of this page.