Privacy policy

Local collection

Keepsake needs no account. Collection text, photos, names, anniversaries and drafts are kept in private app storage. There are no ads, analytics, developer backend or network SDKs; the app declares no INTERNET permission.

Photos and system camera

Only photos selected in the system picker are read and copied locally. EXIF dates and GPS can populate fields. Editing place text does not guarantee removal of metadata from originals. The external camera app delivers an image through a specific temporary URI grant; this capture’s staging file and grant are cleaned up after completion or cancellation.

System speech recognition

Speech input is handled by an external system recognition service. Before starting, the app explains that the service provider may receive audio. Requesting offline recognition does not guarantee that the service works offline. Keepsake receives only recognized text and saves no recording; you can type if you decline or the service is unavailable.

Backup, retention and clearing

Backup, export and device migration are not enabled in this Android version, and system automatic backup is disabled. Ordinary deletion moves items to a recoverable trash and retains data. There is no per-item permanent deletion. Replaced photos, failed imports or deleted drafts may leave unreferenced media.

Clearing this app’s data in Android Settings or uninstalling clears app storage. Gallery originals and other existing copies are not deleted with it and must be managed separately. Remember that this version has no full backup to restore after clearing.

Policy updates

We update this policy when features or data handling change. New uses of data will be explained before you use the relevant feature.