Everything about privacy in Keepr comes back to one rule: you can see a photo if you can reach the album it's in. There is no separate "who can see this photo" list to get wrong.
The five ways someone reaches an album#
Exactly five, and nothing else:
- They created it. Your own albums.
- They're in a circle it's shared with. You shared the album with "grandparents", and they're in that group.
- They're a member of the Family Hub it lives in. The album is part of a shared household archive and they're part of that household.
- You invited them to it by name, as a contributor. They can see it and add their own photos to it.
- You invited them to it by name, as a viewer. They can see it and comment, but not add photos.
If none of those is true, the album isn't there for that person. Not hidden, not restricted — simply not present.
There's no discovery#
Keepr has no public feed, no suggestions, no "people you may know" and no way to browse other people's libraries. Nobody stumbles onto your photos, because there's nothing to stumble through.
That's a design decision rather than a setting, which means it isn't something you can accidentally switch off.
The one deliberate exception#
A share link works without an account, so a relative who won't install anything can still see an album in a browser. You create it, you choose whether people can download from it, you can give it an expiry date, and you can switch it off whenever you like.
Treat it like a key: anyone holding it can open that album. Details in Share with someone without an account.
Hiding a photo from some of the people who could see it#
Within an album someone can reach, you can still take an individual photo out of view for particular circles — useful when one album goes to several groups and one picture isn't for all of them.
That's covered in Hide a photo from a circle, including the one case where it doesn't apply.
Where uploaded photos are stored#
On Keepr's own infrastructure. Some heavy processing — making a video playable, working out what's in a photo for search — happens on a second Keepr server rather than the main one, which is still Keepr's own system and not a third party.
No photo is sent to another company for analysis, advertising or model training. See How search understands your photos.