Privacy Policy

1. Introduction

Keepr Circles ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our photo sharing application and services (the "Service").

By using our Service, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account through Replit Auth, we collect:

Email address
First and last name
Profile picture URL (from your authentication provider)
Unique user identifier from authentication provider

2.2 Content Data

You choose to upload and share:

Photos and videos with metadata (EXIF data, timestamps, file size, GPS coordinates if present)
Album names and descriptions
Circle names and descriptions
Captions and comments on content
Chat messages within circles (end-to-end encrypted where applicable)
Moments (ephemeral 24-hour stories)
Timeline posts including text, milestones, and media attachments

2.3 Usage Data

We automatically collect:

Log data (IP address, browser type, access times)
Device information (operating system, device type, screen resolution)
Usage patterns (features used, time spent in app)
Performance data for service improvement
Simple Mode preference (device performance optimization setting)
PWA installation status and notification preferences

2.4 Payment Information

For subscription services, Stripe processes:

Credit card information (we never store full card details)
Billing address and contact information
Payment history and transaction records
Family Hub subscription details (if applicable)

2.5 Technical Processing Data

For media optimization and delivery, we process:

Client-side compression data (WebP/H.264 encoding parameters)
Video transcoding metadata (resolution, duration, codec information)
Thumbnail and preview generation data
CDN cache identifiers for efficient content delivery

3. How We Use Your Information

Purpose	Data Used	Legal Basis
Account creation and authentication	Email, name, authentication data	Contract performance
Photo/video storage and sharing	Uploaded content, sharing preferences	Contract performance
Media optimization and CDN delivery	Photos, videos, thumbnails, compression data	Contract performance
Real-time features (chat, notifications)	Messages, activity data	Contract performance
Moments (ephemeral stories)	24-hour temporary content, view counts	Contract performance
Subscription billing	Payment information, usage data	Contract performance
Family Hub management	Member lists, shared storage allocations	Contract performance
Performance optimization	Device type, Simple Mode preference	Legitimate interests
Service improvement	Usage patterns, performance data	Legitimate interests
Legal compliance	All data as required	Legal obligation

4. Data Sharing and Storage

4.1 Within Keepr Circles

Your data is shared according to your privacy settings:

Circle Members: Can see content you share to their circles
Album Contributors: Can view and add to albums where they have permissions
Family Hub Members: Can share storage pool and see shared content
Public Shared Links: Content accessible via secure, time-limited links you generate
Moments Viewers: Circle members can view your ephemeral stories for 24 hours

4.2 Third-Party Services

We share data with trusted service providers:

Wasabi Cloud Storage: Secure storage of your photos and videos (S3-compatible)
Content Delivery Network (CDN): Fast, cached delivery of your media files globally
Stripe: Payment processing for subscriptions and Family Hub billing
Replit Auth: Authentication and account management
SendGrid: Email invitations, notifications, and transactional emails

4.3 CDN and Media Delivery

To provide fast and reliable access to your content:

Optimized versions of your media are cached on CDN edge servers globally
Shared CDN URLs are used for circle-shared content to improve cache efficiency
Presigned URLs with time-limited access (typically 7 days for shared content, 72 hours for Moments)
Original files remain securely stored in cloud storage

4.4 Legal Requirements

We may disclose information when required by:

Valid legal process (subpoenas, court orders)
Law enforcement requests with proper authority
Emergency situations involving safety risks
Compliance with applicable laws and regulations

5. Data Security

We implement comprehensive security measures:

5.1 Technical Safeguards

HTTPS encryption for all data transmission
Encrypted storage of sensitive data
Secure session management with HTTP-only cookies
Regular security audits and vulnerability assessments
Secure media proxy endpoints preventing direct storage access

5.2 Access Controls

Role-based access to user data
Token-based authentication for media access
Time-limited presigned URLs for content delivery
Regular access reviews and permission updates

5.3 Data Protection

Regular backups with encryption
Secure deletion of removed content
Isolation between user accounts and circles
Monitoring for unauthorized access attempts

6. Your Privacy Rights

6.1 Access and Control

You have the right to:

Access: View all personal data we hold about you
Rectification: Correct inaccurate or incomplete information
Portability: Export your data in machine-readable format (JSON or interactive HTML)
Deletion: Request removal of your personal data

6.2 Data Export (GDPR Compliance)

Our comprehensive data export feature provides:

Complete download of all your photos and videos with presigned access URLs
Export of all metadata, captions, and album information
Interactive HTML export page for easy viewing
JSON manifest for programmatic access
XSS-safe handling of all user-generated content

6.3 Privacy Settings

Within the app, you can:

Control album and circle sharing settings
Manage contributor permissions
Generate and revoke shared links
Delete photos, albums, and circles
Update profile information
Configure notification preferences
Enable Simple Mode for reduced tracking

6.4 Communication Preferences

Opt out of email notifications
Control in-app notification settings
Manage marketing communications
Mute notifications from specific circles

7. Data Retention

7.1 Active Account Data

Account information: Retained while account is active
Photos and content: Stored according to your personal storage quota
Chat messages: Retained for service functionality
Moments: Automatically deleted after 24 hours
Usage logs: Typically retained for 90 days
CDN cached content: Automatically expires based on URL validity

7.2 Account Deletion

When you delete your account:

Personal data is removed within 30 days
Photos you uploaded are deleted from cloud storage
CDN cached versions expire automatically
Shared content may remain in circles based on other users' rights
Some data may be retained for legal/security purposes (up to 7 years)

7.3 Subscription and Family Hub Data

Payment records: Retained for tax and legal compliance (7 years)
Transaction history: Available through your account while active
Family Hub membership: Retained while Hub is active
6-month grace period data for subscription lapses

8. International Data Transfers

Your data may be processed in countries other than your residence:

Cloud storage servers may be located globally (Wasabi regions)
CDN edge servers distribute content worldwide for performance
We ensure adequate protection through appropriate safeguards
Standard Contractual Clauses are used for EU data transfers
You consent to such transfers by using our Service

9. Cookies and Tracking

9.1 Essential Cookies

Session authentication
Security and fraud prevention
Service functionality and preferences
Simple Mode and theme preferences

9.2 Performance Data

Device capability detection for media optimization
Scroll performance and rendering metrics
Video playback quality adaptation
Error tracking and debugging

9.3 Public Marketing Page Analytics

On our public, unauthenticated marketing pages only — such as the home page, pricing page, comparison pages, and our For Photographers page — we use Microsoft Clarity to understand how visitors interact with the page (clicks, scrolls, and aggregate session recordings). This helps us improve the clarity and usefulness of our marketing content.

Clarity is never loaded on signed-in app pages, your Circles, your Family Hub, your photos, your invitations, or any shared content.
All form fields and text inputs are masked by default, so Clarity cannot read what you type (including email addresses or passwords on sign-in forms).
Data collected by Clarity is governed by Microsoft's Privacy Statement and the Clarity Terms of Use.
You can opt out of Clarity site-wide by enabling Do Not Track or using a tracker-blocking browser extension.

9.4 What We Don't Track

No third-party advertising cookies
No cross-site tracking
No sale of personal information to advertisers
No AI/ML training on your content

9.5 Cookie Control

You can control cookies through your browser settings, but disabling essential cookies may affect service functionality.

10. Children's Privacy

Keepr Circles is designed for family use but requires users to be at least 13 years old:

We do not knowingly collect information from children under 13
Parents can manage family members' participation in circles
If we learn a child under 13 has provided information, we will delete it
Parents should supervise their children's use of the Service
Family Hub administrators are responsible for member eligibility

11. GDPR and Regional Compliance

11.1 European Union Rights

If you're in the EU, you have additional rights:

Right to object to processing
Right to restrict processing
Right to lodge complaints with supervisory authorities
Right to withdraw consent
Right to receive data in portable format (our export feature)

11.2 California Privacy Rights

California residents have rights under CCPA:

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of sale (we don't sell personal information)
Right to non-discrimination for exercising privacy rights

12. Updates to This Policy

We may update this Privacy Policy to reflect:

Changes in our data practices
New features or services (like Moments, Family Hubs, CDN improvements)
Legal or regulatory requirements
Industry best practices

We will notify you of material changes through email or in-app notifications at least 30 days before they take effect.

14. Legal Basis Summary

We process your personal data based on:

Contract: To provide the Service you requested (storage, sharing, delivery)
Consent: For optional features and marketing
Legitimate Interests: For service improvement, security, and performance optimization
Legal Compliance: To comply with applicable laws

This Privacy Policy is designed to be transparent about our data practices while protecting your family's precious memories. If you have questions, please don't hesitate to contact us.