Privacy Policy

Keep360 (“we”, “us”, “keep360.in”) helps you store documents, health records, expenses, reminders and private notes for yourself, your family and your groups. Privacy is the core of the product. This policy explains what we collect, why, and the choices you have. It is written to comply with the Digital Personal Data Protection Act, 2023 (India) and general good practice worldwide.

1. What we collect

• Account details — name, email address, username, and optional profile details (photo, bio) you choose to add.
• Content you store — documents, health records, expenses, reminders, notes, and details of family members or group members you add. You control all of this content.
• Technical data — device/browser type, and security logs (sign-ins, uploads, shares) kept in a tamper-resistant audit trail so you can see activity on your account.
• Notifications data — if you enable push notifications, we store the subscription token for your device. You can turn this off anytime.

2. End-to-end encryption

Documents and notes you mark as sensitive are end-to-end encrypted with a password only you know. We never see this password and cannot reset it — not an admin, not even Keep360’s own servers can read those files. If you lose the password, content can only be recovered with your Recovery Key.

3. How we use your data

• To provide the service — storing, organising and sharing what you choose with the people you choose.
• To send reminders and alerts you have asked for (email or push).
• To keep the service secure — fraud prevention, audit logs, abuse detection.
• To improve Keep360 using aggregated, de-identified usage statistics.

We do not sell your data, show you ads, or share your content with third parties for marketing.

4. Sharing within groups

Content you place in a group is visible to members of that group according to the access you set. You are responsible for what you share and with whom. Group owners control membership via invite codes.

5. Where your data lives

Data is stored with our infrastructure provider (Supabase) using encryption at rest, row-level security, and short-lived (60-second) signed links for file access. If you connect Google sign-in or Google Drive backup, Google’s privacy policy also applies to that connection.

6. Google Drive access

Connecting Google Drive is optional. If you connect it, Keep360 requests only the drive.file scope — Google’s most limited Drive permission. This means Keep360 can access only the files it creates in your Drive on your behalf. We cannot see, read, download, or manage any other files or folders in your Google Drive.

We use this access solely to store and retrieve the documents you choose to back up, organised inside a “Keep360” folder in your own Google Drive. The files stay in your Google account and under your control: you can disconnect Google Drive at any time from within Keep360, and you can delete the files directly in Google Drive.

Keep360’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google Drive data for advertising, we do not sell it, and we do not transfer it to others except as necessary to provide this feature, to comply with applicable law, or with your explicit consent.

7. Retention

We keep your data for as long as your account exists. Deleted items are removed from view immediately and purged from backups on a rolling basis.

8. Your rights and controls

• Export — download everything we hold about you as a file from Profile → Privacy & your data.
• Correction — edit your profile and content at any time.
• Deletion — delete your account from the Profile page. This permanently removes your account and personal details and cannot be undone.
• Notifications — email and push notifications can each be switched off in your Profile.
• Grievance — contact our grievance/support contact below; we aim to respond within 7 days.

9. Children

Keep360 is not directed at children under 18. Parents/guardians may store records about family members (including children) they are responsible for; that data is treated with the same protections as everything else.

10. Changes to this policy

If we make material changes we will notify you in the app or by email before they take effect.

11. Contact us

Questions, requests or complaints: support@keep360.in