Keepadoo Privacy Policy

Effective date: 3 October 2026

Keepadoo is operated by Abdurhmn Alageeli, the data controller for Keepadoo.

Privacy: [email protected] Website: https://keepadoo.com Location: Kingdom of Saudi Arabia

This Privacy Policy explains how Keepadoo handles personal data when you use the Keepadoo iOS app, website, support services, and optional cloud features.

1. Local-only use and optional accounts

You can use Keepadoo without creating an account.

If you stay in local-only mode, the subscriptions, warranties, reminders, notes, and attachments you add to Keepadoo remain on your device, apart from limited processing performed by Apple or device/platform services needed to operate iOS.

If you choose to sign in with Apple, you can use optional cloud backup, synchronization, and restoration. Keepadoo does not silently upload eligible local records just because you sign in. You are asked before first-time cloud backup and synchronization begins.

2. Information Keepadoo may process

Depending on the features you use, Keepadoo may process:

• Account information: your Apple authentication identifier, Keepadoo/Supabase user identifier, email address or Apple private-relay address, and session information.
• Subscription and warranty information: names, categories, dates, prices, currencies, reminder settings, notes, and similar information you choose to enter.
• Photos and attachments: product, receipt, warranty, or similar images you choose to store and synchronize.
• Synchronization information: limited technical records needed to back up, synchronize, restore, resolve conflicts, and delete cloud data reliably.
• Support information: information you send when contacting Keepadoo support.
• Diagnostics: limited crash and technical-failure information through Firebase Crashlytics.
• Purchase status: verified StoreKit information needed to determine whether Keepadoo Plus is active.

Keepadoo does not receive or store your payment-card details.

A subscription-management URL stored by Keepadoo remains device-local and is not synchronized to Keepadoo's cloud database.

3. Photos and metadata

When a photo is prepared for cloud synchronization, Keepadoo creates a normalized cloud copy and removes source metadata such as EXIF, IPTC, and GPS metadata. The original local image is not altered by that process.

Because you choose the content you upload, attachments may contain personal or third-party information. Please avoid uploading unnecessary sensitive personal information.

4. Why Keepadoo processes personal data

Keepadoo processes personal data only for defined purposes and where an appropriate legal basis applies.

Information is processed as necessary to provide services you request, including Sign in with Apple, optional cloud backup and synchronization, restoration, cloud attachment storage, account management and deletion, and Keepadoo Plus entitlement through StoreKit.

Where permitted by applicable law, Keepadoo may process limited technical information for legitimate interests such as security, service reliability, crash diagnosis, and preventing abuse. Keepadoo limits this processing and does not use legitimate interests as a general basis for processing the contents of user-selected cloud attachments.

Keepadoo may also process or retain information where required by applicable law. Where consent is legally required for a particular activity, Keepadoo will request it as required by law.

5. Service providers

Keepadoo uses the following main providers:

• Supabase for optional account authentication, synchronized database storage, private cloud attachments, private Realtime signaling, and related cloud operations. Keepadoo's production Supabase environment is hosted in Frankfurt, Germany.
• Firebase Crashlytics for limited crash and technical-failure diagnostics. Keepadoo does not use Firebase Analytics.
• Apple for Sign in with Apple, App Store distribution, StoreKit purchases, payments, subscription management, cancellations, and refunds.

These providers may process information under their own service terms and legal obligations.

6. International processing

Some Keepadoo service providers process personal data outside Saudi Arabia. In particular, Keepadoo's production Supabase environment is hosted in Germany, and Apple, Firebase/Google, or infrastructure providers may process relevant information in other jurisdictions.

Where personal data is transferred outside Saudi Arabia, Keepadoo applies applicable Saudi personal-data protection and transfer requirements. International transfers are limited to information needed for the relevant service, and appropriate safeguards may include contractual, security, data-minimization, and transfer-risk measures depending on the circumstances.

7. Retention

Keepadoo keeps personal data only for as long as necessary for the purpose for which it is processed, unless a longer period is required or permitted by law.

In general:

• active synchronized user content is kept while needed to provide the service, until you delete it or complete account deletion;
• synchronization, conflict, deletion, and migration records are generally retained for limited periods, usually up to 30 days after they are no longer operationally needed;
• superseded cloud attachment versions may be eligible for deletion after 30 days once the replacement is verified and no unresolved conflict requires the older version;
• support correspondence is generally retained for 12 months after the support case is resolved;
• crash and provider operational logs are retained according to the relevant provider's configured retention and service terms.

When personal data is no longer needed, Keepadoo deletes, destroys, or anonymizes it as required by applicable law.

8. Account deletion

If you create a Keepadoo account, you can request account deletion from within the app.

Keepadoo's deletion process is designed to remove synchronized cloud data and cloud attachments before deleting the associated authentication account. If deletion is interrupted, Keepadoo may retain limited deletion-workflow information so the process can safely continue rather than incorrectly reporting success.

9. Your privacy rights

Subject to applicable Saudi personal-data protection law and its exceptions, you may have rights including the right to be informed, access personal data, obtain a readable copy, request correction or updating, request destruction where applicable, withdraw consent where consent is the legal basis, and submit a complaint to the competent authority.

To make a privacy request, contact [email protected].

Keepadoo may take reasonable steps to verify your identity or authority before responding to a request.

10. Security

Keepadoo uses technical and organizational safeguards intended to protect cloud data, including authenticated access, owner-based database permissions, private cloud storage, private Realtime channels, HTTPS/TLS transport, separated environments, restricted production credentials, and minimized diagnostic data.

No storage or transmission system can be guaranteed to be completely secure.

11. Tracking, advertising and analytics

Keepadoo:

• does not display advertising;
• does not use Firebase Analytics;
• does not use behavioral analytics or session replay;
• does not use personal data for cross-app or cross-site tracking.

Keepadoo's App Store privacy disclosure identifies Tracking: No.

12. Children and legal capacity

Keepadoo's App Store age rating describes the content available in the app. It does not determine whether a person has legal capacity to enter into an agreement or independently authorize personal-data processing.

Keepadoo is not specifically directed to children and does not provide a separate child-account or guardian-verification system.

Where a person lacks the legal capacity required to use optional account or cloud services independently, those services should be used through, or with the involvement of, the person's legal guardian where required by applicable law.

13. User-provided content

Keepadoo lets you store information and images you choose to provide, including product and receipt images.

You should upload only content you are permitted to store and process. Keepadoo does not claim ownership of user-provided content merely because it is stored or synchronized through Keepadoo.

14. Changes to this Privacy Policy

Keepadoo may update this Privacy Policy when its services, providers, legal obligations, or data-processing practices change.

For material changes, Keepadoo will update the effective date and provide appropriate notice through the app, website, or another suitable method where required.

15. Contact

For privacy questions or requests:

Abdurhmn Alageeli Privacy: [email protected] Website: https://keepadoo.com Location: Kingdom of Saudi Arabia

If you believe your rights under applicable Saudi personal-data protection law have not been respected, you may also have the right to submit a complaint to the competent Saudi authority in accordance with applicable procedures.