Kepsake Privacy Policy
Last updated: August 2, 2026
1. Who processes your data
Data controller: Volodymyr Viktorovych Kovalchuk, an individual entrepreneur (ФОП) registered in Ukraine, based in Dnipro, Ukraine. Privacy contact — support@kepsake.com.
2. What data we collect
- Account data: email, name (via Clerk on sign-up/sign-in).
- Content: photos you upload, and metadata about them (upload date, AI selection status, album title).
- Usage data: technical information about how you use the Service (for debugging), plus advertising identifiers and browsing data collected via Meta Pixel and Google Ads tracking on our marketing pages (see Cookies below).
- Premium subscription payment data is processed by Paddle — we don't store card numbers; see Paddle's Buyer Terms & Privacy Notice (paddle.com/legal) for details.
3. Why we collect it
To provide the Service (storing and displaying albums), to curate albums using AI, to process Premium payments, to respond to support requests, to improve AI selection quality, and to measure and optimize our advertising (Meta Pixel, Google Ads).
4. Who we share data with
To run the Service, we use the following providers (sub-processors), who process data on our behalf:
- Clerk — authentication and account management.
- Cloudflare R2 — storage of uploaded photos.
- OpenRouter and the underlying model provider it routes to (currently Google, Gemini model) — processes photos for AI album curation. Photos are sent to this provider temporarily for analysis and aren't retained by them beyond their standard policy.
- Railway — hosting for the app and database.
- Paddle.com Market Ltd. — processes Premium subscription payments as Merchant of Record.
- Meta and Google — receive advertising identifiers and browsing data via Meta Pixel and Google Ads tracking to measure and target ads (marketing pages only).
We don't sell your data to third parties.
5. International data transfers
The providers above may process data outside your home country. We rely on their own compliance safeguards (SOC 2, GDPR-alignment where applicable).
6. How long we keep data
For as long as your account is active. When you delete your account, photos and metadata are removed from our storage within 30 days.
7. Your rights
You can request access to, correction of, or deletion of your data by emailing support@kepsake.com. You can also delete an individual album or your whole account yourself in account settings.
8. Cookies
We use technical cookies required for authentication (via Clerk). On our public marketing pages (home, trip), we also use Meta Pixel and Google Ads tracking cookies to measure ad performance and show relevant ads. Where required by law, we'll ask for your consent to these non-essential cookies via a cookie banner before they're set.
9. Security
Photos are stored in a private bucket accessed via signed links; who can access an album is controlled by the privacy setting you choose.
10. Children
The Service isn't intended for anyone under 18 without a parent or guardian's consent. We don't knowingly collect data from children without such consent.
11. Changes to this policy
We may update this policy. We'll post material changes on the site or notify you by email.