Privacy policy

This policy explains what information KeepSafe collects when you use the KeepSafe app and this website, why we collect it, and what you can do about it. We have tried to write it in plain language.

The short version

• We collect what we need to run your account and the features you use, and nothing for advertising.
• Your stored credentials are encrypted. We do not read them, sell them or share them.
• The app carries no analytics or tracking scripts.
• You can delete your account, and the data that belongs to it, at any time.

Information you give us

• Account details: your email address, display name, and your password (stored only as a one-way hash). If you sign in with GitHub or Google, we receive your name and email address from that service.
• Credentials you store: the secrets you add to the vault, with their names, providers, projects and environments. Secrets are encrypted before they are stored.
• Monitors you create: the addresses, settings and any headers or request bodies you choose to send.
• Preferences: language, theme, notification choices and alert thresholds.
• Messages you send us: if you use the contact form, your name, email address, topic and message, so that we can reply.

Information created as you use KeepSafe

• Provider data: usage, quota, health and account details that connected services report for your keys.
• Monitor results: whether your endpoints answered, and how quickly.
• Security activity: sign-ins, reveals and security changes, with the IP address, approximate country and device that made them. We keep these so you can spot activity you do not recognise.
• Push subscriptions: if you allow notifications, the address your browser gives us for delivering them.

How we use it

We use this information to provide KeepSafe: to keep your account secure, to store and protect your credentials, to read the services you connect, to check your monitors, to send the alerts and notifications you ask for, and to help when you contact us. We do not use it for advertising and we do not sell it.

Who else handles it

We rely on a small number of service providers to run KeepSafe, each under its own data protection terms:

• managed database hosting, where your encrypted data is stored;
• application hosting, which runs the KeepSafe service;
• an edge network, which delivers the app and this website and protects them from abuse;
• transactional email, used for messages such as password resets;
• a form delivery service, which passes contact-form messages to our inbox;
• a bot check (Cloudflare Turnstile) on the contact form, which confirms a person is sending without tracking you across sites.

When you connect a provider, KeepSafe contacts that service using the key you supplied, only to read the information described above.

How long we keep it

• Account data, credentials, connections and monitors: until you delete them or delete your account.
• Usage history and monitor results: kept for a limited period, then removed automatically.
• Security activity: kept for a limited period so it can help you review your account, then removed automatically.

Your choices

You can view and change most of your information in the app. You can delete individual credentials, connections and monitors, or delete your whole account from Settings → Account. Depending on where you live, you may also have rights to access, correct, export or restrict the use of your information. To use them, send us a message through our contact page.

Security

We protect your information with encryption in transit and at rest, per-credential encryption for your secrets, and the controls described on our security page.

Children

KeepSafe is not intended for children and we do not knowingly collect information from them.

Changes

If we make a meaningful change to this policy, we will update the date above and, where appropriate, tell you in the app.