Privacy Policy

Draft One LLC (“Company,” “we,” “us,” or “our”) operates Kept (“App” or “Service”), a mobile application that helps friends be better friends. This Privacy Policy explains what information we collect, how we use it, and the choices you have regarding your data.

By using Kept, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the App.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Your email address, used for authentication via one-time password (OTP). We do not collect phone numbers or passwords.
• Contact Information You Enter: First and last names, email addresses, birthdays, and personal preferences (such as favorite treats, colors, flowers, and love languages) for the contacts you create within the App. This information is entered voluntarily by you and pertains to people you know.
• Groups and Events: Group names, event details, invitations, RSVP responses, and date availability information.
• Reminders and To-Dos: Task descriptions, due dates, and related notes you create.
• Notes: Any freeform notes you add to contacts or events. We do not require or specifically solicit financial, health, or location information, though you may choose to include such information in freeform notes at your discretion.

1.2 Information Collected Automatically

• Device Information: Device type, operating system version, and unique device identifiers for push notification delivery.
• Push Notification Tokens: We collect push notification tokens to deliver reminders, event updates, and other App communications.
• Usage Data: We may collect anonymized usage data such as feature usage frequency, session duration, and crash reports to improve the App. This data is collected through third-party analytics and crash reporting services.
• Log Data: Our servers may automatically record information such as IP addresses, access times, and referring URLs when you interact with the Service. This data is used for security and operational purposes.

1.3 Information We Do Not Collect

• We do not collect phone numbers.
• We do not collect passwords (authentication is OTP-based).
• We do not collect financial, health, or precise location information.
• We do not access your device's address book or contacts. All contact information in Kept is manually entered by you.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To operate and maintain Kept, including managing your contacts, groups, events, reminders, and to-dos.
• Authentication: To verify your identity through email-based OTP when you sign in.
• Push Notifications: To send you reminders, event updates, RSVP notifications, and other communications relevant to your use of the App.
• AI-Powered Features: To generate personalized suggestions, such as birthday gift ideas, based on the contact preferences you have entered. This involves sending relevant contact data (such as personal preferences and interests) to third-party AI service providers for processing. We send only the minimum data necessary to generate recommendations, and we do not send your email address or authentication details to AI providers.
• Improvement and Analytics: To understand how the App is used, diagnose technical issues, and improve features and performance.
• Communication: To send you service-related notices, including updates to this Privacy Policy or our Terms of Service.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share your information in the following limited circumstances:

• Service Providers: We use third-party services to operate the App, including Supabase (backend infrastructure and database), SendGrid (email delivery for OTP and notifications), Sentry (crash reporting and error tracking), and third-party AI providers (for generating personalized suggestions). These providers access your data only as necessary to perform their functions and are contractually obligated to protect your information.
• Event Participants: When you send invitations through Kept, recipients will receive your event details and may see information you choose to share in the invitation. RSVP responses and availability may be visible to the event organizer.
• Legal Requirements: We may disclose your information if required to do so by law, or if we believe in good faith that such disclosure is necessary to comply with a legal obligation, protect our rights or safety, or investigate potential violations of our Terms of Service.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. AI-Powered Features

Kept may use artificial intelligence to provide features such as gift suggestions based on the preferences and information you have entered for your contacts. When you use these features:

• Relevant contact data (such as favorite treats, colors, flowers, love languages, and any notes you have entered) may be sent to third-party AI service providers for processing.
• We do not send your account email address, authentication credentials, or device identifiers to AI providers.
• AI-generated suggestions are provided for informational and entertainment purposes only. We do not guarantee the accuracy or suitability of any suggestions.
• Third-party AI providers may process the data according to their own privacy policies and data handling practices. We select providers that maintain appropriate data protection standards.
• You may choose not to use AI-powered features, and doing so will not affect your ability to use the core functionality of the App.

5. Data Storage and Security

Your data is stored on secure servers provided by Supabase. We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest. However, no method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms of Service).

6. Your Rights and Choices

• Access and Correction: You can view and update your account information and contact data at any time through the App.
• Account Deletion: You may delete your account through the App. Upon deletion, your data will be permanently removed within 30 days.
• Push Notifications: You can manage or disable push notifications through your device's settings at any time.
• Data Export: You may request a copy of your data by contacting us at the email address below.
• Opt Out of AI Features: You may choose not to use AI-powered features. Contact information will not be sent to AI providers unless you actively use those features.

7. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion of your personal information, and the right not to be discriminated against for exercising your privacy rights. We do not sell personal information. To exercise your CCPA rights, please contact us at the email address below.

8. Children's Privacy

Kept is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at the email address below.

9. Third-Party Links and Services

The App may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through Kept.

10. International Users

Kept is operated from the United States. If you are accessing the App from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. By using the App, you consent to the transfer of your information to the United States.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by email. Your continued use of the App after such changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Draft One LLC
Email: hello@joinkept.app