Privacy Policy

Effective date: 4 November 2026

1. Who operates Keepadoo

Keepadoo is operated by Abdurhmn Alageeli, the data controller for Keepadoo.

Contact: privacy@keepadoo.com Website: https://keepadoo.com Location: Kingdom of Saudi Arabia

This policy applies to the Keepadoo iOS app and the Keepadoo website and support channels. Keepadoo is offered worldwide. Nothing in this policy limits privacy or consumer rights that cannot be waived under the law that applies to you.

2. How Keepadoo stores your records

Keepadoo is local-first. Subscriptions, warranties, notes, reminder definitions, and app-managed photo and receipt copies are saved in a Core Data store on your device. Keepadoo does not require a Keepadoo account or Sign in with Apple.

When iCloud is available for Keepadoo, Apple’s private CloudKit database automatically mirrors eligible records across devices signed in to the same iCloud account. Private CloudKit data is associated with the user’s iCloud account, is subject to the user’s iCloud storage quota, and is not visible to the Keepadoo operator through the CloudKit developer portal. Keepadoo can continue operating locally when iCloud or the network is unavailable.

Synchronization is not instantaneous. If the app is removed, the device is lost, or local data is otherwise erased before pending changes reach iCloud, those unsynchronized changes may be lost. A deletion made offline may also be unavailable to other devices until it synchronizes.

3. Information handled by the app

Records you create

Keepadoo handles the information you enter, such as subscription and warranty names, categories, providers or retailers, dates, billing cycles, status, price or amount, currency, serial numbers, notes, archive state, management URLs, and reminder choices. This content is stored locally and, when available, in the user’s private iCloud database.

Product photos and receipts

When you add a product photo or receipt, Keepadoo creates an app-managed normalized copy. The app limits image dimensions and size, uses JPEG normalization where appropriate, and removes unnecessary source metadata such as GPS, EXIF, and IPTC metadata. The normalized copy is stored locally and may synchronize through the user’s private iCloud database. Keepadoo does not create public attachment URLs.

Device-local information

Keepadoo may keep preferences, StoreKit entitlement state, notification identifiers, and operational status locally. Reminder definitions can synchronize with records, while the actual iOS notification requests are scheduled separately on each device.

Purchases

Apple processes Keepadoo Plus purchases, renewals, cancellations, refunds, and purchase restoration through StoreKit and the App Store. Keepadoo reads Apple-verified entitlement state on the device. Keepadoo does not operate a separate purchase-entitlement server.

Diagnostics

Keepadoo uses Firebase Core and Firebase Crashlytics to diagnose crashes and reliability problems. Crashlytics may process crash reports, diagnostic events, installation-related diagnostic identifiers, device model, operating-system version, app version, and technical state needed to investigate failures. Keepadoo restricts its own diagnostic fields and does not intentionally send record names, notes, images, receipt contents, prices, attachment paths, iCloud record identifiers, or notification text.

Firebase Analytics, behavioral analytics, advertising, session replay, and tracking are not included.

Website and support

The Keepadoo website is delivered using Cloudflare, which may process IP addresses, request metadata, security signals, and operational logs. If you contact Keepadoo, the relevant email provider processes your address, message, headers, and any attachments you choose to send.

4. Why information is processed

Information is processed to provide local record keeping, private iCloud synchronization, attachment handling, reminders, StoreKit entitlements, user support, security, crash diagnosis, and reliability improvement. Keepadoo does not use user content for advertising or behavioral profiling.

5. Legal bases for processing

Where applicable law requires a legal basis, Keepadoo relies on the basis appropriate to the particular processing:

• Requested service or performance of the service relationship: to provide local record keeping, iCloud synchronization requested or enabled through the user's Apple environment, attachment handling, reminders, StoreKit entitlement handling, and support requested by the user.
• Legitimate interests, where applicable: to secure the app, prevent abuse, diagnose crashes, improve reliability, and protect and support the service, after balancing those interests against the user's rights and interests.
• Legal obligation: where processing is necessary to comply with applicable law.
• Consent: only where a specific feature or applicable law requires consent. Keepadoo does not rely on blanket consent as the general basis for all processing.

6. Service providers and international processing

• Apple: iCloud/CloudKit private storage, StoreKit, App Store billing, and operating-system services.
• Google Firebase: Firebase Core and Crashlytics diagnostics.
• Cloudflare: website hosting, delivery, and security.
• Email provider: support and privacy-request delivery.

These providers may process information in countries other than the user’s country under their applicable terms and safeguards. Keepadoo does not sell personal information and does not use personal information for cross-context behavioral advertising.

7. Retention and deletion

Local records remain until you delete them, use Delete all Keepadoo data, erase local app data, or remove the app. Private iCloud copies remain subject to Apple’s iCloud synchronization, retention, recovery, and deletion behavior.

Delete all Keepadoo data removes Keepadoo records, reminders, attachments, and related local data and creates deletions for synchronization to private iCloud. It also clears Keepadoo-owned local notifications. iCloud deletion can take time; Keepadoo does not claim remote deletion is complete until synchronization succeeds. Removing the app before pending deletion reaches iCloud can allow the prior iCloud copy to return after reinstall.

Deleting Keepadoo data or the app does not cancel Keepadoo Plus. Apple subscriptions must be managed through the user’s Apple account.

Crashlytics and website infrastructure records follow the configured retention and deletion practices of the relevant providers. Support correspondence is retained only as reasonably necessary to address the request, meet legal obligations, and protect the service.

8. Your choices and rights

You can use Keepadoo locally without iCloud, control iCloud availability through Apple’s device settings, edit or delete individual records and attachments, use Delete all Keepadoo data, manage notifications in iOS Settings, and manage Keepadoo Plus through Apple.

Depending on where you live, applicable law may provide rights concerning access, correction, deletion, restriction, objection, portability, withdrawal of consent, or complaint to a regulator. To make a privacy request, contact privacy@keepadoo.com. Keepadoo may need information reasonably necessary to verify and respond to the request. Non-waivable rights remain unaffected.

9. Children

Keepadoo is a general record-organizing app and does not include advertising, social networking, public profiles, messaging, gambling, or mature content. The App Store age rating is determined through Apple’s age-rating process. Parents or guardians with privacy questions may contact privacy@keepadoo.com.

10. Changes

The effective date above will be updated when this policy changes. Material changes will be communicated as required by applicable law or through an appropriate app or website notice.