Privacy policy

The short version: we collect what we need to run plans, keep people safe and handle payments. We never sell your personal data. Your home location is stored rounded to a neighborhood. You can see, download or delete your data.

What we collect

You give us

• Account details: first name, email, password (stored hashed, never readable), birth year and city.
• Profile: anything you add, like a photo or the activities you like.
• Plans: plans you join, host, cancel and keep; messages in plan chats; photos you add to albums; feedback you leave.
• Reports: what you tell us when you report a problem or contact us.

Created as you use Kept

• Check-ins: when you check in, and how (a code, your location at that moment, or the host).
• Location: your home area, rounded to a neighborhood, to show nearby plans. If you turn on “Where the group is”, your live location during that plan only, shared only with that plan’s members.
• Device and usage: basic technical data like browser type and pages visited, used to keep the service working and secure.

From payment processing

• Card payments are processed by Stripe. We receive a token and limited details such as the card brand and last four digits. We never see or store your full card number.
• For hosts receiving payouts, Stripe handles identity and bank verification.

Why we use it

• To run plans: show you plans, let you join, place and release holds, run check-in, chat and albums.
• To keep people safe: verify age, review reports, act on the guidelines, and help in an emergency.
• To handle money: holds, charges, refunds and payouts, and the records tax and payment rules require.
• To improve Kept: understand which features work, fix bugs, and measure whether deposits help people show up. We use aggregated data for this wherever we can.
• To contact you: plan updates, receipts and safety messages. The newsletter only if you opt in.

AI features, in plain words

A few optional features, like the written recap of a plan and some plan suggestions, use AI models run by service providers we contract with. When you use them, we send only what the feature needs: for a recap, the plan details, the itinerary and album captions. We never send payment details, your messages or your exact location. Our contracts do not allow providers to use this data to train their own models. Every AI feature has a plain version that uses no AI, and you can switch AI features off in settings.

Who sees what

• Other members: your first name and last initial, a photo if you add one, and your Kept rate. People in the same plan see that you are going.
• Hosts: the people who joined their plan, and their check-ins. Not your age, email or phone number.
• Venues: only the details of people who choose to share them.
• Service providers: companies that host our systems, process payments, send email and provide the AI features above, only as needed to do that work, under contract.
• The law: when we are legally required, or when we believe it is necessary to protect someone’s safety.

We never sell your personal data, and we do not share it for advertising.

How long we keep it

• Account and profile data: while your account is open. Deleted within 30 days after you delete your account.
• Plan chats: closed a few days after the plan; deleted after 12 months.
• Albums: while the album has members. Your photos leave every album when you delete your account.
• Payment records: as long as tax and payment rules require, usually seven years.
• Safety reports: as long as needed to keep people safe, and to stop removed members from returning.
• Website form messages: up to 24 months.

Your choices and rights

• See and download your data from settings, or ask us for a copy.
• Correct anything that is wrong.
• Delete your account and your data, with the exceptions above.
• Turn off people suggestions, AI features, location sharing and marketing email at any time.
• Depending on where you live, you may have more rights, such as objecting to certain uses. Write to us and we will help.

Security

We protect your data with encryption in transit, hashed passwords, limited staff access, and payment processing that keeps card numbers away from our systems. No system is perfect; if a breach affects you, we will tell you promptly.

Children

Kept is for adults. We do not knowingly collect data from anyone under 18. If you sign up and tell us you are under 18, we refuse the signup and store nothing.

Cookies

See the cookie policy.

Changes

We will update this page when our practices change, and tell you directly about significant changes.

Contact

Questions or requests about your data: support@keptplans.com.