Privacy
Last updated October 25, 2026
KeepThePeeps helps you keep up with the people you care about. Your address book is personal, so this page says plainly what we do with it.
What we store
- Your account: email, name, timezone, a salted hash of your password, and your plan.
- Your people: whatever you add or import: names, phone numbers, emails, companies, notes, birthdays, tags, and the conversations you log.
- Product usage: simple counts such as "imported a file" or "hit the free limit", tied to your account, so we can fix confusing steps and run the service. No third-party analytics or ad trackers.
What we never do
- We do not sell or share your contacts, and we do not use them for advertising.
- We do not read your text messages. The optional Messages activity script runs on your own computer and sends only a count and a last-message date per phone number or email. No message text is uploaded.
- We do not scrape LinkedIn, Facebook or any other site. We only read files you export and upload yourself, and Google Contacts if you connect it.
Where your data goes
- Hosting: your data is stored in a private database on our own server.
- AI assistant: chat messages are processed by an open model running on our own hardware. They are not sent to an outside AI company unless you point the assistant at a server you run yourself.
- Payments: Paddle is our merchant of record. It collects your payment details and sends us your plan status. We never see your card number.
- Sign in with Google: we receive your Google account ID, email address, and name, only to sign you in. Nothing else is requested for sign-in.
- Google Contacts labels (optional): if you turn on label sync we ask for permission to edit your contacts, and use it only to add or remove labels named "KeepThePeeps: ..." that mirror your closeness levels and archive. We never delete or change your contacts' details. You can turn it off or disconnect Google at any time; labels already created stay in your Google Contacts until you remove them.
- Gmail (optional): if you connect it we request read-only access to message metadata (the To, Cc and date headers of your sent mail, never the body or subject). We store only how many times and when you emailed each of your contacts, and discard the rest. You can disconnect at any time.
- Email reminders (optional): if you turn them on, we send your daily reminder to your account email through our email provider (Resend). The message lists the names and dates in your reminder. You confirm your address first and every email has a one-click unsubscribe link.
- Google Contacts: if you connect it, we request read-only access to your contacts, store an encrypted refresh token so you can sync again, and you can disconnect at any time. Our use of information from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
- Notifications: reminders sent as web push go through your browser vendor's push service and contain the text of the reminder.
Your controls
- Export everything as JSON or vCard from Settings at any time.
- Delete your account from Settings. Your people, notes, tokens and settings are removed immediately. Encrypted backups roll off within 14 days.
- Revoke API tokens and the Google connection whenever you like.
Information about other people
The contacts you add are your own personal records about people you know. Please only store information you would be comfortable having them know you keep, and respect requests from people who ask you to remove them.
Security
Passwords are hashed with scrypt, sessions use secure cookies, third-party tokens are encrypted at rest, and you can turn on two-step sign-in. No system is perfectly secure; if we ever learn of a breach affecting you, we will tell you promptly.
Contact
Questions or requests: [email protected]. If you are in the EU or UK you also have the right to access, correct, and erase your data and to complain to your data protection authority.