What stays on
your phone

What we collect

Nothing. The app has no account system, no sign-in and no backend. It does not send your entries, photos, settings or usage anywhere, because there is nowhere for it to send them.

We do not use analytics, crash reporting, advertising identifiers or third-party tracking software of any kind.

What lives on your device

All of it, and only there:

• Your written entries, and the day each belongs to.
• Photos you attach to a day, stored as copies inside the app.
• Which pieces are placed, sealed or left as quiet days.
• Your settings — look, appearance, hemisphere, reminder.

This data is held in the app’s private storage on your phone, which other apps cannot read.

Nothing leaves your phone

Keepsake makes no network requests at all. There is no server behind it, no API to call, no sync and no remote configuration. The questions, the twelve months of pigment and every board you fill are already in the app when you install it, which is why it works the same in airplane mode as it does at home.

There are also no in-app purchases and no subscriptions, so the app never handles or sees payment information. Nothing about you is collected, so nothing about you can be sold, shared or lost in someone else’s breach.

Photos

If you attach a photo, iOS asks your permission first. The app copies the image into its own storage so the piece keeps its face even if you later remove the original from your library. Copies are never uploaded.

Notifications

The daily reminder is scheduled locally by iOS on your device. It is not a push notification, so no server is involved and nothing about your schedule leaves the phone. Turning the reminder off cancels it.

Exports and device backups

“Export my data” writes your journal to a file and hands it to the iOS share sheet. Where it goes from there is entirely your choice, and once it leaves the app it is covered by whatever you share it with rather than by this policy.

If you have iCloud Backup or encrypted local backups switched on, iOS may include the app’s storage in those backups. That is a setting on your phone, managed by Apple under Apple’s terms — we have no access to it and cannot read anything in it.

Deleting everything

Deleting the app from your phone removes its storage and everything in it. There is no copy anywhere else for us to delete, and no request to send us. If you keep device backups, remove those separately through iOS.

Your rights

Rules such as the GDPR and the CCPA give you rights over personal data a company holds about you. We hold none, so there is nothing to request, correct, port or erase. Your export and your delete are both in your own hands, inside the app.

The publisher is based in Germany, so the GDPR applies. The data controller is Lucija Tatarević. If you believe personal data has been processed unlawfully, you may complain to a supervisory authority in your country of residence — though in this case there is no processing to complain about.

The App Store

Downloading and updating the app happens through Apple, and is covered by Apple’s privacy policy rather than this one. We see only the aggregate figures Apple shows every developer. If you have turned on Apple’s own “Share With App Developers” setting, iOS may send us crash logs — device model, OS version and a stack trace, with no identifier that points back to you. That sharing is Apple’s, it is off unless you opted in, and you can turn it off in Settings → Privacy & Security → Analytics & Improvements.

Children

The app collects no personal data from anyone, of any age. It isn’t directed at children under 16, and since nothing is collected there is nothing on file to remove.

Changes

If a future version of the app changes what it does with your data, this page changes with it and the date at the top moves. Material changes will be noted in the App Store release notes.

Contact

Keepsake Journal is made by Lucija Tatarević (“we”, “us”). Questions about anything on this page go to rushed-marble-3q@icloud.com and get an answer from a person.