Get started

Privacy policy

Last updated: 20 October 2026

Welcome, and thank you for trusting Keepy with your information.

This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. We have tried to keep it clear. If anything is unclear, just write to us at [email protected].

Keepy is operated by Human Interaction, Inc., 7272 Wisconsin Ave, 9th Floor, Bethesda, MD 20814, United States (“Keepy”, “we”, “us” or “our”). This policy covers everything we offer (the “Services”): our websites and our app at mykeepy.com and keepy.co, including all of their subdomains, and any other website or domain we operate or that is connected to Keepy; our AI agents and the QR codes that lead to them; our subscriptions and products; our emails; and our social media pages. In this policy, “our website” means mykeepy.com, and “the app” means the signed-in Keepy app.

It applies to everyone whose information we handle:

  • account holders;
  • Members invited to share an agent;
  • Visitors, meaning people who scan a Keepy QR code or open its link;
  • website visitors, including people who chat with Keepy on our website;
  • customers; and
  • people whose information an account holder chooses to save, such as a family member or an emergency contact.

If you live in a U.S. state with a privacy law, see Section 12. If you live in the EEA, the United Kingdom or Switzerland, see Section 13. Health information is also covered by our Consumer Health Data Privacy Policy, and cookies by our Cookie Policy.

1. The short version

  • You decide what your agents keep, and what a Visitor can see.
  • Our agents run on AI services that we pay for. Those AI providers do not use your chats to train their models.
  • We don’t use your chats to train AI today. If we ever use chats to improve our agents, we will first remove what identifies you, we will never use health information, and you can opt out.
  • We don’t sell your personal information for money. Advertising tags run only on our website, and only as your cookie choices allow. You can turn them off, and we honor Global Privacy Control.
  • Brands we partner with never get access to your personal information, unless you choose to share it with them.
  • You can see, correct and delete your information, and ask us for a copy. Deleting your account deletes your agents and what they keep.

2. Information we collect

2.1 Information you give us

  • Account information: your email address, name (if you give it), profile photo, and language and time zone settings. If you sign in with Google, we receive your name, email, profile picture and a Google account ID. We never receive your Google password.
  • What you tell your agents: your chat messages, and everything your agents keep from them. That can include names, descriptions, photos, notes, contact details you choose to show, preferences, and anything else you write.
  • Health information: only if you choose to give it to an agent that keeps health information, such as Loved Ones, and only after you agree (see Section 6).
  • Information about other people: for example a relative, an emergency contact, a child, or the email of someone you invite as a Member. Please share it only if you have the right to.
  • Purchases and subscriptions: what you buy, your shipping name, address and phone number, your billing address and email, your plan and its dates, and your payment status. Your card details go straight to our payment provider. We see only limited details, such as the card brand, its last four digits and its expiry date.
  • Messages to us: what you send us by email or through support, your feedback, your marketing preferences, and requests to be told when a product is back in stock.

2.2 Information from Visitors (people who scan a QR code)

  • Messages you send the agent, and any contact details, photos or notes you choose to share, for example so the owner can reach you.
  • Location: an approximate location based on your IP address. If your browser has already given permission to share your location, we also record a more precise location. We never ask your browser for this permission ourselves, and you can withdraw it in your browser settings.
  • Scan details: when the scan happened, which QR code, and your browser, device type, operating system and language.

The owner of the QR code, and their Members, see your messages, what you chose to share and the scan details above.

2.3 Chatting with Keepy on our website

If you chat with Keepy on our website, we keep your messages. To prevent abuse, we keep a scrambled, one-way code made from your IP address instead of the address itself, and we use a bot check. If you give us your email to sign up or to order, we treat it as account or purchase information.

2.4 Information collected automatically

  • Device and log information: IP address, browser, device type, operating system, referring pages, pages viewed, times and errors.
  • Product events: how the Services are used, such as which buttons are tapped, which steps of a chat are completed, and when QR codes are scanned. We use these to run, secure and improve Keepy.
  • Cookies and similar technologies: see Section 9 and our Cookie Policy.

2.5 Information from others

  • Sign-in providers (Google), as described above.
  • Our payment provider: payment status, tax details, fraud checks, and card updates from the card networks.
  • Carriers and delivery partners: delivery status.
  • Analytics and advertising providers: how you used our website and the app, and responded to our ads, as your cookie choices allow.
  • Social media platforms: if you interact with our pages, as their settings allow.
  • Other users: for example when someone saves your details as their emergency contact or invites you as a Member.

3. How our AI agents use your information

Understanding and replying. To answer a message, we send the conversation, with the information the agent needs for its job, to the AI services we use. One AI model helps us understand what an owner is asking for, and another writes the agent’s reply. These providers return the result to us. Today they are Google (the Gemini API, paid tier) and DigitalOcean (its AI inference service).

No training by our providers. We use paid business services. Under their terms, the providers do not use our requests or their answers to train or improve their models. They may keep them for a limited time to detect abuse and comply with the law, as their terms describe.

What a Visitor’s agent knows. Information you keep private stays with your own agent. The agent that talks to Visitors is given only what you have chosen to share, and our code enforces this, not just the AI’s instructions.

Improving Keepy. We do not currently use the content of chats to train AI models. In future we may use chat content to improve our agents and safety systems, for example to test them, measure quality, and build evaluation and training sets. If we do, we will first de-identify it, which means removing names, email addresses, phone numbers, addresses, locations, photos and other details that identify someone, and separating it from any account. We will:

  • keep it de-identified, not try to re-identify it, and require anyone we share it with to do the same;
  • never use health information for this; and
  • let you opt out at any time. For now, email [email protected]. Later there will be a setting in the app. Opting out applies from then on.

We may also use statistics that don’t identify anyone for any purpose.

Automatic decisions. Our agents decide automatically what to say and what to keep, and our systems may automatically limit messages that look abusive, meaningless or unrelated to Keepy. None of this has legal or similarly significant effects on you, and you can always reach a person at [email protected].

4. How we use information

  • To run Keepy: creating and running your account and agents, connecting QR codes, answering Visitors, passing messages, showing scans and where they happened, sharing agents with Members, translating, and sending sign-in codes, notifications and receipts.
  • To sell and deliver: processing orders, payments, subscriptions, trials and renewals, calculating tax, shipping, returns, warranty claims and fraud checks.
  • To keep Keepy safe: security, preventing abuse and spam, message limits, bot checks, fixing problems, audits, and enforcing our Terms.
  • To improve Keepy: analytics (including Google Analytics on our website and in the app, as your choices allow, see Section 9), research, and building new features and agents, as described in Section 3.
  • To stay in touch: support, service announcements, trial reminders, changes to our terms, and, where allowed, news about Keepy. You can unsubscribe from marketing at any time.
  • For advertising: measuring our ads and showing Keepy ads to people who may be interested, using our website’s cookies, as your choices allow (Section 9). We never use health information, chat content or Visitor information for advertising.
  • For legal reasons: complying with the law and lawful requests, protecting rights, safety and property, and handling disputes.
  • With your consent: for anything else we ask your permission for.

5. Who we share information with

  • Visitors, as you choose: whatever you make visible behind a QR code is shown to anyone who scans it. Once it is shown, we can’t control what they do with it.
  • Owners and Members: a Visitor’s messages, what they chose to share and the scan details go to the owner and the owner’s Members.
  • Service providers who work for us under contract, may use the information only to provide their service to us, and must protect it. Today they are:
    • Hosting and storage: DigitalOcean;
    • AI: Google (Gemini) and DigitalOcean (AI inference);
    • Sign-in: Google;
    • Payments, subscriptions and tax: Stripe;
    • Email delivery: Amazon Web Services (Amazon SES);
    • Security, domains and content delivery: Cloudflare;
    • Analytics and advertising: Google (Tag Manager, Analytics and, on our website, Ads), as your cookie choices allow;
    • Website fonts: Google Fonts, which receives your IP address when our website loads;
    • Internal team alerts: Slack;
    • Delivery: postal services and carriers such as USPS, UPS, FedEx and DHL, and any fulfilment partner we use to pack and ship orders; and
    • Professional advisers: such as lawyers, accountants and auditors.
    As Keepy grows, we may add or change service providers. Any new provider will be held to the same standards, and we will update this list. You can ask us for the current list at any time.
  • Advertising partners, as your cookie choices allow: Google Ads, when we turn it on, and similar partners we add (listed in our Cookie Policy when we do) may receive device and cookie IDs, pages viewed, and actions such as sign-ups and purchases on our website. They may combine this with other information under their own policies. Some U.S. state laws call this a “sale” or “sharing” (see Section 12).
  • Partners and co-branded offers: we may work with other brands that offer Keepy through their own channels. They do not get your personal information, unless you choose to share it with them yourself or the law requires it. We may share only statistics with them that don’t identify anyone.
  • For legal reasons: when we believe in good faith that we must, to comply with the law, legal process or a government request, or to protect the rights, property or safety of Keepy, our users or others, including in an emergency that puts someone’s life at risk.
  • If Keepy changes hands: as part of a merger, financing, acquisition, reorganization, bankruptcy or sale of assets. Your information will stay protected by the promises in this policy.
  • With your consent, or when you ask us to.

6. Health information

Keepy is not a healthcare provider and does not give medical advice. Some agents, such as Loved Ones, can keep health information, and they ask for your consent first. We use health information only to keep it in your account and to show what you choose to whoever scans that person’s QR code. We never use it for advertising, never sell it, and never use it to improve AI models. You can change or delete it at any time, and deleting the agent deletes it. If you set it up for someone else, you confirm that you have their consent or are legally allowed to act for them. Our Consumer Health Data Privacy Policy gives the details that laws such as Washington’s My Health My Data Act require.

7. Your choices

  • Your agents: review, change or delete what they keep, and change what Visitors can see, at any time in the app.
  • Your account: delete it in the app or by emailing us. Section 8 explains what happens next.
  • Marketing emails: use the unsubscribe link, or email us. We will still send messages about your account and orders.
  • Cookies and ads: use “Your Privacy Choices” in our website’s footer, or Cookie settings in the app’s menu. We honor Global Privacy Control. We don’t respond to “Do Not Track”, because there is no common standard for it.
  • Location: Visitors control precise location through their browser’s permissions.
  • Improving Keepy: opt out as described in Section 3.
  • Not giving information: some features need certain information, such as an email to sign in, or a payment method for a trial.

8. How long we keep information

  • Your account and agents, including chats and what agents keep, stay while your account is active. When you delete an agent or your account, we delete the information from our systems within 30 days, and from backups within a further 35 days.
  • Visitor messages are part of the owner’s chat and stay until the owner deletes the agent or the account.
  • Health information is deleted on the same schedule, or sooner if you withdraw consent.
  • Product events and scan records are anonymized after 14 months.
  • Website chats with Keepy are kept as long as needed to answer, improve the website’s answers and prevent abuse, and are then deleted or de-identified.
  • Orders, invoices and tax records are kept as long as tax and accounting laws require, usually up to 7 years.
  • Security logs are kept for up to 12 months.
  • Cookies follow the periods in our Cookie Policy. Google Analytics keeps its data for 14 months.
  • We may keep information longer when we need it to comply with the law, resolve disputes, enforce our agreements or prevent fraud and abuse. Information that doesn’t identify anyone may be kept indefinitely.

9. Cookies, analytics and advertising

We use strictly necessary cookies and browser storage everywhere, to keep you signed in and keep Keepy secure. Through Google Tag Manager, and as your choices allow, we also use Google Analytics on our website and in the app, and advertising tags on our website only, such as Google Ads when we turn it on. When you start a trial, pay or receive a refund, our server may also tell Google Analytics directly, using a code instead of your name or email, and only if you allowed analytics. No analytics or advertising tag ever runs on QR-scan pages, on the sign-in page, or anywhere near health information, and advertising tags never run in the app. Our Cookie Policy has the full list and your choices.

10. Keeping information safe

We use administrative, technical and physical safeguards designed to protect personal information, including encryption in transit, access controls, limited and logged staff access, and keeping each agent’s information separate. No system is perfectly secure, so we can’t guarantee absolute security. If a breach affects your personal information, we will tell you and the authorities as the law requires.

11. Children

Accounts are for adults aged 18 and over. A parent or guardian may save information about a child, and is responsible for doing so. We don’t knowingly collect personal information directly from children under 13, or under the higher age of digital consent where they live. If you believe a child has given us personal information, contact [email protected] and we will delete it.

12. Your rights in U.S. states

This section is for residents of California and other U.S. states with privacy laws, such as Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. It adds to the rest of this policy.

12.1 What we collected in the last 12 months. Where it comes from, why we use it and who receives it is described in Sections 2, 4 and 5.

  • Identifiers: name, email, phone, IP address, and account and device IDs. Shared with service providers. Device and cookie IDs may be “sold” or “shared” with advertising partners through our website’s cookies.
  • Customer records: shipping and billing details. Shared with service providers.
  • Commercial information: purchases and subscriptions. Shared with service providers. Purchase events may be “shared” with advertising partners through our website’s cookies.
  • Internet activity: use of our website and the app. Shared with service providers. Website activity may be “sold” or “shared” with advertising partners.
  • Location: approximate location, and precise location from Visitors where their browser already allows it. Shared with owners and service providers. Never sold or shared.
  • Photos and messages. Shared with service providers and as you choose. Never sold or shared.
  • Sensitive personal information: health information, precise location, and account sign-in details. Used only to provide the Services and for other purposes the law allows. Never sold or shared, and never used to infer things about you.
  • Inferences: preferences we learn from your use, such as your language. Shared with service providers. Never sold or shared.

12.2 Your rights. Depending on your state, you can:

  • know and access the personal information we hold about you, and get a copy;
  • correct it;
  • delete it;
  • opt out of its “sale”, its “sharing” for cross-context behavioral advertising, and targeted advertising;
  • opt out of profiling with legal or similarly significant effects (we don’t do this);
  • limit the use of sensitive personal information (we already use it only as the law allows); and
  • exercise these rights without being treated differently.

Some states also let you ask for a list of the specific third parties we disclosed your information to.

12.3 Opting out of “sale”, “sharing” and targeted advertising. Click “Your Privacy Choices”, the link with the toggle icon in our website’s footer, and turn off Marketing, or turn on Global Privacy Control in your browser. We keep your choice for at least 12 months before asking again. We don’t knowingly sell or share the personal information of anyone under 16.

12.4 Making a request. Email [email protected] with the subject “Privacy request”. We confirm we received it within 10 business days and reply within 45 days, or tell you if we need up to 45 more. To protect you, we check that the request comes from the email on the account. Someone you authorize may ask for you with your signed permission, and we may still need to check with you.

12.5 Appeals. If we decline your request, you can appeal by replying to our answer, or by emailing [email protected] with the subject “Privacy appeal”. We reply within the time your state’s law sets. If you are not satisfied, you can contact your state’s Attorney General.

12.6 California “Shine the Light”. We don’t share personal information with third parties for their own direct marketing, as California Civil Code §1798.83 defines it.

12.7 Nevada. We don’t sell covered information as Nevada law defines it. Nevada residents can still send an opt-out request to [email protected].

12.8 De-identified information. We keep de-identified information de-identified and won’t try to re-identify it, except to test our methods as the law allows.

13. If you live in the EEA, the UK or Switzerland

Who is responsible. Human Interaction, Inc. is the controller of your personal data. For information a QR code’s owner shares with you, the owner is also responsible for it.

Our legal reasons for using your data:

  • Contract: to provide your account, agents, QR codes, orders and subscriptions;
  • Legitimate interests: to answer Visitors for an owner, keep Keepy secure, prevent fraud and abuse, understand and improve Keepy (including de-identified chat use, which you can object to), and tell existing customers about our own services. We balance these interests against your rights;
  • Consent: for health information (explicit consent), optional cookies, analytics and advertising, precise location (which you allow in your browser), and marketing where the law requires it. You can withdraw consent at any time, without affecting what happened before; and
  • Legal obligation: for tax, accounting and responding to lawful requests.

Your rights. You can access, correct, delete, restrict and move your data, object to uses based on legitimate interests (including profiling and direct marketing), and withdraw consent. You can also complain to your local data protection authority (in the UK, the Information Commissioner’s Office; in Switzerland, the FDPIC). We would appreciate the chance to help first.

Transfers outside your country. We are based in the United States, and our providers may process data in the U.S. and elsewhere. When your data leaves the EEA, the UK or Switzerland, we use safeguards such as the European Commission’s Standard Contractual Clauses (with the UK and Swiss additions), or rely on adequacy decisions such as the EU-U.S. Data Privacy Framework where a provider is certified. You can ask us for a copy.

What you must give us. An email address is needed for an account, and payment details are needed to buy. Everything else is up to you.

14. Other countries

Wherever you live, you may have rights under local law, for example in Canada (including Quebec), Brazil, Israel, Australia, Japan, South Korea or India. These can include the right to access, correct and delete your information, to withdraw consent and to complain to a regulator. We honor these rights as the law requires. Just contact [email protected]. When you use Keepy, your information is processed in the United States and other countries, whose laws may differ from yours.

15. Other websites and services

Keepy links to services we don’t control, such as social profiles, maps, phone and messaging apps, payment pages and carriers. Their own privacy policies apply to them.

16. Changes to this policy

We may update this policy. We’ll post the new version here with a new “Last updated” date. If a change is important, we’ll tell you in advance by email or in the app, and ask for your consent where the law requires it.

17. Contact us

Questions, requests or concerns? We’re here to help: [email protected], or by post to Human Interaction, Inc., Attn: Privacy, 7272 Wisconsin Ave, 9th Floor, Bethesda, MD 20814, United States.