Last updated: [DATE] · Applies to PostKeep for iOS and postkeep.app
Draft. This page states accurately what PostKeep does with data. The final wording is pending legal review and must be in place before the App Store submission.
PostKeep saves posts to your own device. There is no PostKeep account, no PostKeep server holding your posts, and no advertising or tracking of any kind. We cannot read your vault, and we do not want to.
Everything you save. Post text, images, extracted text, your tags, your notes and the dates you saved them are written to an encrypted store on your device, using AES-256 with a key derived from a passphrase only you know. We never receive that passphrase or that key.
If you turn on iCloud backup, your vault is encrypted on your device before it is uploaded. Apple stores only encrypted bytes and cannot read the contents. This is off unless you switch it on.
Three things, each only in a specific circumstance:
PostKeep can send anonymous counts of how often certain actions happen — for example how many posts were saved, or how many searches were run. This is off by default for everyone, in every country, and starts only if you explicitly agree during onboarding. You can turn it off again at any time in Settings.
These counts contain no post content, no URLs, no device identifier and nothing that identifies you. We cannot connect them to a person, including you.
| Who | What they handle |
|---|---|
| Apple | App distribution, subscription payments, and iCloud backup if you enable it |
| RevenueCat | Checks whether a subscription is active. Receives no post content |
| Kit | The mailing list, if you sign up on this website. Nothing to do with the app |
| Infomaniak | Hosts this website and our email. Sees no app data |
We do not sell data, and there is nothing here to sell.
postkeep.app runs no JavaScript, sets no cookies and carries no analytics or advertising trackers. If you enter your address in the signup form, it is passed to Kit and stored on their list; you can unsubscribe from any email we send, and that removes you.
Your vault is yours and already in your possession — you can export or delete all of it from within the app without asking us. For the mailing list, you can unsubscribe at any time, and you may ask us for a copy of what is held or for its deletion by emailing privacy@postkeep.app.
If you are in the UK or the EU, you have rights of access, correction, erasure, restriction, portability and objection under the UK GDPR and the EU GDPR, and the right to complain to your data protection authority.
PostKeep is not directed at children under 13, and we do not knowingly collect data from them.
If this policy changes materially we will say so on this page and in the app before the change takes effect. The date at the top always reflects the current version.
privacy@postkeep.app
[REGISTERED COMPANY NAME AND ADDRESS — required before App Store submission]