Privacy Policy

Effective Date: July 17, 2026

Introduction and Scope

This Privacy Policy explains how Omer Yom Tov (KeepYeet) ("KeepYeet," "we," "us," or "our") handles information in connection with the KeepYeet mobile application, available on iOS and Android (the "App"). This policy applies only to the App.

KeepYeet helps you review, organise, and clean your photo or media library. The App does not require an account, registration, or login, and we do not ask you to provide a name, phone number, or email address to use it. If you contact us, we receive the information you choose to include in your message.

KeepYeet does not operate a backend that receives or stores your photos or videos. Media processing and sorting take place on your device. Limited technical, analytics, advertising, attribution, notification, and purchase data may be processed by the third-party services described below.

For privacy questions or requests, contact us at omer@keepyeet.app.

Information We Handle

Photos, Videos, and Local App Data

The App needs permission to access the photos and videos you allow it to access so that you can review, sort, share, and delete them.

• KeepYeet does not upload your photo or video library to a KeepYeet-operated server.
• The App may read media metadata on your device, such as an asset identifier, media type, dimensions, creation date, duration, file size, and favourite status.
• On Android, the App may create cached thumbnail copies to display media efficiently. These thumbnails remain on the device and are subject to App-cache, device-storage, and uninstall behaviour.
• Sorting decisions, deletion selections, session history, progress, statistics, onboarding responses, usage and advertising-related records, and preferences may be stored locally on your device.
• The App's Start Fresh control clears session and sorting progress, but it does not necessarily clear every local preference, SDK record, cached file, or record held by a third-party provider. Other local App data generally remains until the App's data is cleared through device controls or the App is uninstalled, subject to your operating system's storage and backup behaviour.
• When you confirm a deletion, iOS may move the item to Recently Deleted, while Android may use its system trash or deletion flow. The operating system controls recovery and permanent deletion.
• If you choose to share a photo or video, your operating system sends the selected item to the destination you choose. This user-initiated sharing is not an upload to a KeepYeet backend.

You can change the App's media permissions in your device settings.

Onboarding and Product-Usage Information

The App may collect onboarding responses and product-usage information to understand how the App is used and improve the experience. This may include:

• Your general cleanup goals, camera-roll situation, motivation, estimated library size, and referral source;
• An approximate age-range response, including a 13–17 option, rather than your exact birth date;
• Screens viewed, buttons tapped, session activity, sorting and deletion aggregates, media counts, storage amounts, and feature interactions;
• App version, build number, platform, permission status, subscription status, and time since installation.

Onboarding responses may be stored locally and associated with a pseudonymous analytics identifier. PostHog session replay is disabled; KeepYeet does not record replays of your screen through PostHog.

Technical, Diagnostic, and Identifier Data

Our service providers may automatically receive limited technical information, including:

• IP address and approximate or coarse location inferred from network information;
• Device type, operating system and version, language, time zone, App version, and build information;
• Advertising identifiers where available and permitted, plus pseudonymous identifiers created by individual SDKs;
• App launches, session information, performance information, crash or error data, and other diagnostics;
• Notification permission status, push token, and notification subscription identifier.

KeepYeet does not maintain a registered-user profile. Provider-generated identifiers may nevertheless be linked between certain services for attribution, purchase measurement, entitlement management, or notification support.

Purchases and Subscriptions

Purchases are processed by Apple's App Store or Google Play, with RevenueCat supporting product availability, purchases, subscriptions, trials, entitlements, and restore functionality. We do not receive or store your full payment-card details.

Apple, Google, and RevenueCat may process transaction identifiers, product information, purchase history, subscription or trial status, entitlement status, store account purchase metadata, and related device or SDK identifiers. You can manage subscriptions and purchases through the applicable App Store or Google Play settings.

Advertising and Attribution

The App may offer or display in-app advertising, including advertising associated with App functionality or additional access when presented. How advertising is presented may vary based on the current App version, eligibility, location, choices, device settings, and provider configuration.

Google's User Messaging Platform (UMP) may display privacy choices where required or configured. On iOS, Apple's App Tracking Transparency (ATT) setting controls access to certain tracking identifiers. On Android, advertising and privacy controls are available through the device and Google settings. The availability and type of advertising, and the information used for it, may depend on your location, choices, device settings, and provider configuration. Denying ATT does not by itself guarantee that every advertisement will be non-personalized.

AdMob may process advertising identifiers, IP address, inferred coarse location, ad interactions, impression information, diagnostic information, and advertising data. Ad lifecycle and revenue information, such as ad format, placement, impression identifier, ad network, revenue, currency, and errors, may also be reported to RevenueCat for measurement.

AppsFlyer processes limited install, session, campaign, attribution, and deep-link information. Its pseudonymous identifier may be provided to RevenueCat for attribution and purchase measurement.

Notifications

The App uses OneSignal to support notification delivery through Apple Push Notification Service (APNs) on iOS and Firebase Cloud Messaging (FCM) on Android. When OneSignal is initialized, it may process a notification subscription identifier, device and App information, permission status, and session information before you decide whether to allow notifications. If you allow notifications, it may also process a push token and deliver notifications to your device.

KeepYeet may associate the pseudonymous RevenueCat App User ID with OneSignal and may provide OneSignal with subscription status and an entitlement-expiration timestamp to support subscription-related notification timing. A OneSignal identifier may also be provided to RevenueCat. You can disable notifications in your device settings.

Contact Information

If you contact us by email, we receive your email address, message, and any other information you choose to provide. We use it to respond, provide support, handle privacy requests, and maintain necessary records.

How We Use Information

We use or permit our providers to process information for the following purposes:

• To provide, maintain, and support the App;
• To access and manage media locally at your direction;
• To process purchases, restore entitlements, and manage subscription status;
• To provide in-app advertising and any associated App functionality, and measure ad performance;
• To measure installs and campaign attribution;
• To understand product usage, diagnose problems, and improve reliability and performance;
• To deliver notifications you enable;
• To prevent fraud, abuse, security incidents, and technical failures;
• To respond to support and privacy requests and comply with applicable legal obligations.

Legal Bases for Processing

Where the GDPR, UK GDPR, or similar laws apply, the legal basis depends on the processing activity:

• Performance of a contract: providing requested local App features and supporting purchases and entitlements;
• Legitimate interests: operating and improving KeepYeet, using PostHog for product analytics, maintaining security, diagnosing faults, and responding to requests, provided those interests are not overridden by applicable rights;
• Consent: where applicable law requires consent for advertising or attribution processing, access to or use of certain identifiers or device information, or notification delivery;
• Legitimate interests or consent, as applicable: limited campaign measurement, advertising measurement, notification-infrastructure operation, and fraud prevention, depending on the processing, provider configuration, and requirements of applicable law;
• Legal obligations: keeping or disclosing information when required by applicable law.

Operating-system permissions and ATT authorization are platform controls and are not necessarily the same as consent under data-protection law. Where processing relies on consent, you may withdraw it through the relevant UMP privacy interface, notification setting, or other available consent mechanism, as applicable. Withdrawal does not affect processing that occurred before withdrawal. You may contact us with an applicable objection or withdrawal request that is not available through those controls.

Third-Party Services

The following services reflect current App practices and may process information for the purposes described in this policy. Their handling of information is also governed by their own terms and privacy notices.

These providers may process information as service providers, processors, or independent controllers, depending on the service, context, and applicable law. Their notices supplement, rather than replace, this policy, and we remain responsible for describing and configuring our own use of their services as required by applicable law. KeepYeet does not control processing that a provider independently determines and performs under its own terms.

Identifying a provider in this policy describes current privacy practices and does not require KeepYeet to continue using that provider. If adding, replacing, or removing a provider materially changes how information is handled, we will update this policy and provide notice or request consent where required by applicable law.

We may also disclose information when reasonably necessary to comply with applicable law or legal process, protect rights and safety, investigate fraud or abuse, or complete a business reorganisation or transfer subject to applicable legal requirements.

Retention

Retention depends on the type of information and where it is stored:

• Session and sorting progress can be cleared using Start Fresh. Other local App data, SDK records, and cached files remain subject to device settings, provider controls, operating-system storage and backup behaviour, and uninstall behaviour as described above.
• Contact and support correspondence is retained for as long as reasonably necessary to respond, maintain appropriate records, resolve disputes, and comply with legal obligations.
• Purchase and entitlement information is retained while needed to verify access, manage or restore purchases, prevent fraud, maintain transaction records, resolve disputes, and meet accounting or legal obligations, subject also to the policies of Apple, Google, and RevenueCat.
• Product analytics and attribution information is retained for the configured measurement period needed to analyse usage trends, campaign attribution, reliability, and performance, after which the provider may delete or aggregate it according to the applicable configuration and privacy notice.
• Notification information is retained while a notification subscription remains active or while needed to maintain subscription-related notification status, and afterward according to OneSignal, Apple, and Google's deletion and retention processes.
• Advertising information is retained according to the applicable provider configuration and for periods needed for ad delivery, measurement, billing, fraud prevention, dispute handling, and legal obligations.

We do not retain your photo or video library on a KeepYeet-operated server.

International Processing

KeepYeet operates from Israel. The European Commission currently recognises Israel as providing an adequate level of data protection for relevant transfers from the European Economic Area. Depending on the service, our providers may also process information in the European Economic Area, the United States, and other countries whose privacy laws may differ from those where you live.

The linked provider notices describe their relevant locations and transfer arrangements. Where a transfer is not covered by an applicable adequacy decision, the provider and transfer may rely on contractual safeguards or another lawful mechanism specific to that transfer. We do not represent that every provider or transfer uses the same mechanism. You may contact us for information about a relevant safeguard and how to obtain a copy where applicable.

Security

We use measures that we consider reasonable and appropriate for the nature of our operations, and our providers maintain their own security practices. However, no device, storage system, or method of electronic transmission can be guaranteed to be completely secure. This policy does not make an absolute security guarantee.

Your Rights and Choices

Depending on where you live and subject to applicable exceptions, you may have rights to request access, correction, deletion, restriction, portability, or information about processing, and to object to certain processing. You may also have the right to withdraw consent and complain to a data-protection authority.

To submit a request, contact omer@keepyeet.app. Because KeepYeet has no account system and much of the provider data is pseudonymous, we may need information reasonably related to a provider or device identifier to locate a record. We may be unable to identify a particular record if neither KeepYeet nor the relevant provider can reasonably connect it to your request. We will not require more information than is reasonably necessary to handle and verify the request.

You can also exercise choices through:

• Your device's photo or media permission settings;
• Notification settings on iOS or Android;
• Google UMP privacy choices where the App displays them;
• ATT settings on iOS and advertising/privacy settings on Android;
• App Store or Google Play purchase and subscription settings;
• Start Fresh for session and sorting progress, plus device App-data controls or uninstalling the App for other local data, subject to operating-system behaviour.

These choices have different and limited effects. For example, UMP concerns advertising choices, ATT controls access to certain identifiers on iOS, notification settings control notification delivery, and Start Fresh clears session and sorting progress. They do not necessarily stop or delete all analytics, attribution, notification-service, purchase, or other provider processing. Contact us to make any additional objection, access, or deletion request available under applicable law.

We respond to applicable requests within the time required by applicable law.

California Privacy Information

Based on KeepYeet's current operations, KeepYeet does not meet the thresholds that define a "business" under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA). This section provides California disclosures without representing that KeepYeet is currently subject to every CCPA/CPRA business obligation.

The categories of information KeepYeet may handle, their sources, purposes, and recipient categories are described throughout this policy. Sources include you, your device and operating system, Apple or Google purchase services, and the providers listed above.

KeepYeet does not sell personal information for money. Advertising and attribution providers may process identifiers, advertising data, and product-interaction information for measurement or advertising. Some privacy laws may define certain disclosures for cross-context behavioural advertising as "sharing," even when no money is exchanged.

California residents may contact omer@keepyeet.app with applicable or voluntary requests to know, access, correct, or delete information. Where required by law, we will not discriminate against you for exercising a privacy right.

Do Not Track and Third-Party Tracking

Browser Do Not Track signals do not apply directly to the App. Advertising and attribution providers may collect activity over time or across services as described in this policy. Available App and device privacy controls are described under Your Rights and Choices.

Children's Privacy

KeepYeet is not directed to children under 13. The App's onboarding may request an approximate age range for product analytics, and one available response is 13–17; the App does not request an exact birth date for this purpose.

Privacy laws may provide additional protections to teenagers depending on their age and location. The approximate age-range response and related analytics are handled as described in this policy. If you are a parent or guardian and believe a child provided information through KeepYeet in a way that requires action under applicable law, contact omer@keepyeet.app. We will review the request and take steps required by applicable law where the relevant information can reasonably be identified.

Changes to This Policy

This policy describes KeepYeet's current privacy practices. We may update it when our information-handling practices, providers, features affecting processing, or applicable law change. If a change materially affects how we handle information, we will update this policy prospectively and provide notice or request renewed consent where required by applicable law. The effective date at the top identifies the current version.

Contact Us

For privacy questions, concerns, or requests, contact:

• Controller: Omer Yom Tov (KeepYeet)
• Email: omer@keepyeet.app