Effective Date: April 18, 2026 · Last Updated: April 18, 2026
Keipr ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use the Keipr mobile app, web app at keipr.app, and related services (the "Service").
By using the Service, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.
When you create an account, we collect your email address and display name. When you use the Service, we store the financial information you enter: income sources, bills, expense amounts, due dates, payment records, categories, and budget preferences. This data is necessary to provide the budgeting service.
If you connect a bank account, we receive transaction data, account balances, and account metadata through Plaid, Inc. This includes transaction amounts, dates, merchant names, and Plaid-assigned categories. We never receive or store your bank login credentials — Plaid handles authentication directly with your bank using 256-bit encryption.
We collect basic usage data to maintain and improve the Service, including: device type, operating system, app version, and crash reports. We use Firebase Authentication for account management, which may collect authentication-related metadata (login timestamps, authentication method). We do not use third-party advertising trackers or sell data to advertisers.
The Keipr web app uses essential cookies and browser local storage to maintain your authentication session and store your theme preference (dark/light mode). We do not use tracking cookies, third-party advertising cookies, or analytics cookies that identify you personally.
We use your information to:
Provide and operate the budgeting Service; sync and display your financial data across devices; detect recurring expenses and match transactions to bills (Ultra); send you notifications about detected expenses, payment reminders, and account activity; process subscription payments through Lemon Squeezy; respond to support requests; and improve the Service based on aggregate usage patterns.
Ultra subscribers may have access to AI-powered budget optimization. When this feature is enabled, we send redacted financial data (transaction amounts, dates, merchant names, and categories — with no personal identifiers such as your name, email, or account numbers) to a third-party AI model (Anthropic's Claude) for analysis. The AI helps categorize transactions, detect recurring expenses, and optimize bill assignments. You can review, undo, or override any AI-generated change, and you can disable AI features entirely in Settings. AI processing data is retained according to our standard data retention policy and Anthropic's usage policy (zero-retention for API calls).
Your data is stored in a PostgreSQL database hosted by Supabase with encryption at rest. All data transmitted between your device and our servers uses TLS (Transport Layer Security) encryption. Bank connections are secured through Plaid's infrastructure with 256-bit encryption.
Authentication is provided by Firebase with support for multi-factor authentication (MFA). We implement rate limiting, input validation, and access controls to protect against unauthorized access.
We use the following third-party services to operate Keipr:
Plaid, Inc. — Bank account connections, transaction syncing, and balance retrieval for Ultra subscribers. Plaid's privacy policy: plaid.com/legal.
Firebase (Google) — Authentication and user account management. Firebase's privacy policy: firebase.google.com/support/privacy.
Supabase — Database hosting and storage. Supabase's privacy policy: supabase.com/privacy.
Lemon Squeezy — Subscription billing and payment processing. Lemon Squeezy acts as our merchant of record. Their privacy policy: lemonsqueezy.com/privacy.
Resend — Transactional emails (MFA codes, notifications). Resend's privacy policy: resend.com/legal/privacy-policy.
Railway — Backend server hosting. Railway's privacy policy: railway.app/legal/privacy.
Vercel — Website hosting. Vercel's privacy policy: vercel.com/legal/privacy-policy.
We do not sell your personal or financial data. We do not share your data with advertisers or data brokers.
We may share data only in the following circumstances: with the third-party service providers listed above, solely to operate the Service; if required by law, regulation, or legal process; to protect the rights, safety, or property of Keipr, our users, or the public; or in connection with a merger, acquisition, or sale of assets (in which case you would be notified).
You have the right to:
Access your data — Export your budget data to PDF or CSV (Pro/Ultra), or request a full data export by contacting us.
Correct your data — Edit your bills, income, and profile information at any time through the app.
Delete your data — Delete your account through Settings, which permanently removes all your data. You can also disconnect bank accounts at any time.
Opt out of emails — Adjust notification preferences in Settings to control what emails you receive. You can set notifications to real-time, daily, weekly, or off.
Disconnect your bank— Remove bank connections at any time from Settings. This revokes Plaid's access to your bank data.
We retain your data for as long as your account is active. If you delete your account, we permanently delete all associated data — including bills, income sources, payment history, bank connections, and transaction data — within 30 days. Anonymized, aggregated data (which cannot identify you) may be retained for analytics purposes.
Keipr is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at contact@keipr.app.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the "sale" of personal information. We do not sell personal information. To exercise your rights, contact us at contact@keipr.app.
If you are located in the European Economic Area (EEA) or the United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including the right to access, rectify, erase, restrict processing, and port your data. Our legal basis for processing your data is: (a) performance of a contract (providing the budgeting Service), (b) your consent (for optional features like connected banking and AI optimization), and (c) our legitimate interest in maintaining and improving the Service. To exercise your GDPR rights, contact us at contact@keipr.app. You also have the right to lodge a complaint with your local data protection authority.
Keipr is operated from the United States. If you access the Service from outside the US, your data may be transferred to and processed in the United States, where data protection laws may differ from your jurisdiction. By using the Service, you consent to this transfer.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or your data, contact us at contact@keipr.app.