Last updated 5 November 2026 · Applies to Kept for iOS and Android
Kept helps a household track shared spending — who paid, who owes, what the budget is. To do that it stores the expenses you enter and the account you sign in with. It does not run ads, carry advertising trackers, or sell anything about you.
| Data | Why | Where it lives |
|---|---|---|
| Email address | Signing in, and identifying you to the rest of your household. | Supabase's managed authentication service. |
| Display name | Showing who paid and who owes on shared expenses. | Supabase, in your household record. |
| Password | Protecting your account. | Stored only as a salted hash — never in readable form. Managed by Supabase Auth. |
| Household content | The core of the app: expenses, amounts, categories, notes, settlements, budgets, savings goals, installment plans, gameya, and assets you record. | Supabase, as one record per household, shared with that household's members. |
| Saved recipients | People you send money to, so you can pick them again: a name, an optional note (for example a phone number or "my brother"), and an optional picture you choose from your photos. These are other people's names, so please only save what you are comfortable keeping. | Supabase, in your household record. A recipient's picture is shrunk to a small square before it is saved. |
| Personal space | A private area inside your account for your own spending, separate from the household. | Supabase, as a record only you can read. It is never shared with household members. |
| Earlier versions of your records | Protecting you from lost data: before a household or personal record is overwritten, the previous version is kept (up to 40 recent versions per record), so a mistake or a faulty sync can be undone. | Supabase, in a table that the app and other users cannot read. Only the developer can restore from it. Versions are removed when the record or account is deleted. |
| Bank messages you forward | Optionally, an iPhone Shortcut you set up can send a bank text to Kept so it can add the expense for you. | Only the amount, merchant, date and card digits that Kept reads from the message are stored in your household record. The message text itself is not kept. |
| Bank messages Optional | Turning a bank's transaction text into an expense, so you do not have to type it. You choose to use this: either by pasting a message into Kept, or by setting up an iPhone Shortcut that forwards a bank text to Kept. | A pasted message is read on your phone. A forwarded message is sent over HTTPS to a Kept function on Supabase, using a private token that only you have, and read there. Only the result is stored: the amount, spent or received, the merchant name, the last four digits of the card, the currency and the date. The text of the message itself is not stored. Items wait there, up to 200, until you add or dismiss them, and are deleted with your account. |
| Reminders | Notifications about card bills, renewals, installments, gameya payments and budgets. | Scheduled on your phone from your own data. They are not sent from a Kept server, and no push-notification service is used. |
| Subscription status | Unlocking Kept Plus and restoring it on a new device. | RevenueCat, keyed to a random ID and your App Store or Google Play receipt — not your name or email. |
| Language & currency choice | Showing the app in English, Arabic, or Turkish and in your home currency. | On your device, and in your household record so it stays in sync. |
| App-lock preference | Optionally requiring Face ID, fingerprint, or a passcode to open Kept. | On your device only, in the system keychain. Your biometrics never reach Kept or its servers. |
Kept has no access to your bank. The “account balance” on the Home screen is a number you keep up to date yourself.
A few third parties process data strictly to make the app work. Each acts on the developer's instructions only.
Hosts the database and the sign-in system. Your account and household data are stored here. Traffic is encrypted with HTTPS.
Manages the Kept Plus subscription and receipt validation. It receives a random app-user ID and your store receipt, not your identity.
Delivers app updates. It sees your app version and platform when checking for an update, not your household data.
To convert currencies and value assets, Kept fetches public rates from open.er-api.com and coingecko.com. These requests carry no personal data — the app is only asking for today's numbers.
Kept can write a short summary of your month — totals by category, budgets, installments and subscriptions, with no shops, notes, names or card details — so you can take it to your own Claude account for advice. Kept does not send this anywhere itself and does not run an AI service: the summary leaves the app only when you tap Open in Claude or Share, and goes only where you send it. What Claude does with it is governed by your own agreement with Anthropic. The advice is general information, not financial advice from a licensed adviser.
Household data is visible to the other members of any household you create or join. When you join with an invite code, an existing admin has to approve you; an admin can also remove a member. Outside your household, nobody sees your data. It is never shared for advertising or sold.
Your data stays until you remove it. Deleting an expense removes it for the whole household. Deleting the app from your phone does not delete the household record on the server. To delete your account, open Account → Delete account in the app — your sign-in, profile, your personal space, the earlier versions kept for them, and (if you are the only member) your household and everything in it are removed, and the rest is erased within 30 days. You can also email the address below and we will do it for you.
You can ask for a copy of your data, a correction, or full deletion, at any time and for any reason, by emailing kepttrackandsave@gmail.com. If you are in the EU, UK, or a similar jurisdiction, the legal basis for processing is performance of the service you asked for, and you may complain to your local data-protection authority. Where the law of your country gives you further rights (for example in Oman, the other Gulf states, or Türkiye), write to the same address and they will be honoured.
Kept is not directed at children under 13, and is not designed for their use. If you believe a child has created an account, contact the developer and it will be removed.
All traffic between the app and its servers is encrypted in transit. Passwords are stored only as salted hashes. You can add a Face ID, fingerprint, or passcode lock in Settings → Privacy. No system is perfectly secure, but data is limited to what the app genuinely needs.
Kept is a tool for recording and reviewing money you and your household spend. Totals, balances, budgets and reminders are worked out from the numbers that you and your household enter, so they are only as accurate as those numbers. Kept does not hold or move money, does not connect to your bank, and nothing in it is financial, tax, or legal advice.
If this policy changes, the revised version is posted here with a new date at the top. Material changes will also be noted in the app.
Questions about your data? Write to us.