KeepACard

Privacy Policy – KeepACard

Effective Date: 20/09/2025

Keep A Card (“we”, “our”, or “us”) is an app developed and owned by a private individual based in Denmark. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our app.

1. Information We Collect

When you use Keep A Card, we may collect the following types of information:

a) Account Information

  • Email address
  • Username
  • Password (securely handled via Firebase Authentication)

b) User Content

  • Photos you upload to the app
  • Names of your photos
  • Event names you create or insert

c) Technical and Device Information

  • Basic technical details automatically collected by Firebase (e.g., device type, operating system version, crash logs, and usage data)

d) Advertising Data

  • Google AdSense may collect data about your interactions with ads (for example, to serve relevant or personalized ads).

2. How We Use Your Information

We use your personal information for the following purposes:

  • App Functionality: To provide the core features of the app, such as uploading, saving, and displaying your photos and events.
  • Authentication: To securely log you into your account and keep your data private.
  • Data Management: To allow you to create, edit, and delete photos and events.
  • App Improvement: To maintain, troubleshoot, and improve the app using anonymous technical data.
  • Advertising: To display ads within the app through Google AdSense.
  • Legal Compliance: To meet regulatory requirements and respond to lawful requests.

3. Storage and Retention of Data

  • Your photos and related metadata are stored securely in Firebase Storage and Firestore.
  • Your photos remain stored until you delete them individually or delete your entire account.
  • If you delete your account, all associated data (including photos, account info, and event names) will be permanently removed.
  • We do not keep backups of deleted user photos.

4. Third-Party Services

Keep A Card relies on trusted third-party services to operate:

  • Firebase (by Google): Provides authentication, storage, and database hosting.
  • RevenueCat: Manages in-app purchases (if applicable).
  • Google AdSense: Displays advertisements within the app.

These services may process data outside the EU. Firebase and Google comply with GDPR and rely on safeguards such as Standard Contractual Clauses for international data transfers.

Links to their privacy policies:

5. Legal Basis for Processing

We process your personal data under the following legal bases (as required by GDPR):

  • Consent: You give consent when you create an account, upload photos, or use app features.
  • Contractual Necessity: We need to process your data to provide the service you requested (account, storage, access to photos).
  • Legitimate Interests: To improve app functionality and maintain security.
  • Legal Obligations: To comply with applicable laws.

6. Data Transfers Outside the EU

Firebase and Google servers may be located outside the European Economic Area (EEA), including in the United States. In these cases, appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

7. Security Measures

We take your privacy seriously and apply the following protections:

  • Secure authentication and access control via Firebase.
  • Data encryption in transit and at rest.
  • Storage rules that restrict photo access to the uploading user only.
  • Regular monitoring and updates to maintain data protection.

8. Your Rights Under GDPR

As a user located in the EU, you have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Correct inaccurate or incomplete data.
  • Deletion: Request deletion of your account and all personal data.
  • Restriction: Ask us to restrict certain processing.
  • Portability: Request transfer of your data to another service.
  • Objection: Object to processing such as advertising or analytics.

To exercise these rights, please contact us at: [Insert your email address]

9. Children’s Privacy

Keep A Card is not directed at children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child under 16, please contact us and we will delete it.

10. Advertising and Marketing

  • Ads are shown within the app using Google AdSense.
  • We do not send marketing emails.
  • Ads may be personalized based on your interactions, depending on your AdSense/Google account settings.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted within the app and/or on the App Store listing with a new “Effective Date.” Please review the policy periodically.