Privacy Policy

Effective date: September 23, 2026 · Last updated: October 8, 2026

This Privacy Policy explains how Keepscape ("Keepscape", "we", "our", or "us") — operated by fan yuan, an individual developer based in China — collects, uses, shares, and protects information when you use the Keepscape mobile application, the keepscape.net website, and related services (together, the "Service").

We designed Keepscape to keep your media under your control. When you sign in, the app automatically backs up your keepsakes and their photos to Keepscape cloud storage so you can restore them on another device. AI processing happens when you request generation. Updated app versions show the AI recipients and processing region before sending generation photos, and let you withdraw authorization in Settings. Ordinary backups are separate from this AI authorization. You can delete your account and data at any time. This policy is global; it also includes region-specific addenda for Japan and the European Economic Area (EEA), the United Kingdom, and Switzerland.

1. Information we collect

• Account and identifiers. When you create an account using Sign in with Apple, Google Sign-In, email and password, or phone number verification where available, we receive your email address or phone number, your display name and profile picture if provided by the identity provider, and a unique account identifier (user ID). We do not receive or store your third-party account password. We store an authentication session token and, for phone sign-in, a one-time verification code managed by our SMS provider.
• Content and media you create. Photos, Live Photos, video frames, voice recordings, speech transcriptions, stories, titles, dates, places, people, categories, tags, and any 3D models or orbit media generated from your captures. Signed-in libraries, including photos and their associated metadata, are automatically backed up to our servers. When you request 3D or orbit generation, we transmit the specific media you select to the applicable processing provider.
• Location. If you choose to attach a place to a keepsake, we process the location you select. Precise location access is requested only when you use that feature, and a location-reduction setting controls how much precision is included in new share links.
• Purchase and entitlement data. We verify in-app purchases through the App Store and maintain a balance of generation credits. We receive transaction identifiers, product identifiers, and purchase status from Apple. We do not collect or store full payment card details.
• Usage, diagnostic, and log data. Device model, operating system version, app version and build, language, general region derived from network, crash reports, and server logs (including IP address, request time, and error information) generated when the Service is used.
• Support communications. The content of messages you send us, the reply address you provide, and diagnostic details you choose to include.

We do not use advertising identifiers and we do not track you across apps or websites owned by other companies for advertising purposes.

2. How we use information

• To create and secure your account, authenticate you, and keep you signed in.
• To store, organize, automatically back up, sync, restore, and display your keepsakes and generated media.
• To process your requests to generate 3D models and orbit media, including submitting selected inputs to processing providers and storing the results.
• To verify purchases, grant credits, and prevent payment fraud or abuse.
• To operate, maintain, troubleshoot, secure, and improve the Service.
• To respond to support requests and communicate service or policy notices.
• To comply with legal obligations and enforce our Terms of Service.

3. Legal bases (EEA, UK, and Switzerland)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract to provide the Service you request; legitimate interests to secure, prevent abuse of, and improve the Service; consent where we ask for it (for example, optional device permissions); and legal obligation where retention or disclosure is required by law. You can withdraw consent at any time without affecting prior processing.

4. Sharing and third parties

We share personal data only as needed to run the Service, and not for third-party advertising. Our current categories of providers are:

• AI generation providers. When you request orbit generation, the selected capture photos are transmitted to Alibaba Cloud DashScope / Wan. The current service uses the China (Beijing) region. If 3D model generation is available and you select it, selected photos are transmitted to Tripo AI. Ordinary library backups are not sent to these providers for AI generation. Processing and retention by each provider are subject to its applicable service terms; we do not promise that third-party systems retain no data.
• Cloud, storage, and database providers. Cloudflare Workers and Containers run our API; private Cloudflare R2 stores media and encrypted disaster-recovery backups. Neon PostgreSQL stores account, library, transaction, and generation records; the current production database is hosted in Singapore.
• Identity and sign-in providers. Apple and Google process authentication data under their own privacy policies.
• SMS provider. Where phone sign-in is available, a messaging provider delivers your one-time verification code.
• Platform and payments. Apple processes purchases and provides transaction data used for entitlement verification.
• Professional advisers and authorities. We may disclose data when required by law, to prevent harm or fraud, or to protect our rights, always to the extent permitted.

We restrict provider access to the data needed for the selected feature. Applicable provider terms and transfer safeguards must be assessed for each region in which the Service is offered.

5. International transfers

We and our providers may store and process information outside your country, including Singapore, China, and the countries where Cloudflare, Apple, Google, or the applicable generation provider operates. Generation images sent to the current Wan service are processed using its China (Beijing) region. You may choose not to use cloud generation. Contact us for information about the transfer safeguards applicable to your location.

6. Retention and deletion

We keep your account information, keepsakes, and generated media until you delete them or your account. You can delete individual keepsakes, revoke share links, and delete your entire account from within the app. When you delete your account, we delete your account data and associated server-side copies, including generated models, shares, and processing artifacts, subject to recovery copies expiring. Current encrypted disaster-recovery media copies have a 14-day minimum object lock and 30-day automatic expiry; an existing locked copy cannot be erased immediately. If recovery is required, account deletions must be reapplied before restored data is served. We retain limited diagnostic logs and transaction records for as long as necessary for security, dispute resolution, and legal compliance.

7. Security

Authorized administrators may access cloud-uploaded content to investigate a support request, a report, abuse, or a security incident. Private-content access is restricted to the owner role, requires a stated reason, and is recorded in an audit log. Administrator sign-in requires both a password and a dynamic verification code.

We use industry-standard measures to protect your information, including encryption in transit, access controls, and isolation of secrets on the server (API keys are never stored in the app). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your rights and choices

Depending on your location, you may have the right to access, correct, export, delete, or restrict processing of your personal data, to object to certain processing, and to data portability. You can exercise most of these rights directly in the app (for example, export, delete keepsakes, or delete your account) or by contacting us. You will not be discriminated against for exercising your rights. See the regional addenda below for additional rights and how to complain.

9. Children

The Service is not directed to children under 13 (or the applicable minimum age in your country, including 16 where required). We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us and we will delete it.

10. Cookies and similar technologies

The keepscape.net informational site does not use advertising or cross-site tracking cookies. The administrator service at api.keepscape.net uses an essential, secure session cookie for authentication. Our app does not use tracking technologies for advertising. Essential technical data may be processed by our hosting provider to deliver pages and protect the Service.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the "Last updated" date. Material changes will be notified through the Service where appropriate. Where required by law, we will seek your consent before applying a change.

12. Contact us

The operator is fan yuan, an individual developer based in China. Questions or requests regarding this Privacy Policy can be sent to support@keepscape.net.

Japan Addendum (Act on the Protection of Personal Information)

This addendum applies to individuals in Japan and supplements the policy above. Under the Act on the Protection of Personal Information (APPI):

• Business operator. The business operator handling personal information is fan yuan (Keepscape), contactable at support@keepscape.net.
• Purposes of use. We use personal information for the purposes listed in Section 2 above. We will not use it for purposes beyond those without your prior consent, except as permitted by law.
• Provision to third parties. We provide personal data to the third parties described in Section 4 only as necessary to operate the Service, including overseas service providers. We do not sell your personal information.
• Cross-border transfers. Your personal data may be transferred to and processed in countries outside Japan, including the United States, the European Union, and other countries where our providers operate. The current production database is in Singapore and the current Wan generation service is in China (Beijing). Contact us for information about recipients, applicable local systems, and transfer safeguards.
• Your requests. You may request disclosure, correction, addition, deletion, suspension of use, or suspension of provision to third parties of your retained personal data. To make a request, contact us at the address above; we will verify your identity and respond within a reasonable period and as required by law.
• Security measures. We implement organizational, human, physical, and technical security measures, including access control, encryption in transit, and vendor oversight, and we supervise employees and contractors as appropriate.
• Complaints. You may contact us with complaints about our handling of personal information. You also have the right to file a complaint with the Personal Information Protection Commission (PPC) of Japan.

European Economic Area, United Kingdom, and Switzerland Addendum (GDPR)

This addendum applies where the EU GDPR, UK GDPR, or the Swiss Federal Act on Data Protection applies, and supplements the policy above.

• Controller. fan yuan (Keepscape) is the controller of your personal data. Contact: support@keepscape.net.
• Legal bases. See Section 3 above. We process special-category data only with your explicit consent or another lawful basis, and only where a feature requires it.
• Your rights. You have the right to access, rectify, erase, restrict, object to processing, and receive your data in a portable format; to withdraw consent; and to lodge a complaint with your local supervisory authority. To exercise these rights, contact us. We will respond within one month, extendable where permitted.
• International transfers. Transfers that are subject to EEA, UK, or Swiss requirements need an applicable legal transfer mechanism and safeguards. Contact us for the arrangements applicable to your request. This policy does not itself establish a transfer agreement.
• Representatives. Where required by law, we will designate a representative in the EEA and/or the UK and publish their contact details. Until then, please contact us directly and we will route your request appropriately.
• Automated decision-making. We do not make decisions based solely on automated processing that produce legal or similarly significant effects. AI generation is a creative feature, not a decision about you.
• Complaints. You may complain to your national data protection authority. In the UK, this is the Information Commissioner's Office (ICO). We would appreciate the chance to address your concern first.