Kept Privacy Policy

Effective Date: July 25, 2026

Kept is a local-first collectible and memento app for iOS, operated by an individual developer under the name Kept. We value your privacy. This policy explains how Kept handles your information.

This policy applies to the Kept iOS app and its Home Screen widget.

1. Information We Collect

Kept is designed with a local-first principle. The following information is created by you, or generated as you use the app, and is stored on your device by default:

• Item photos and Live Ticket frames: Images you capture or import from your photo library, plus the short frame sequence Kept creates when you hold the shutter or import a Live Photo. When importing a Live Photo, Kept temporarily reads its paired motion resource to extract frames and deletes the temporary file after processing
• Text notes: Written memories you attach to items
• Voice memos: Audio recordings and their transcriptions
• Canvas & layout: Canvas names, item positions, rotation, and scale
• Capture time: From photo EXIF data or system metadata
• Capture location: Recorded only when you grant location permission and take a photo, including a city-level place name and, where relevant, optional GPS coordinates; not recorded if permission is denied
• Export record metadata: Such as export time and template type, saved only as a local JSONL file for in-app export history, functionality, or troubleshooting; not uploaded
• Embedded export provenance: Exported images carry a locally generated provenance record in the EXIF UserComment field, including the template type, export time, and random identifiers for the canvas (canvas_id), item (ticket_id), and curation version (curation_id), so an image can be traced back to the canvas and item it came from. These identifiers contain no personal information and are never uploaded by the app
• Widget thumbnail snapshots: Used to display today's collectible in the Home Screen widget, stored in a local App Group container
• App preferences & onboarding state: Onboarding completion flag, parallax toggle, and other UI preferences, stored in UserDefaults / App Group

We do NOT collect:

• Advertising identifiers (IDFA) or cross-app tracking data
• Email, phone number, username, or password (Kept has no account system)
• Contacts, calendar, or health data
• Biometric data
• Payment information (Kept currently has no in-app purchases)

We do not operate backend servers that collect user content. We do not use third-party advertising or analytics SDKs.

2. How We Use Your Information

Your data is used solely to provide app functionality:

• Display and manage your collected items
• Arrange and browse items on canvases
• Show today's collectible thumbnail in the widget
• Record capture time and location for your reference
• Transcribe voice memos to text notes
• Create, replay, sync, save, or share Live Tickets
• Keep an on-device export history for in-app functionality or troubleshooting

3. Storage and Retention

Local storage: All data is stored in the on-device sandbox by default, including the SwiftData database, local item images, Live Ticket frame files, audio files, the export-record JSONL in Application Support, and the widget snapshot and UserDefaults preferences in the App Group.

iCloud Sync (optional): You may enable iCloud sync in the app's settings. When enabled, items, canvases, images, Live Ticket frame archives, and audio files sync to the CloudKit private database under your Apple ID (container iCloud.com.gentlemouse.kept). The developer cannot view the contents of your CloudKit private database. Sync is off by default for new users.

Preference sync: Small app-state values, including onboarding completion and the iCloud sync toggle, may sync across devices under your Apple ID via Apple's iCloud Key-Value Store (NSUbiquitousKeyValueStore). Onboarding completion may sync even while optional content sync remains off.

Deletion: You can delete individual items or canvases within the app; associated images, Live Ticket frames, and audio files are removed accordingly. Uninstalling the app clears local data on your device. If you previously enabled iCloud sync, cloud copies remain in your iCloud account and can be managed via Apple's iCloud storage settings.

4. Third-Party Services and System Permissions

Kept relies exclusively on Apple system frameworks and contains no third-party SDKs. System services used include:

• Camera — Capture item photos or a short sequence of frames for a Live Ticket
• Photo Library (read) — Import images or Live Photos from your library
• Photo Library (write) — Save exported images or Live Photos to your library
• Location (when in use) — Record city-level location or optional GPS coordinates when taking a photo; not continuous background tracking
• Microphone — Record voice memos
• Speech Recognition — Transcribe voice to text via Apple Speech framework
• Gyroscope — Parallax animation effect in the ticket preview; motion data does not leave the device
• iCloud / CloudKit — Optional cross-device data sync

Regarding Speech Recognition: Voice transcription is processed by Apple's Speech framework (SFSpeechRecognizer). Its data handling is governed by Apple's privacy policy. See: https://www.apple.com/legal/privacy/

Regarding Geocoding: Place name resolution is performed by Apple Core Location services and is governed by Apple's privacy policy.

All permissions can be revoked at any time in iOS Settings.

5. When Data Leaves Your Device

Data may leave your device only in the following user-triggered or Apple-account synchronization scenarios:

• Save to Photo Library: Exported images or Live Photos are written to your system photo library
• System Share Sheet: Exported images or Live Photos are sent to a third-party app of your choice via the iOS share sheet
• Preference Sync: After you complete onboarding or choose an iCloud sync setting, those small state values may sync through Apple's iCloud Key-Value Store, even while optional content sync is off
• iCloud Content Sync: When enabled in Kept's settings, your items and attachments sync to your private iCloud account
• Speech Recognition: Voice data is processed by Apple's system service

Note: an exported image may include the embedded EXIF provenance record described in Section 1; when present, it travels with that image.

Beyond these, the app does not automatically upload your content to developer-controlled servers.

6. Your Choices and Rights

• Manage permissions: Toggle camera, photo library, location, microphone, and speech recognition access in iOS Settings > Kept.
• Disable iCloud Sync: Turning it off in the app's settings stops further syncing via iCloud. This does not delete local data, and any synced cloud copies can be managed via Apple's iCloud settings.
• Delete data: Remove items or canvases within the app, including their associated images, Live Ticket frames, and audio; uninstall to clear local data; manage cloud data via iCloud storage settings.

You can manage, delete, or limit Kept's use of your local data and system permissions through the methods above. For any other privacy-related requests, please contact us at the email below. Please note that some data processing depends on external services such as iOS, iCloud, Apple Speech, and any share-target app you choose, each governed by its own terms.

7. Children's Privacy

Kept is not designed for children under 13. We do not knowingly collect personal information from children. If you believe a child's data has been inadvertently recorded, please contact us at the email below.

8. Policy Updates

This policy may be updated as features evolve. Updates will be shown on the app's settings page with a new version and effective date; for significant changes, we will provide notice in an appropriate manner.

9. Contact Us

For any privacy-related questions, please contact:

• Email: duongquochien35@gmail.com
• Operator: Kept

This policy is available in the app's Settings page.

Disclaimer: This policy is intended only to explain how Kept handles data and does not constitute legal advice. For significant compliance decisions, please consult a licensed attorney.

Kept 隐私政策

生效日期：2026年7月25日

Kept 是一款本地优先的票根与物品收藏应用，由个人开发者以 Kept 名义运营。我们重视您的隐私。本政策说明 Kept 如何处理您的信息。

本政策适用于 Kept iOS 应用及其桌面小组件。

一、我们收集的信息

Kept 的核心设计原则是数据留在您的设备上。以下信息均由您主动创建或在使用 App 时产生，默认存储在设备本地：

• 物品照片与 Live 图票据帧：您拍摄或从相册导入的票根、物品图片，以及长按快门或导入实况照片后由 Kept 生成的短帧序列。导入实况照片时，Kept 会临时读取其配对动态资源以抽取帧，并在处理后删除临时文件
• 文字备注：您为物品添加的文字记忆
• 语音备注：您录制的语音记忆及其转写文字
• 合辑与布局：合辑名称、物品的位置、旋转与缩放信息
• 拍摄时间：来自照片 EXIF 或系统元数据
• 拍摄地点：仅在您授权定位权限并拍照时记录城市级地名，以及在相关功能需要时保存的可选 GPS 坐标；拒绝授权则不记录
• 导出记录元数据：例如导出时间、导出模板类型等，仅以本地 JSONL 文件形式保存，用于 App 内导出历史、功能展示或排查，不联网上传
• 导出图片内嵌溯源信息：导出的图片会在 EXIF UserComment 字段写入一段本机生成的溯源记录，包含模板类型、导出时间，以及合辑（canvas_id）、物品（ticket_id）、策展版本（curation_id）等随机标识符，用于把图片对应回它出自的合辑与物品。这些标识符不含个人信息，App 也不会将其上传
• 小组件缩略图快照：用于桌面小组件展示今日藏品，保存在本地 App Group 共享容器
• 应用偏好与引导状态：新手引导完成标记、视差开关等 UI 偏好，保存在 UserDefaults / App Group

我们不收集：

• 广告标识符（IDFA）或跨应用追踪数据
• 邮箱、手机号、用户名或密码（Kept 无账号体系）
• 通讯录、日历、健康数据
• 生物识别信息
• 支付信息（当前无内购 / IAP）

我们不运营后端服务器收集用户内容，不使用第三方广告或分析 SDK。

二、信息的使用方式

您的数据仅用于实现 App 功能：

• 展示和管理您的收藏物品
• 在合辑中排列与浏览物品
• 在小组件中展示今日藏品缩略图
• 记录拍摄时间与地点，供您回顾
• 将语音转写为文字备注
• 创建、回看、同步、保存或分享 Live 图票据
• 在本地记录导出历史，便于 App 内功能展示或排查

三、信息的存储与保留

本地存储：所有数据默认存储在设备本地沙盒中，包括 SwiftData 数据库、本地物品图片、Live 图票据帧文件、音频文件、Application Support 内的导出记录 JSONL，以及 App Group 内的小组件快照与 UserDefaults 偏好。

iCloud 同步（可选）：您可在 App 设置中主动开启 iCloud 同步。开启后，票据、合辑、图片、Live 图票据帧归档及语音文件将同步至您 Apple ID 下的 CloudKit 私有数据库（容器为 iCloud.com.gentlemouse.kept）。开发者无法查看您的 CloudKit 私有库内容。新用户默认关闭同步。

偏好同步：新手引导完成标记、iCloud 同步开关等少量应用状态，可能通过 Apple 的 iCloud 键值存储（NSUbiquitousKeyValueStore）在您 Apple ID 下的设备之间同步。即使可选的内容同步仍为关闭，引导完成标记也可能同步。

删除：您可在 App 内随时删除单个物品或合辑，关联的图片、Live 图票据帧和音频文件将一并清除。卸载 App 会清除设备本地数据；如曾开启 iCloud 同步，云端副本将保留在您的 iCloud 账户中，可通过 Apple 提供的 iCloud 存储设置管理。

四、第三方服务与系统权限

Kept 仅依赖 Apple 系统框架，不包含第三方 SDK。涉及的系统服务包括：

• 相机 — 拍摄票根、物品照片，或为 Live 图票据采集一小段帧序列
• 相册读取 — 从相册导入图片或实况照片
• 相册写入 — 导出图片或实况照片到系统相册
• 定位（使用时） — 拍照时记录所在城市或可选 GPS 坐标，非持续后台定位
• 麦克风 — 录制语音备注
• 语音识别 — 将语音转写为文字，依赖 Apple Speech 框架
• 陀螺仪 — 票据预览中的视差动画效果，运动数据不离开设备
• iCloud / CloudKit — 可选的跨设备数据同步

关于语音识别：语音转写由 Apple Speech 框架（SFSpeechRecognizer）处理，其数据处理遵循 Apple 隐私政策。详见：https://www.apple.com/legal/privacy/

关于地理编码：地点名称解析由 Apple Core Location 服务完成，遵循 Apple 隐私政策。

所有权限均可在 iOS「设置」中随时撤销。

五、数据离开设备的场景

数据只会在以下由您主动触发或由 Apple 账户执行状态同步的场景中离开设备：

• 保存到相册：导出的图片或实况照片写入系统照片库
• 系统分享：通过 iOS 分享面板将导出的图片或实况照片发送至您选择的第三方 App
• 偏好同步：当您完成新手引导或选择 iCloud 同步设置后，这些少量状态可能通过 Apple 的 iCloud 键值存储同步；即使可选的内容同步关闭，引导完成标记仍可能同步
• iCloud 内容同步：在 Kept 设置中开启后，物品及其附件同步至您的 iCloud 私有账户
• 语音识别：语音数据由 Apple 系统服务处理

请注意：导出的图片可能带有第一节所述的 EXIF 内嵌溯源信息；若存在，该信息会随图片一同离开设备。

除此之外，App 不会自动将您的内容上传至开发者控制的服务器。

六、您的选择与权利

• 管理权限：您可在 iOS「设置 > Kept」中开启或关闭相机、相册、定位、麦克风、语音识别权限。
• 关闭 iCloud 同步：您可在 App 设置中关闭 iCloud 同步。关闭后将停止继续通过 iCloud 同步；关闭操作不会删除本机数据，已同步的云端副本可通过 Apple 提供的 iCloud 设置管理。
• 删除数据：您可在 App 内删除物品或合辑，并一并清理关联图片、Live 图票据帧与音频；卸载 App 可清除本地数据；云端数据可通过 iCloud 存储设置管理。

您可以通过上述方式管理、删除或限制 Kept 对本地数据和系统权限的使用。如有其他隐私相关请求，可通过下方邮箱与我们联系。请注意，部分数据处理依赖 iOS 系统、iCloud、Apple Speech 及您选择的分享目标 App 等外部服务，受其各自规则约束。

七、儿童隐私

Kept 非专为 13 岁以下儿童设计，不会明知地收集儿童个人信息。如您发现有儿童数据被误录入，请通过下方邮箱联系我们。

八、政策更新

本政策可能因功能变化而更新。更新后将在 App 内设置页展示新的版本和生效日期；如涉及重大变更，我们会以适当方式提示。

九、联系我们

如有任何隐私相关问题，请联系：

• 邮箱：duongquochien35@gmail.com
• 运营者：Kept

本政策可在 App 内「设置」页查看。

免责声明：本政策仅用于说明 Kept 的数据处理方式，不构成法律意见；如涉及重大合规决策，请咨询执业律师。