Privacy Policy

1) Data controller

Keevaq (project owner) is the data controller for the website and app. Contact for privacy requests: getkeevaq@proton.me.

2) What data we collect

• Account data: Apple/Google sign-in identifier, and email if provided by the identity provider.
• App content: inventories, notes, receipts, attachments, and OCR output.
• Waitlist/demo data: email, optional name, profile answers, and pricing feedback you submit on the website.
• Technical data: basic security and reliability logs (for abuse prevention and troubleshooting).

3) Why we process data (legal basis)

• Provide the app service (Art. 6(1)(b) GDPR — contract).
• Protect the service and prevent abuse (Art. 6(1)(f) — legitimate interest).
• Manage demo waitlist and contact you (Art. 6(1)(a) — consent).
• Send optional product updates (Art. 6(1)(a) — consent, can be withdrawn anytime).

4) Processors and infrastructure

We use service providers acting as processors, mainly:

• Cloudflare (Workers, D1, R2, KV, hosting and network security).
• Proton (email communication).

5) International transfers

Some processing may involve transfers outside the EEA. When required, we rely on GDPR-compatible safeguards (for example Standard Contractual Clauses and/or equivalent legal transfer mechanisms).

6) Retention

• App data: until you delete it, or request account deletion.
• Waitlist data: up to 24 months from last interaction, or earlier on request.
• Optional marketing consent: until withdrawn.
• Security logs: limited retention, normally up to 30 days unless needed for security incidents.

7) Your GDPR rights

You may request access, correction, deletion, restriction, portability, or objection to processing. You may also withdraw consent at any time where consent is the legal basis. To exercise rights, email getkeevaq@proton.me.

8) Complaints

You can file a complaint with your local supervisory authority. If you are in Italy, this is the Garante per la protezione dei dati personali.

9) Children

Keevaq is not intended for children under 16.

10) Automated decisions

We do not use automated decision-making producing legal or similarly significant effects.

11) Policy changes

If we change this policy, we update the date at the top of this page.