Privacy Policy

1. Who we are

Kept (listed on the App Store and Google Play as "Kept Cards: Greeting Archive") is an app for keeping and sharing the greeting cards you've received, operated by Liha LLC, a California limited liability company ("we," "us"). For anything in this policy, reach us at hello@lihallc.com.

This policy covers Kept — the app and its websites. It does not cover other products operated by Liha LLC, which have their own policies.

2. Information we collect

Information you provide

• Account information. The name and email address from the Google account or Apple ID you sign in with, used to hold your collection and sync it across your devices. Kept has no password of its own — sign-in is handled by Google or Apple, and we never see your password. If you use Apple’s Hide My Email, we receive the relay address Apple gives us, not your real one.
• Your cards. Images of greeting cards you save, plus anything you attach: notes, dates, occasions, and the names of people you associate with a card.
• Sharing activity. When you share a card, we record what you shared and who you shared it with, so we can deliver it.
• Messages to us. Anything you send us for support.

Information collected automatically

Kept contains no analytics, no crash reporting, no advertising SDKs, and nothing that follows you across other apps or websites. We do not record which features you use, what device you are on, or where you are. The one thing recorded automatically is whether your subscription is active, described next.

Payment information

Kept Unlimited is an optional subscription. Payment is handled by the store you buy from — Apple if you subscribe in the iPhone app, Google if you subscribe in the Android app, Paddle if you subscribe on the web. We never see your card details and none of them reach our servers.

So that the app knows whether your subscription is active, we record its status — whether it is active, which store it came from, and when it renews. That is the whole of it; we hold no billing information of any kind.

3. Your cards are private by default

Your collection is yours, and it is visible only to you unless you choose to share it. Sharing works by invitation: you enter someone’s email address, and once they sign in with that address they can view your cards — view only; they cannot edit, delete or export them. Remove them and their access ends immediately. Nothing is copied to them. We do not browse, publish, or use your cards for anything other than storing them and showing them to you and the people you have invited.

Cards often carry personal things — handwriting, family photos, messages from people you love. We treat your collection accordingly.

4. How we use information

• Store your collection and sync it across your devices
• Show your collection to the people you have invited
• Read the handwriting in your cards into searchable text, and translate it when you ask
• Manage your account
• Respond to your requests and provide support
• Detect, prevent, and address abuse and technical issues
• Comply with legal obligations

We do not sell your personal information, we do not share it for cross-context behavioral advertising, and we do not use your card images for advertising or to train AI models.

5. When we share information

We share personal information only in these situations:

• Service providers. Google Firebase provides the sign-in, database and file storage that hold your collection. Anthropic provides the AI model that reads handwriting into text and translates it: when you save a card, the image of the handwritten message is sent to Anthropic to be transcribed, and the text comes back to your archive; under Anthropic’s terms, what we send is not used to train its models. RevenueCat keeps track of whether a Kept Unlimited subscription is active; it receives an identifier for your account and the purchase record, never your cards, your name or your email. Paddle is the seller for subscriptions bought on the web and handles that payment, the receipt and any sales tax; it receives your name, email and payment details for that purchase. Each of them processes your data only to provide its service to us. We use no analytics, advertising or crash-reporting providers.
• People you invite. Your collection, viewable by the people you have invited, for as long as you keep them invited.
• Legal requirements. If required by law, legal process, or to protect the rights, safety, or property of our users, the public, or Liha LLC.
• Business transfers. If Kept or Liha LLC is involved in a merger, acquisition, or sale of assets, your information may transfer as part of that transaction. We will notify you of any change in ownership or use of your personal information.

6. How long we keep information

We keep your collection for as long as your account is active. If you delete a card, it is removed from your collection and from our active systems, and anyone you have invited stops seeing it at the same moment. If you delete your account, we delete or de-identify your personal information — including your card images — within a reasonable period, except where we must retain records for legal or accounting purposes.

7. Your rights and choices

Depending on where you live, you may have rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal information we collect, to access and receive a copy of it, to correct it, to delete it, and not to be discriminated against for exercising these rights.

To exercise any of these rights, email hello@lihallc.com. We will verify your request using your account email. We do not sell or share personal information as defined by the CCPA.

You can opt out of non-essential emails at any time using the unsubscribe link in any message.

8. Children's privacy

Kept is designed for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us at hello@lihallc.com and we will delete it.

9. Security

We use industry-standard measures to protect your information, including encryption in transit, sign-in handled by Google or Apple so we never hold a password of yours, and access controls limiting who can reach personal data. No system is perfectly secure, so we cannot guarantee absolute security — but we work to protect your collection and will notify you of any breach as required by law.

10. Changes to this policy

We may update this policy as Kept evolves. If we make material changes, we will notify you by email or an in-app notice before the changes take effect. The effective date at the top always reflects the current version.

11. Contact us

Questions about this policy or your data:

Kept · operated by Liha LLC
hello@lihallc.com