Privacy Policy

How we protect your family’s stories

This policy explains how Epigraf Pte. Ltd. (“Keepsake”, “we”, “us”) collects, uses, and safeguards the information entrusted to us.

Effective date: 23 September 2025

1. Who we are

Keepsake is a product of Epigraf Pte. Ltd., incorporated in Singapore. We help families capture voice notes, photos, and written memories and publish them in archival books.

2. Information we collect

  • Account details: name, email address, password, and profile preferences.
  • Family content: voice recordings, photo uploads, written stories, prompts, and book layout selections you save in Keepsake.
  • Billing information: payment details processed by Stripe or its affiliates (Keepsake never stores complete card numbers).
  • Usage data: device and session metadata, feature usage, and diagnostics captured via PostHog analytics to improve the product.
  • Support communications: emails and messages sent to support@makekeepsake.com or through in-app forms.

3. How we use information

  • Provide, personalize, and maintain the Keepsake service.
  • Facilitate collaboration in family projects and generate Keepsake books.
  • Process payments, subscriptions, and order fulfilment.
  • Improve reliability, security, and user experience through analytics.
  • Communicate product updates, support responses, and new content.

4. Legal bases for processing

Because we serve families globally, we rely on: (a) performance of a contract (providing the Keepsake service); (b) legitimate interests (product improvement, security); and (c) consent (marketing communications where required).

5. Sharing your information

  • Service providers: Supabase (data storage), Stripe (payments), PostHog (analytics), email delivery, and book printing partners. Each processes data on our behalf under contract.
  • Family collaborators: Contributors invited to your Keepsake project can view and add content according to the sharing settings you control.
  • Legal compliance: We may disclose information if required by law or to protect rights, safety, and security.

We do not sell personal information to third parties.

6. International transfers

Your data may be stored in data centers located outside Singapore (e.g., Supabase infrastructure in the United States or European Union). We rely on contractual safeguards and industry-standard security to protect those transfers.

7. Retention

We keep account information and family content for as long as you maintain a Keepsake account. If you delete a project or request erasure, associated content is removed from production backups within 30 days unless we must preserve it for legal reasons.

8. Security

We use encryption in transit and at rest, role-based access controls, and continuous monitoring. Despite these safeguards, no online service can guarantee absolute security, so we encourage you to use strong passwords and enable device-level protections.

9. Your rights

Subject to applicable law, you may request access, correction, or deletion of your personal data, object to processing, or withdraw marketing consent. Contact us at support@makekeepsake.com and we will respond within 30 days.

10. Updates

We may update this policy as Keepsake evolves. Material changes will be announced via email or in-app notices with a revised effective date.