How we protect your family’s stories

1. Who we are

Keepsake is a product of Epigraf Pte. Ltd., incorporated in Singapore. We help families capture voice notes, photos, and written memories and publish them in hardcover books. Epigraf Pte. Ltd. is the controller of the personal information described here.

2. Who this policy covers

Three kinds of people appear in Keepsake, and this policy covers all of them.

• Account holders buy and manage a Project, invite others, and prepare the printed book.
• Contributors answer questions and add memories. A contributor may take part through a personal response link without ever creating an account. This policy applies to contributors in full, and every right in section 13 is theirs too.
• People a story is about may be named, described, or shown in a memory without using Keepsake themselves. They can ask us to remove that content, and section 13 explains how.

3. Information we collect

• Account details: name, email address, password, and profile preferences.
• Contributor details: the name and email address an account holder gives us so we can deliver an invitation or a question, and the display name shown beside a contribution.
• Waitlist details: the email address you submit, your language, and the public page and button placement where you joined.
• Family content: voice and video recordings, photo uploads, written stories, answers to questions, and book layout selections saved in a Project, together with technical details of those files such as format, size, and duration.
• Order details: the recipient name and delivery address needed to print and ship a book, plus order status.
• Billing information: payment details processed by Stripe or its affiliates (Keepsake never stores complete card numbers).
• Usage and campaign data: with your permission, our analytics and advertising-measurement providers receive page addresses, referrers, device or browser details, and usage events. Section 9 explains exactly what we do and do not collect.
• Support communications: emails and messages sent to support@makekeepsake.com or through in-app forms.

4. How we use information

• Provide, personalize, and maintain the Keepsake service.
• Facilitate collaboration in family projects and generate Keepsake books.
• Provide optional, reviewable Question, title, and book-arrangement suggestions.
• Deliver questions, invitations, and reminders to the people you invite.
• Process payments, purchases, and order fulfilment.
• Improve reliability, security, and user experience through analytics.
• Communicate product updates, support responses, and new content.
• Confirm your waitlist request and tell you when Keepsake opens to new families.

We do not use family content to train artificial-intelligence models, and we do not sell it.

5. Voice, video, transcription, and AI assistance

Recordings are the heart of Keepsake, so we treat them with particular care. When you record a memory, we convert the audio to text automatically so the story can be read, searched, and typeset for print.

• Transcription is carried out by specialist speech-to-text providers acting on our instructions, and only for the purpose of producing your transcript.
• Where a provider keeps a copy of the transcript, we delete it once processing is complete.
• The transcript is editable. We clean up transcription artefacts for readability but never rewrite the storyteller’s words with AI.
• Your recordings are not used to train our providers’ models or ours, and they are not shared with anyone outside your Project.

When you ask Keepsake for a follow-up Question, title, or book arrangement, relevant family text and Project structure are sent to Cloudflare Workers AI to generate that suggestion. The result is optional: you review it and choose whether to apply it. AI cannot publish, prepare, purchase, or order a book for you.

We disable prompt and response storage in AI Gateway logs and keep only operational metadata such as model, status, token count, cost, and duration. Cloudflare states that it does not use Workers AI customer content to train models or improve its or third-party services without explicit consent. Keepsake does not give that consent and does not use family content to train models.

6. Legal bases for processing

Because we serve families globally, we rely on: (a) performance of a contract (providing the Keepsake service to account holders); (b) legitimate interests — delivering a contribution to the Project it was invited for, keeping the service secure, and improving the product, balanced against the interests of the people involved; and (c) consent (optional analytics, advertising measurement, waitlist messages, and marketing communications where required). Where we rely on consent you may withdraw it at any time.

7. Who processes information for us

We keep the list of external companies deliberately short. Each one acts on our instructions, for the purpose named, under contractual terms that require appropriate protection.

• Cloud hosting, database, storage, and content delivery — running the service and storing family content.
• Speech-to-text providers — converting voice and video recordings to text, as described in section 5.
• AI inference — Cloudflare Workers AI processes the relevant family text and Project structure only when you request an optional suggestion, as described in section 5.
• Payment processing — taking payment and handling refunds and disputes.
• Print and fulfilment partners — manufacturing and shipping your book. They receive the book files and the delivery name and address, and nothing else from your Project.
• Email delivery — sending invitations, questions, receipts, and account messages.
• Error monitoring — diagnosing faults. Reports are stripped of private page addresses before they are sent.
• Analytics and advertising measurement — only with your consent, as described in section 9.

We also disclose information where the law requires it, or to protect rights, safety, and security. We do not sell personal information for money. Depending on where you live, consented disclosure for advertising measurement may count as “sharing” or targeted advertising; you can decline or withdraw that consent at any time, and we honour Global Privacy Control as a limit on marketing measurement.

8. Printed books, QR codes, and share links

A printed Keepsake book can include QR codes that play the original recordings. This is a deliberate feature, and it has consequences worth stating plainly.

• Anyone holding the printed book can scan a code and play that recording without an account or password.
• These pages are not indexed by search engines and cannot be discovered without the book, but they are not secret.
• The addresses are permanent by design, so the printed page keeps working for as long as the book exists.
• If a memory or Project is deleted, the printed address still resolves but playback stops working. A book that is already printed cannot be changed.
• An account holder may also create a link to share one Story. Anyone with that link can read it until the link is turned off.

9. Analytics and your choices

We do measure how Keepsake is used, because we cannot improve a product we cannot see. We try to do it in the least intrusive way that still answers the question, and these are the limits we hold ourselves to.

• Analytics and advertising measurement run only after you agree, and never before.
• We do not record your screen, typing, or page content. There is no session replay. On public marketing pages only, we automatically record clicks on links and buttons after you consent; product interactions use a defined list of events instead.
• Page addresses are cleaned before they leave your browser. Addresses that identify a Project, a Story, a response link, or a QR page are removed rather than sent, and query values are stripped.
• Family content is never sent to an analytics or advertising provider.
• We honour the Global Privacy Control signal as a withdrawal of consent for advertising measurement.
• The response link a contributor uses to record a memory carries no analytics at all.

You can change these choices at any time from Privacy choices, and our Cookie policy lists what is stored in your browser.

10. International transfers

Your data may be stored or processed in data centres outside Singapore and outside your own country, through our hosting, storage, transcription, print, and email providers. Where personal information is transferred out of the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission’s Standard Contractual Clauses or an adequacy decision, together with technical safeguards such as encryption in transit and at rest. You can ask us for details of the safeguards that apply.

11. Retention

We keep account information and family content while you maintain a Keepsake account. Account closure has a 30-day cancellation period; after it ends, the application removes owned Projects, contact details, login data, and non-accounting email history. Deleted data may remain in protected backups until those backups expire and is not restored to the active service. Payment, tax, fraud-prevention, suppression, dispute, and fulfilment records may remain where law or contract requires them.

A refunded Project is locked for a 30-day recovery window and then deleted automatically unless it is repurchased. A contribution is kept for as long as the Project that received it, unless the contributor or the account holder removes it earlier.

A waitlist email address is kept until signup opens and launch communication is complete, or until you ask us to delete it. If an address bounces or complains, we do not use it for outreach; we may retain the minimum suppression and delivery facts needed to avoid contacting it again.

12. Keepsake is not for minors

Keepsake is made for adults preserving family history. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. Accounts and contributions require you to be at least 18, and account holders agree not to invite anyone younger.

Family memories often describe or show people of every age, including children. That content is added by an adult who confirms they have the right to include it, and it is different from a child using the service. If you believe a minor has created an account or submitted a contribution, contact us at support@makekeepsake.com and we will remove it.

13. Your rights

Subject to applicable law, you may request access to your personal data, correction, deletion, a portable copy, or restriction of processing; object to processing based on legitimate interests; and withdraw analytics, advertising-measurement, or marketing consent. You can change optional tracking through Privacy choices at any time.

These rights belong to contributors and to people a story is about, not only to account holders. If you contributed a memory, or a memory describes you, write to us and we will remove it from the service and disable any QR playback bound to it. We cannot change a book that has already been printed.

Contact us at support@makekeepsake.com and we will respond within 30 days. We may ask for enough information to confirm who you are before we act, and we use that information only to answer the request. If you are in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to complain to your local data protection authority.

14. Security

We use encryption in transit and at rest, role-based access controls, and continuous monitoring. Despite these safeguards, no online service can guarantee absolute security, so we encourage you to use strong passwords and enable device-level protections.

15. Updates

We may update this policy as Keepsake evolves. Material changes will be announced via email or in-app notices with a revised effective date.

16. Contact

Epigraf Pte. Ltd., 160 Robinson Road, #14-04 Singapore 068914
Email: support@makekeepsake.com