Kept

Privacy policy

Who is responsible

Alexander Wirths
Deutschherrnufer 42
60594 Frankfurt am Main
Germany
Email: norn.optimization@gmail.com

The Kept app

Kept runs on your iPhone. It has no servers and no account, and we receive no data from it: no photos, no analytics, no usage statistics, no identifiers.

Your photos. Kept reads your photo library, with your permission, to show your photos and to find look-alikes, blurry shots, screenshots and trips. All of this happens on your iPhone, and what Kept learns about your photos (your decisions, similarity measurements, trips) is stored only on your iPhone. A photo is deleted only after you confirm it and iOS asks you once more; it then goes to Recently Deleted in Photos, where it is usually recoverable for up to 30 days.

Place names. If “Place names” is on in Kept’s settings (it is by default), Kept asks Apple Maps for the name of a place you travelled to, so a trip can be called “Lisbon”. Apple receives an approximate location (rounded to about a kilometre), never a photo. Apple’s handling of this is described in Apple’s privacy policy. The travel map’s tiles also come from Apple Maps. You can turn place names off at any time.

Purchase. The one-time unlock is sold by Apple through the App Store. We don’t see your payment details; Apple tells the app only whether it is unlocked.

Deleting your data. Deleting the app deletes everything Kept stored on your iPhone.

This website

This website sets no cookies, stores nothing on your device beyond what your browser keeps on its own, and loads no trackers, no analytics and no fonts or scripts from other servers.

Hosting. The site is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When you open the site, GitHub processes the data your browser sends with every request, in particular your IP address, the date and time, the page requested and your browser and device type, to deliver the site and keep the service secure. We have no access to these logs. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest is delivering the site securely and reliably. The data may be processed in the USA; GitHub is certified under the EU-U.S. Data Privacy Framework, for which the European Commission has adopted an adequacy decision under Art. 45 GDPR. See the GitHub General Privacy Statement.

Contact by email. If you email us, we process your address and your message to answer you. The legal basis is Art. 6 (1) (b) GDPR where your message concerns a contract or its preparation, and Art. 6 (1) (f) GDPR otherwise, our legitimate interest being to answer enquiries. Emails are received through Gmail, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which may also process data in the USA under the EU-U.S. Data Privacy Framework. We delete your message once the matter is settled, unless a legal retention duty applies.

Your rights

You have the right to access your personal data (Art. 15 GDPR), to have it corrected (Art. 16), erased (Art. 17) or its processing restricted (Art. 18), and to receive it in a portable format (Art. 20). Where we process data on the basis of legitimate interests, you can object at any time (Art. 21). To use any of these rights, email us.

You can also lodge a complaint with a data protection authority (Art. 77 GDPR). The authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI), Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.

Last updated: 15 October 2026