한국어 · English

Keepsake Privacy Policy

Effective Date: November 6, 2026

This English version is provided for convenience only. In the event of any conflict or inconsistency between the English and Korean versions, the Korean version shall prevail.

This Privacy Policy explains how Atelier Labs ("we," "us" or "our") collects, uses, shares and protects your personal information when you use the Keepsake app (the "Service"), and how you can exercise your rights. We have established this policy in accordance with the Personal Information Protection Act of the Republic of Korea so that we can protect your personal information and respond promptly to any concerns you may have. If you use the Service without signing in, we do not collect any personal information.

1. Information We Collect

Information from sign-in

Sign-in provider	Information we receive
Apple	Your account's unique identifier and email address (or an Apple relay address if you choose "Hide My Email")
Google	Your account's unique identifier and email address

Information collected while you use the Service (when signed in)

Entries: notes, place names, the date, time and time zone a photo was taken, a photo's location coordinates and dimensions, your albums and the entries in them, and your picking history (dates and how many photos you picked)
Photos in Safe Albums (paid subscribers only): the original and a viewing copy for "Original Quality" albums, or a viewing copy only for "Space Saver" albums
Subscription information: subscription status, expiry date and payment event records. Card numbers and other payment details are handled by Apple and Google; we never receive them.
Photo link information: the identifiers of photos in your device's photo library, and a device key (a hash of your device's unique value combined with your account)
Notification information: your push notification token and device type (iOS or Android)
Information collected automatically: your storage usage and photo count, and, when the app encounters an error, your device model, OS version, app version and error details

Information kept only on your device (never sent to us)

Entries you created before signing in, your picking reminder settings, the notifications you have received (the most recent 100), and cleanup suggestions

2. How We Use Your Information

Purpose	Information used
Identifying you and signing you in	Account identifier, email address
Backing up your entries, restoring them on a new device and syncing them across devices	Entries, albums, picking history
Providing the Safe Library	Photos in Safe Albums, storage usage
Verifying your subscription and handling its expiry	Subscription information
Reconnecting your entries to the original photos in your device's photo library after you reinstall the app	Photo link information
Notifying you when your subscription ends and before your photos are deleted	Push notification token, device type
Troubleshooting errors and keeping the Service stable	Device information, error details

We never use your photos or notes for advertising, profiling or AI training, and we never sell them.

3. Retention and Deletion

We delete personal information without delay when you delete your account or when it is no longer needed for the purpose it was collected for. We delete the database records on our servers and the files in our storage so that they cannot be recovered.
When you delete an entry in the app, we delete that entry and its photos from our servers.
When you remove a photo from a Safe Album, we delete it from our servers if it is no longer in any Safe Album.
When your subscription ends, we delete only the photos on our servers, 30 days later. Your entries, albums, photo link information and account are kept until you delete your account.
When you delete your account, we immediately delete your entries, photos, photo link information, account information, subscription information and push notification tokens from our servers, and we also delete your customer record at RevenueCat.
Signing out leaves your information on our servers, so you can pick up where you left off when you sign in again.
Where the law requires us to keep certain information, we keep it for the required period. Under the Korean Act on the Consumer Protection in Electronic Commerce, records of contracts, cancellations, payments and the supply of goods are kept for 5 years, and records of consumer complaints and dispute resolution for 3 years. For this reason, payment event records are kept for 5 years from the date we receive them, even after you delete your account, and are then deleted automatically.

4. Sharing with Third Parties

We do not share your personal information with third parties for any purpose other than those described in Section 2, except:

where you have given your prior consent; or
where a law enforcement agency requests it in accordance with the law.

5. Service Providers

We use the following service providers to run the Service. They process your information only to the extent needed for tasks such as sign-in, data storage and sending notifications, and they retain it until our contract with them ends.

Service provider	What they do for us
Apple Inc.	Sign in with Apple, in-app purchases, delivering push notifications to iOS devices
Google LLC	Sign in with Google, in-app purchases, delivering push notifications to Android devices
650 Industries, Inc. (Expo)	Relaying app push notifications
RevenueCat, Inc.	Verifying subscription status
Railway Inc.	Server hosting and data storage
Cloudflare, Inc.	Photo storage (R2)
Sentry (Functional Software, Inc.)	Collecting and analyzing app error and crash reports

6. Your Rights

You may exercise the following rights at any time:

Access, correction and deletion: you can view, edit and delete your entries directly in the app.
Deleting photos: removing a photo from a Safe Album deletes it from our servers.
Suspension of processing: you can ask us to stop processing your personal information.
Opting out of notifications: you can turn off notification permission in your device settings.
Deleting your account: go to [Settings > Account > Delete Account] in the app, or email us.

To exercise any of these rights, contact us at atelierlabs.kr@gmail.com and we will act on your request without delay. Please note that deleting your account does not cancel your app store subscription; cancel it in your device's subscription settings.

7. How We Keep Your Information Secure

Our photo storage is never public. Photos are uploaded and downloaded only through signed links that expire after a short time.
All data is encrypted in transit using HTTPS.
Each user's data is stored separately, and the contents of notes and places are kept out of our server logs and error reports.
Access is limited to authorized personnel on a least-privilege basis.

8. International Transfers

To provide the Service, we transfer personal information to the overseas companies listed below. The transfer takes place over the network when you sign in and use the Service, and each recipient keeps the information until you delete your account or our contract with them ends. If you do not want your information transferred overseas, you can use the Service without signing in; every feature of the Device Library remains available.

Recipient	Country	Information transferred	Purpose
Apple Inc.	United States	Sign in with Apple credentials, push notification tokens and notification content for iOS devices	Sign-in, payments, delivering push notifications
Google LLC	United States	Email address (when you sign in with Google), push notification tokens and notification content for Android devices	Sign-in, payments, delivering push notifications
650 Industries, Inc. (Expo)	United States	Push notification tokens, device type, notification titles and content	Relaying app push notifications
RevenueCat, Inc.	United States	Account identifier (a random ID we generate), purchase history	Verifying subscription status
Railway Inc.	Singapore	Account information, entries, albums, subscription information, photo link information, notification information	Server hosting and data storage
Cloudflare, Inc.	Cloudflare data centers, including in the United States	Photos in Safe Albums (originals and viewing copies)	Storing and serving photos (R2 Object Storage)
Sentry (Functional Software, Inc.)	United States	Device information (OS, device model, app version), technical logs from the time of an error, and the account identifier for server errors	Collecting app error and crash reports and improving the stability of the Service

9. Photos and Location Information

Photo library access: we use photo library permission to let you pick photos to keep, show the photos you have kept, clean up (delete) the photos you confirm, and save originals from the Safe Library back to your device's photo library. The Service does not copy your photos; it points to the originals in your device's photo library.
Automatic place names: if a photo has location coordinates, the app sends them to your device's built-in address lookup to find the place name. This is handled by Apple's servers on iOS and Google's servers on Android. We never receive this information.
The Service does not ask for permission to access your device's current location.

10. App Notifications

If you turn on picking reminders, they are scheduled and shown directly by your device and never go through our servers. You can turn them off at any time under [Settings > Device Library > Picking Reminders].
We send signed-in users push notifications that they need in order to use the Service, such as when a subscription ends or photos are about to be deleted.
We do not send marketing messages.

11. Children's Privacy

We do not knowingly collect personal information from children under the age of 14. If we become aware that we have collected personal information from a child under 14, we will delete it without delay.

12. Privacy Officer and Contact Information

Name: Sunghyun Cho Email: atelierlabs.kr@gmail.com

Please send any questions, complaints or reports concerning your personal information to the email address above. You may also contact the following Korean authorities:

Personal Information Infringement Report Center: privacy.kisa.or.kr / dial 118 (from within Korea)
Personal Information Dispute Mediation Committee: www.kopico.go.kr / +82-1833-6972
Supreme Prosecutors' Office, Cyber Investigation Division: www.spo.go.kr / dial 1301 (from within Korea)
Korean National Police Agency, Cyber Bureau: ecrm.police.go.kr / dial 182 (from within Korea)

13. Changes to This Privacy Policy

This Privacy Policy takes effect on November 6, 2026. We may update this policy to reflect changes in the law or in the Service. We will announce any update in the Service at least 7 days before it takes effect, or at least 30 days before if the change is unfavorable to you.

Contact: atelierlabs.kr@gmail.com