Privacy

Updated 31 October 2026

Your messages stay on your Mac. Keepsake reads them there and nowhere else. The only time any of it leaves is when you share a book as a link, and then it's encrypted on your Mac first, so only the people you give the link to can read it. Here's everything else, in plain words.

Who's responsible

KEEPSAKE, a sole trader business in Denmark (CVR 46875990), hello@keepsakemac.com.

Your messages

• Keepsake reads Messages and WhatsApp on your Mac, once you let it in System Settings, and the chats you add from WhatsApp, Instagram or Messenger.
• If you let it, it reads your contacts too, to put names, photos and birthdays to your chats. They stay on your Mac as well.
• It keeps its own copy of what it reads, in its folder on your Mac, so your keepsakes still work if a chat is deleted. Photos you add are copied without their place, camera or date.
• Delete Everything, in Keepsake's Settings, removes every copy Keepsake has made.

What Keepsake sends, and why

Keepsake goes online only for these:

• Otto, Keepsake's reader. The model Keepsake reads with is downloaded once, after you set up, from Hugging Face (huggingface.co), which, like any website, sees your Mac's internet address as it sends the file. Nothing about you or your chats goes with it.
• How you use Keepsake, unless you turn it off. The buttons you press, the screens you see, how long things take and what a keepsake is made of (its kind, its look, how many photos), with a random ID for each session and one for the install. Never a message, a word, a name, a number, a photo, a file's name or who a keepsake is about. It goes to our own server in the EU (usage.keepsakemac.com), is used only to improve Keepsake and is never sold, and we don't keep your internet address. In Settings you can turn it off, see everything shared in the last 30 days, and delete it all with Delete What's Been Shared.
• A book you share as a link, only if you choose to. Your Book and Poster, with their photos, are encrypted on your Mac with a new key each time and kept on our server in the EU. The key is only in the link, after its #, which browsers never send, so we keep what we can't read, and anyone you give the link to can open it. Opens are counted, never which book, with no cookie. Delete Link takes it down, and Delete Everything takes down every one.
• Updates. Keepsake checks this website for a new version, which also brings the list of codes that have been refunded.

And if you've told macOS to share crash reports with app developers, Apple passes Keepsake's on to us. They say where Keepsake stopped, never what's in your chats.

When you buy

• Paddle (paddle.com) is our reseller and merchant of record. It collects your payment details, email address and country under its own privacy policy. We never see your card.
• From Paddle we get your email address, what you bought, when, and your country, to send your code, help you, and keep the accounts the law asks for (five years, under Danish bookkeeping law). A purchase is only ever "one person" or "a group chat", never who it's about.
• Your account on this website is made from that email address, with no password: you sign in with a link we email you. It holds your email address, what you bought and your codes, and you can delete it.
• Your code holds your email address, so Keepsake can show who it's unlocked for. Keepsake checks it on your Mac without going online.

This website

• keepsakemac.com sets no cookies of its own and has no trackers. Nothing on it comes from other companies, except Paddle's checkout when you buy, which works under Paddle's privacy policy.
• It's hosted by Cloudflare, which handles your internet address to deliver the pages and keep the site safe, as any host does. To show the Coming soon page in your language, it may ask Cloudflare which country you're visiting from; that isn't kept.
• Email you send to hello@keepsakemac.com comes to us through Cloudflare's email routing and is kept as long as we need it to help you.

Who else handles data for us

Cloudflare (this website, our servers and our email routing), Google (our mailbox), Hugging Face (Otto's download), Paddle (payments) and Apple (crash reports, if you share them). Where any of them handles data outside the EU, it's protected as EU law requires.

Why we may use it

To send your code, run your account and keep a book you share (our agreement with you), to keep accounts (the law), and to improve Keepsake from how it's used (our legitimate interest, which you can turn off at any time).

Your rights

You can ask what we have about you, have it corrected or deleted, take a copy with you, or object to how we use it: write to hello@keepsakemac.com. Much of it you can do yourself: Delete Everything and Delete What's Been Shared in Keepsake, and deleting your account on this website. If you think we've got something wrong, you can complain to Datatilsynet, the Danish Data Protection Agency (datatilsynet.dk).

Changes

When this page changes, its date does too, and we'll say so in the app if it matters.