Draft · Last updated September 2026
Privacy Policy
This policy explains what information Kept collects, why we collect it, and the choices you have. We wrote it to be read, not skimmed. If anything is unclear, contact us and we will explain.
What we collect
- Account details such as your name and email address when you sign up.
- Bank data you choose to share through Plaid: account names, balances, and transactions.
- Goals and settings you create inside the app.
- Basic technical data like browser type and crash reports, used to keep the app working.
Site analytics. Kept keeps its own first-party analytics: which pages are viewed, when, the country and state the request came from, whether the device is a phone, and the site that sent you here. Your browser gets a random visitor id in a cookie so we can tell returning visits from new ones; it is not linked to your name unless you sign in, and no IP addresses are stored. Nothing is sent to a third-party analytics service. If your browser sends a Global Privacy Control signal, no visitor cookie is set; that day's visits are counted under a one-way key that changes daily and cannot be traced back to you. These records are kept for 13 months.
How we use your data
- To show you your accounts, spending, income, and progress toward goals.
- To detect recurring charges so you can spot subscriptions.
- To set savings challenges from your own spending. If you choose to share a win, it appears in the community feed inside Kept without your name, the places you shop, or an exact amount. Community totals are anonymous sums across members.
- To keep your account secure and to fix problems.
We do not sell your personal data. We do not show you advertising. We do not share your bank data with anyone except the service providers listed below, and only so they can run the app for you.
Bank connections and Plaid
Kept connects to your bank using Plaid. Your bank login is entered directly with Plaid and is never seen or stored by Kept. Access is read-only: Kept cannot move money or make changes at your bank. Plaid's own privacy policy applies to the data it handles on your behalf.
Service providers we rely on
- Plaid, for bank connections.
- Clerk, for sign-in and account security.
- A hosted Postgres database and Vercel, for storing and running the app.
How long we keep data
We keep your data while you have an account. If you delete your account, we delete your bank data and personal details within 30 days, except where the law requires us to keep records longer. We keep a limited closure record (your agreement to the Terms, sign-in and usage history, support and billing history) for 18 months to resolve payment disputes and meet legal obligations, then delete it.
Your choices
- Disconnect a bank at any time from inside the app.
- Delete your account, which removes your data as described above.
- Ask us for a copy of the data we hold about you.
Security
Data is encrypted in transit and at rest. Bank access tokens are stored encrypted and are never exposed to your browser. No system is perfectly secure, and we will tell you promptly if we learn of a breach affecting your data.
Changes to this policy
If we make meaningful changes, we will tell you inside the app or by email before they take effect.
Contact
Questions about privacy can be sent to the contact address listed in the app.