🔐 KeepHold Privacy Policy

Last updated: October 2026 · KeepHold is published as Kasam in Türkiye; this policy covers both names.

KeepHold is a private vault for photos, videos, documents, notes and passwords. It was designed so that your data never has to leave your device. This policy explains what the app does and does not do with your data.

1. No account, no server, no data collection

KeepHold does not require an account and does not operate any server that receives your data. We do not collect, store or transmit your files, notes, passwords, usage statistics, crash reports or analytics. The only third‑party SDKs are the ad SDK used in the free version (section 5) and the purchase SDK (RevenueCat, section 6).

2. Where your data lives and how it is protected

• All files, notes and passwords are stored only on your device, in the app's private storage that other apps cannot read.
• Files are encrypted with AES-256-GCM. The encryption key is a random key stored in the device's secure store (iOS Keychain / Android Keystore) and never leaves the device. Notes, passwords and the search index are encrypted the same way.
• Your PIN, password or pattern is stored in the device's secure store. Face ID, Touch ID and fingerprint are verified by the operating system; the app never receives biometric data.
• If you create an optional recovery key, it is shown to you once and is not stored anywhere except as a wrapped key on your device. We cannot recover your PIN, your recovery key or your data.

3. Optional features that use the network

The only network activity happens when you explicitly use one of these features, and none of it goes to a server operated by us:

• Cloud backup / local backup: Backups are written to a folder you choose (for example iCloud Drive or Google Drive) as a file encrypted with a password you set. The cloud provider only ever sees encrypted data. Restoring requires that password.
• Password breach check: Uses the Have I Been Pwned "Pwned Passwords" k‑anonymity API. Only the first five characters of a SHA‑1 hash of a password are sent; the password itself never leaves the device. This runs only when you tap the check.
• Phone‑to‑phone transfer and Wi‑Fi transfer: Work only on your local network, directly between your devices, encrypted with a session key derived from the on‑screen code. No internet server is involved.
• Private browser: Pages you open are loaded from the websites you visit. The browser keeps cookies only for the session and stores bookmarks and history encrypted on your device. We do not see what you browse.
• Timed share: Creates a password‑protected, expiring file on your device that you share yourself (for example by e‑mail). We do not host or see it.

4. Permissions the app may ask for

• Photos / media: to import the items you select into the vault and, if you choose, to delete the originals.
• Camera: to take photos, record videos, scan documents and, if you enable the intruder report, to take a photo on a wrong unlock attempt. Intruder photos stay on the device.
• Microphone: to record audio notes into the vault.
• Location: only if you enable location in the intruder report; the location is stored on the device with the attempt.
• Notifications: for local reminders such as backup problems and intruder alerts. No push server is used.
• Local network: for Wi‑Fi and phone‑to‑phone transfer.
• Autofill (system credential provider): if you enable it, your saved logins are offered in other apps and browsers through the operating system. The records are kept in the app's encrypted shared store on the device.

Every permission is optional and can be revoked in the system settings.

5. Advertising in the free version

The free version shows ads (a banner on the vault screen, an occasional full‑screen ad when you return from a viewer, and an optional rewarded ad that unlocks a 72‑hour Pro trial). Ads are delivered by Unity LevelPlay (ironSource) and its mediated ad networks. For this purpose the ad SDK may collect your device's advertising identifier (IDFA on iOS, only if you allow tracking; GAID on Android), coarse device information (model, OS version, language, IP‑based approximate location) and ad interaction data. Nothing from your vault (files, notes, passwords, search index) is ever available to the ad SDK.

• Your choice: on iOS the system asks for tracking permission; in the EU/EEA/UK/Switzerland a consent dialog lets you choose personalized or non‑personalized ads; US users can opt out of "sale/sharing" via Settings › Ad choices. You can change the choice any time in Settings.
• No ads at all: KeepHold Pro removes ads and the ad SDK is never initialized for Pro users.
• Ad partner policies: Unity privacy policy.

6. In‑app purchase

KeepHold Pro is a one‑time purchase processed by Apple App Store or Google Play. We do not receive or store payment details. Purchase entitlements are validated through RevenueCat, which receives an anonymous app user ID and the store receipt; it never sees vault content. The purchase is tied to your store account and can be restored from the app.

7. Children's privacy

The app is not directed at children under 13 and we knowingly collect no data from anyone, including children.

8. Data deletion

Because all data is on your device, you control it completely: delete individual items, use "Delete all data" in Settings, or uninstall the app. Uninstalling removes the vault and its keys permanently. Backups you saved to your own cloud folder remain under your control.

9. Changes

If this policy changes, the new version will be published on this page with an updated date.

10. Contact

Questions about privacy: mfatihicin@gmail.com