Privacy Policy

Information Kept collects

Kept collects only what it needs to run the product:

• Account information — your name and email address, and a password that is stored only as a cryptographic hash, never as the password itself.
• Mobile phone number— collected at signup and used to confirm your number is on Kept's invite list. Providing it does not opt you in to text messages; that is a separate, optional choice you make yourself, and Kept records whether and when you made it.
• Financial account information — if you connect a card or bank account, Kept receives read-only information through Plaid: the account name, type, and last four digits, and your transaction history (merchant, amount, date, and category). Kept never receives or stores your bank credentials, and the access token Plaid issues is stored encrypted.
• Your settings and activity in Kept — your chosen cut percentage, savings goal, any weekly cap, the amounts Kept calculates, and whether you confirmed each weekly transfer.
• Notification preferences — if you turn on browser notifications, the subscription details your browser provides.

Kept does not collect location data, contacts, or advertising identifiers, and does not use third-party advertising or analytics trackers.

How Kept uses information

Kept uses this information to operate the product: to sign you in, to read your transactions and calculate what to set aside, to show you your activity, to tell you what to move each week, and to respond to you if you get in touch. Kept does not use your information to build advertising profiles, and does not sell it.

Kept never moves your money. It reads transactions and calculates amounts. You make every transfer yourself at your own bank.

Text messages (SMS)

Kept collects a mobile phone number at signup — it is how Kept recognizes that you were invited. If you separately and explicitly opt in by checking the SMS consent box, you may receive recurring weekly reminders from Kept telling you the amount your own activity has set aside and that it is time to move it. That weekly reminder is the only automated message Kept sends.

• Message frequency varies.
• Message and data rates may apply.
• Reply STOP at any time to stop receiving messages.
• Reply HELP for help.
• Consent to receive text messages is not required as a condition of using or purchasing Kept.
• Carriers are not liable for delayed or undelivered messages.

Mobile information will not be sold, rented, or shared with third parties or affiliates for their own marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party for marketing purposes. Kept does share your mobile number with the messaging provider that delivers its texts (Twilio), acting solely on Kept's behalf and only to send the messages you asked for. That provider may not use your number for its own purposes.

Service providers

Kept relies on a small number of providers to function, and shares information with them only to the extent they need it to perform their service for Kept:

• Plaid— connects your financial accounts and provides read-only transaction data. Plaid's handling of your information is governed by its own privacy policy.
• Twilio— delivers Kept's text messages, if you have opted in.
• Hosting and database providers — run the application and store its data.

These providers act on Kept's instructions. They are not permitted to use your information for their own marketing.

How long Kept keeps information

Kept keeps your information for as long as your account exists. If your account is deleted, its data — including your transactions, calculated amounts, connected account records, and phone number — is deleted with it, and any bank connection is unlinked.

Security

Passwords are stored as salted hashes, financial access tokens are encrypted, and sessions use signed, HTTP-only cookies. Kept is an early-stage product and makes no guarantee that any system is completely secure.

Your choices

• You can create and use a Kept account without opting in to text messages — leave the SMS consent box unchecked.
• Reply STOP to any Kept text message to stop receiving them.
• You can disconnect your financial account at any time.
• You can request that your account and its data be deleted by contacting Kept.

Children

Kept is not directed to anyone under 18, and Kept does not knowingly collect information from children.

Changes to this policy

Kept may update this policy as the product changes. The date at the top reflects the most recent update.

Contact

Questions about this policy, or requests about your data, can be sent to shanebenso@gmail.com.