Privacy policy
Kept is provided by Mongoose Business LLC (“we” or “us”). This policy covers Kept Capture, Kept Studio and this website.
Kept does not sell your information or use it to target advertising.
1. Kept Capture and iCloud
Kept Capture lets you save text, voice recordings and images you select. It uses the microphone only when you record and Apple’s photo picker only when you choose an image. Saved captures remain in the app on your iPhone until you delete them or remove the app’s data.
Sending captures to Kept Studio is optional and is off when you first install the app. It requires a one-time in-app purchase. If you turn delivery on, or send an individual capture, Kept uses your personal iCloud storage to deliver that capture to a Mac signed in to the same Apple Account. We cannot remotely browse or manage those files. Apple handles iCloud and device backups under Apple’s privacy policy.
Apple processes the purchase. RevenueCat receives an anonymous app identifier and purchase information to validate and restore access; it does not receive the contents of your captures.
Sharing through the iPhone share sheet sends the selected capture to the app or person you choose. Their privacy practices then apply. Kept Capture does not send captures directly to an AI provider or to a server operated by us.
2. Kept Studio
Kept Studio works with a folder you select. Your notes, received captures and related files are stored on your Mac. Kept also keeps settings, conversations and information needed to operate and recover the app in local application storage. If you place your files in a folder synchronized by another service, that service’s practices also apply.
Voice transcription uses Whisper on your Mac. Audio is not sent to a cloud transcription service for this step. The resulting text may be included in a cloud AI request if you have enabled cloud AI and use a feature that requires it.
Protected folders
You can mark folders as protected. Kept excludes their contents from ordinary model access and asks before a model reads within a protected folder. Permission applies only to the access described in the prompt; you can deny it.
Protection applies to the folder path you choose. It does not automatically cover copies or quotations saved elsewhere, information you place directly into a conversation, or information you previously allowed an external provider to receive.
Sponsor messages
Kept Studio may offer an optional sponsor message. Watching it gives Lily a cosmetic for the day and unlocks no other feature. The record of that cosmetic is kept on your Mac.
The sponsor message is included with the app. Kept does not choose it using your notes, captures, conversations or other information about you, and does not send the sponsor information about you. If you open the sponsor’s link, it opens in your browser and the sponsor’s privacy practices apply.
To measure sponsor messages, Kept sends RevenueCat an anonymous app identifier and a record of each message: when it was loaded, shown or opened, where it appeared and the value we assign to it. RevenueCat also receives ordinary connection information such as your IP address. This record does not include the contents of your notes, captures or conversations and is not linked to your name or Apple Account.
3. Cloud AI and external services
Cloud AI is optional. Kept explains that information may leave your Mac and asks for permission before cloud AI is enabled. You select and connect the provider used by the app.
Depending on what you ask Kept to do, a request may contain your message, an attached image, relevant conversation history, a voice transcript, file content or the result of an app tool. Turning cloud AI off stops future provider requests but cannot recall a request already sent.
Kept currently supports Anthropic, OpenAI, Google and OpenRouter. OpenRouter may pass a request to the model provider you select. Optional web search and research features use Tavily.
External services process requests under their own terms, privacy policies and account settings. Their retention practices may differ, including when you use your own API key. We require services receiving user information through Kept to provide the same or equivalent protection required by this policy, applicable law and Apple’s rules.
Provider credentials saved in Kept are protected using macOS Keychain. This does not mean that a provider cannot read a request sent to it.
4. Retention, deletion and your choices
- On iPhone: captures remain until you delete them or remove the app’s local data. Archiving a capture is not deletion.
- During Mac delivery: an iCloud delivery copy remains until the Mac receives and acknowledges it. Copies already delivered to the Mac are separate from the capture on your phone.
- On Mac: your files and local app information remain until you remove them. Deleting the app does not automatically delete the folder you selected for your files.
- External services: information already sent to Apple, an AI provider, a web service or another destination is retained according to that service’s settings and privacy policy. Apple and RevenueCat also retain purchase records, and RevenueCat retains sponsor message records, under their own policies.
You can disable microphone access in Apple’s settings, turn off future Mac delivery, turn off cloud AI, deny access to a protected folder, decline sponsor messages and delete local captures or files. These actions do not erase copies that have already been sent somewhere else.
We cannot remotely erase information from your devices, personal iCloud storage or provider accounts. For help understanding where a copy may remain, contact us below.
5. Website and email
This website is hosted by Netlify and loads a font from Google Fonts. Those services receive ordinary connection information such as your IP address, browser information and the page requested. We do not use this information for targeted advertising. See Netlify’s privacy policy and Google’s privacy policy.
If you join the mailing list, we and our service providers receive your email address and any optional survey answers. If you email us, we and our email providers receive your message and attachments. We use this information to send requested updates and respond to you. You can unsubscribe from marketing email at any time.
Correspondence is retained for as long as needed to respond, maintain appropriate business records and meet legal obligations. You may ask us to access, correct or delete personal information we control, subject to applicable law.
6. Contact
For privacy questions or requests, contact Mongoose Business LLC at:
Material changes will be posted on this page.
Effective