Privacy Policy

1. Overview

KeeperCircle ("we," "us") is a private, shared contact manager for households. Privacy is the point of the product. Your household's contact information is yours, it is visible only to the members of your household, and we do not sell it or use it for advertising. This policy explains what we collect, how we use it, and the choices you have. It applies to keepercircle.com and the KeeperCircle application.

2. Information we collect

Account information. When you create an account we collect your email address, name, and authentication data.

Household information you provide. The core of KeeperCircle is information you and your household members choose to store: contact names, organizations, phone numbers, email addresses, and street addresses; categories, roles, and relationships; child/dependent profiles your household creates, which may include medical or allergy notes; private household notes; contact history; events and gift notes; and custom lists. This can include sensitive information, which is why the protections in Sections 4 and 5 exist.

Billing information. If your household subscribes to a paid plan, payment is processed by Stripe. We receive subscription status and limited billing metadata, and we never receive or store your full card number.

Technical information. Like most services, we receive standard technical data such as IP address, browser type, and log data needed to operate and secure the service.

3. How we use information

We use the information above to provide and operate the service; to keep households separate and enforce role-based access; to process subscriptions; to send transactional email such as invitations, security notifications, and billing notices; to provide support when you ask for it; to protect the service against abuse; and to comply with law. We do not use your household's contact data for any other purpose.

4. What we never do with your household's contact data

We do not sell contact data. We do not rent it, trade it, or share it with data brokers. We do not use the contents of your household's records (names, child information, phone numbers, emails, addresses, medical or allergy notes, private notes, contact history, or event and gift notes) for advertising, and we never pass any of it to ad providers. We do not send it to analytics services. We do not use it to train artificial-intelligence models. Our staff do not browse household data; administrative access is limited to specific, intentional support and operations actions, and those actions are audit logged.

5. Sharing within your household, and what stays private

KeeperCircle is built for sharing within a household, controlled by roles. Members of your household can see household contacts according to their role. When a member is removed from a household, their access ends. When you share a contact outside the app (for example, sending a contact's details to someone), private household notes and contact history are excluded by default. Medical and allergy information is treated as sensitive. It appears in emergency-focused output only when you explicitly choose an emergency output that includes it, and it is excluded from normal contact sharing.

6. Service providers

We use a small number of service providers to run KeeperCircle, each limited to what is necessary to provide the service: Supabase (database, authentication, and application infrastructure), Vercel (application hosting), Stripe (payment processing), Google (analytics as described in Section 9, advertising on the free plan as described in Section 8, and optional Google Contacts import as described in Section 7), and Postmark (transactional email) for account and service email. These providers process data on our behalf under their own security and privacy obligations. We may also disclose information if required by law, to protect the rights and safety of users or the public, or as part of a corporate transaction, in which case this policy's commitments would continue to apply to your data.

7. Google Contacts import

You can optionally connect your Google account to import contacts into your household. If you do, KeeperCircle requests read-only access to your Google contacts and uses that access for one purpose: to show you your Google contacts so you can review and selectively import the ones you choose. Contacts you do not select are not stored. You can disconnect Google access at any time from your Google account settings. KeeperCircle's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we do not use Google user data for advertising, we do not transfer it except as necessary to provide the import feature you requested, we do not allow humans to read it except with your permission or as required for security or legal compliance, and we do not use it to train AI or machine-learning models.

8. Advertising on the free plan

KeeperCircle's free plan is supported by advertising served by Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet. You may opt out of personalized advertising by visiting Google Ads Settings, or opt out of some third-party vendors' use of cookies for personalized advertising by visiting www.aboutads.info.

Two commitments limit advertising in KeeperCircle. First, ads never receive your household's data. We do not pass contact names, child information, phone numbers, emails, addresses, notes, medical or allergy information, or any other household record content to any ad provider. Second, ads are excluded from sensitive areas. No advertising, and no ad code at all, appears on pages that display sensitive household data, emergency contact views or printable emergency output, billing screens, login, signup, and password reset flows, account deletion, export, and privacy flows, or support messaging. Paid households see no ads anywhere.

9. Analytics

We use Google Analytics 4 to understand product usage in aggregate. Analytics receives event names, counts, plan tier, and similar non-sensitive metadata only. It never receives the contents of your household's records. No contact names, child names, phone numbers, emails, addresses, notes, or medical information are ever sent to analytics.

10. Cookies

We use cookies and similar technologies that are necessary to sign you in and keep the service secure, analytics cookies as described in Section 9, and, on free-plan and public pages only, advertising cookies as described in Section 8.

We also use a small number of first-party functional cookies that remember your interface preferences. For example, a cookie named kc_contacts_view stores only your chosen contacts layout ("cards" or "list"). Functional cookies of this kind contain no identifier, are not used to track you, and are never shared with anyone.

You can control cookies through your browser settings; blocking necessary cookies may prevent sign-in.

11. Retention, deletion, and restore

Records you delete in the app (such as contacts) enter a 30-day restore window during which a household member can restore them; after the window they are purged. Archiving a record keeps it until you delete it. If you delete your account or household, associated household data is deleted on the same schedule. Certain records may be retained where legally or operationally required, such as billing and subscription records, security and administrative audit logs, and records of privacy requests, and are kept only as long as needed for those purposes.

12. Security

Every household's data is isolated. Access is enforced at the database level so that members can reach only households they belong to, and role permissions are enforced on the server. Data is encrypted in transit. Administrative access to systems that hold household data is restricted, intentional, and audit logged. No service can promise perfect security, but limiting what we collect, who can see it, and what it is ever used for is the foundation of how KeeperCircle is built.

13. Children's privacy

KeeperCircle is a product for adults. Accounts may only be created by people 18 or older, there are no child accounts, and the service is not directed to children. Parents and guardians may choose to store information about their own children in their household's records (for example, a child's school and allergy notes for the emergency sheet), and that information belongs to the household and receives the protections described in this policy. We do not knowingly collect personal information directly from children under 13, and if we learn that a child under 13 has created an account we will delete it. Questions about children's information can be sent to the contact in Section 17.

14. Your choices and rights

You can access and correct your household's information in the app at any time, export your household's contact data, delete individual records, and request deletion of your account. Depending on your state of residence, you may have legal rights to access, correct, delete, or obtain a copy of your personal information, and to non-discrimination for exercising those rights. We honor reasonable access, correction, and deletion requests from our users regardless of whether a particular statute applies. To make a request, contact us as described in Section 17. We will verify the request and respond within the time required by applicable law. We do not sell personal information, so there is nothing to opt out of selling; for advertising cookie choices, see Section 8.

As U.S. state privacy laws phase in universal opt-out mechanisms, KeeperCircle intends to honor Global Privacy Control signals.

15. United States only

KeeperCircle is offered to users in the United States, and your information is stored and processed in the United States. If you access the service from outside the U.S., you understand that your information will be processed in the U.S.

16. Changes to this policy

We may update this policy as the product evolves. If a change is material, especially any change affecting household contact data, we will notify you before it takes effect, and where required we will ask for your consent. The effective date at the top always reflects the current version.

17. Contact

Send privacy questions and requests through our contact page.

KeeperCircle is a trade name of TetraMesa LLC, a Connecticut limited liability company.