Privacy policy
Effective 21 September 2026. This policy is written to be read. Where the law needs a longer sentence, the plain one still applies.
Who we are
Keepwatch is operated by [Operator legal name], [address], Tashkent, Uzbekistan (“we”). For anything about your data, write to support@keepwatch.online.
What we collect, and why
| Data | Why | Kept |
|---|---|---|
| Recordings (video and audio from both cameras) and the one-second fragments they are made of | This is the product: keeping your footage safe and sharing it with the people you chose. | Until you delete your account (7-day hold). Without an account: 7 days. |
| Location while a recording is running, and the address it resolves to | Burned into the footage and sent to your people in an alert so they know where you are. | With the recording. |
| Your email address, display name, and password (hashed by Firebase Authentication) | To sign you in, to ask you “Are you OK?”, and to send you copies of alerts. | Until you delete your account. |
| Names, email addresses and phone numbers of the people you add | To ask them once whether they agree to be contacted, and to alert them. | Until you remove them or delete your account. They can block further messages at any time. |
| Your message to your people, your alert timings | Sent with the alert; controls when it is sent. | Until you change or delete them. |
| Device model, iOS version, battery level and a heartbeat while recording | To notice when the phone has gone silent, and to pick a video quality the connection can carry. | With the recording. |
| Diagnostics you choose to attach to a support request | To fix what went wrong. Never includes footage or your people’s details. | With the support request. |
We do not collect your contacts list, your photos, your browsing, advertising identifiers, or anything while you are not recording.
Where it lives
Data is stored with Google Cloud (Firebase) in the United States (us-central1). Emails are sent through Resend; SMS, when enabled, through Twilio. These providers process data only to deliver the service and under their own data-processing terms. No data is sold, and no data is used for advertising by us or by them on our behalf.
Who can see a recording
You, in the app. The people you chose, through a link Keepwatch sends them in an alert; links expire after 90 days and anyone with the link can open it, so keep it as private as the footage. Nobody at Keepwatch watches recordings; staff access is limited to what is needed to run the service and is logged.
Your choices and rights
- Delete: Menu → Settings → Delete account removes your account, recordings, people and settings after a 7-day hold. You can cancel during the hold.
- Access and correction: everything we hold about you is visible and editable in the app; for a copy in another form, email us.
- Your people: anyone you add can decline or block with one click in the confirmation email; we then never contact them again on your behalf.
- If you are in the EU, UK or a jurisdiction with similar rights, you also have the right to object, to restrict processing, and to complain to your supervisory authority. Our legal basis is the contract with you (providing the service) and, for alerts to your people, your explicit instruction.
Children
Keepwatch is not directed at children under 16 and we do not knowingly collect their data.
Security
All transfer is over HTTPS. Each fragment is fingerprinted (SHA-256) on the phone and checked on the server; a mismatch is recorded, never hidden. Access to stored data is restricted by Firebase security rules and server-side checks.
Changes
If this policy changes in a way that matters, the app tells you before the change applies. The date at the top is the current version.