Privacy Policy

01The short version

Kept is operated by Overweight Holdings LLC, which is responsible for the personal data described here.

Kept holds a private record. What you write stays yours: it is never sold, never used to train advertising, never shown to another person, and never shared between accounts. There are no social features, so there is nothing to leak.

02What we collect

Only what the service needs to work:

• Account details — your email address, an optional first and last name, and a cryptographic hash of your password. We never store the password itself.
• What you record — the habits you create, the days you mark or skip, your to-do items, and your reflections, including moods, gratitude entries, and notes.
• Technical basics — a signed session cookie that keeps you logged in, and ordinary server logs kept by our hosting provider, which may include IP address and browser type.

03What we do not collect

• No third-party analytics, advertising pixels, or cross-site trackers.
• No contacts, location, camera, microphone, or health-app data.
• No payment details — the service does not currently take payments.

04How we use it

Your account details identify you and keep your session signed in. What you record is used to show you your own record: streaks, calendars, patterns, and the weekly letter. Technical logs are used to keep the service running and to investigate faults and abuse.

We do not use your entries to profile you, and we do not use them to train machine-learning models.

05Who else touches your data

Kept runs on a small number of infrastructure providers, which process data only to host the service on our behalf:

• Neon — managed Postgres hosting, where your account and entries are stored.
• Vercel — application hosting and delivery, which handles requests and keeps short-lived operational logs.

06Legal disclosure

We will disclose data if we are legally required to — for example, in response to a valid court order — and only as far as the law requires. Where we are permitted to tell you first, we will.

07Cookies

One cookie, and it is a signed session cookie that keeps you logged in. It is not used for advertising or measurement. Clearing it signs you out.

08Keeping and deleting your data

Your entries are kept for as long as your account exists, because a record that quietly forgets is not a record. You can delete individual habits, tasks, and reflections at any time from within the app.

To close your account and have its data deleted, write to faithfully@overweightholdings.com. We will delete your account and its entries within 30 days, except where we are required to keep something by law. Backups roll off on their own schedule, generally within 90 days.

09Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to complain to a data-protection authority. Write to faithfully@overweightholdings.com and we will act on your request within the time the law allows. We do not sell personal information, and we do not charge you for exercising these rights.

10Security

Traffic is encrypted in transit, passwords are stored only as hashes, and every database query is scoped to the account that owns the row. No system is perfectly secure, but the surface here is small by design.

11Where your data lives

Our providers host data in the United States. If you use Kept from elsewhere, your data is transferred there and handled under this policy.

12Children

Kept is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has created an account, write to us and we will remove it.

13Changes

If this policy changes in a way that materially affects you, we will update the date above and tell you in the app before the change takes effect.

14Contact

Questions about this policy, or about your data, go to faithfully@overweightholdings.com.