Privacy Policy

GRANIT LABS, LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our keepm app ("the Service"). We do not sell your personal information without explicit consent.

We collect the following types of information:

• •Receipt Data: Images of receipts, extracted text, merchant information, purchase dates, prices, and itemized lists
• •Account Information: Email address, authentication data, and account preferences
• •Financial Account Data: Only minimal metadata necessary to connect to Plaid and identify your accounts (such as account names, types, and masked account numbers). Transaction history, balances, and merchant information are retrieved from linked financial institutions via Plaid but stored locally on your device only - we DO NOT store any transaction amounts, balances, or sensitive financial data on our servers.
• •Usage Data: App interactions, error logs

• •Core Services: Process receipts, provide spending analytics, manage your account, and link transactions to receipts
• •Financial Services: Retrieve account balances and transactions from your linked banks via Plaid to provide budgeting and expense tracking features
• •Service Improvement: Enhance OCR accuracy, app functionality, and user experience
• •Communication: Send essential updates, security alerts, and account notifications
• •Support: Provide customer support and respond to your inquiries
• •Legal Compliance: Comply with legal obligations and enforce our Terms of Service

We implement industry-standard security measures:

• •Encryption: All data is encrypted in transit using TLS and at rest using AES-256
• •Financial Data Protection: Your financial data from Plaid is stored locally on your device only and never transmitted to our servers. We only store minimal metadata necessary to connect to Plaid and allow you to identify your accounts (such as account names and types). We do not store any transaction amounts, balances, or other sensitive financial data on our servers.
• •Access Controls: Strict authentication and authorization controls for data access
• •Cloud Security: Data stored in secure cloud infrastructure with regular security audits
• •Monitoring: 24/7 security monitoring and intrusion detection

• •Active Accounts: Data retained while your account is active
• •Account Deletion: Data deleted within 30 days of account deletion request
• •Financial Data: Financial data stored locally on your device is deleted when you unlink accounts or delete the app
• •Backups: Backup data retained for up to 90 days
• •Legal Requirements: Data retained as required by applicable laws

You have the right to:

• •Access: View and export your personal data
• •Correction: Update or correct your personal information
• •Deletion: Request deletion of your account and data
• •Account Management: Unlink financial accounts at any time, which will stop data collection from those accounts
• •Restriction: Limit the processing of your data
• •Portability: Receive your data in a structured, common format

The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

We use the following third-party services:

• •Firebase: Authentication, data storage, and analytics
• •Plaid: Secure connection to your financial institutions to retrieve account balances and transaction data. Plaid is a regulated financial technology company that provides secure bank connectivity.
• •OpenAI: Receipt text processing and analysis
• •Apple Services: Sign in with Apple, App Store, and payment processing

Each third-party service has its own privacy policy and data handling practices. We encourage you to review their privacy policies.

We may update this Privacy Policy periodically. We will notify you of material changes through the app or via email. Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.