KeepWise is owned and operated by keepWise LLC, a company registered in the United States (“KeepWise”, “we”, “us”). Contact: support@mykeepwise.com.
This summary is for convenience. The full policy below governs.
This Privacy Policy explains how information is handled when you use KeepWise, including the website at mykeepwise.com, the installable web app and the Android app (together, the "Service"). In this policy, "KeepWise", "we", "us" and "our" refer to the operator of the Service, and "you" refers to any person who uses it.
This policy should be read together with our Terms of Use.
The Service has two separate parts.
Depending on the features you use, the following information may be stored on your device only:
KeepWise writes each monthly statement on your device from the numbers already in your plan. Statements are not sent to us. If you choose to save a statement as a PDF or as a file, the file is created by your device and saved wherever you choose. We never receive a copy.
You can download a backup file from the menu, under Your data & backups. The file contains all of the information listed in this section and is created on your device. It is not sent to us. Anyone who has the file can read the information in it, so keep it somewhere safe and do not share it with people you do not trust. If you restore a backup, the information on your device is replaced with the contents of the file.
On iPhone, the KeepWise you add to your Home Screen keeps its information separately from your browser. To carry your information across, you can tap Copy my data in the browser and Paste my data in the Home Screen app. This places a copy of your KeepWise information on your phone's clipboard. Nothing is sent to us. The clipboard belongs to your phone, so anything you paste it into can read it. Paste it only into KeepWise, and copy something else afterwards if you want to clear it.
When you add, change, delete or settle a split, KeepWise can write a short message for the people in it, such as their share of the bill. The message is written on your device. KeepWise does not send it. You choose whether to send it, and you send it yourself from an app on your phone, such as your messaging app. KeepWise does not see who you send it to or whether you sent it.
The "Share what you found" feature creates an image on your device showing a single monthly amount, such as the money you saved by dropping subscriptions. It does not include your name, your income or the list of what you pay for. The image is shared only if you choose to share or save it, and only with the app or person you select.
This information remains on your device until you delete it. You can delete it at any time by selecting "Start empty" in the menu, under Your data & backups, by clearing the website data for KeepWise in your browser settings, or by uninstalling the app. Deleting your account does not delete this information, and deleting this information does not delete your account.
If you turn on the app lock, KeepWise stores a protected, one-way form of your passcode on your device so it can check what you type. The passcode itself is never stored and never sent to us, and we cannot recover it. If you forget it and you are signed in to a KeepWise account on that device, you can sign in to that account again to remove the old passcode and set a new one. This check only confirms it is you. It does not upload your money information. To make this possible, KeepWise keeps the identifier and email address of the signed-in account on your device, and removes them when you sign out. Without an account, a forgotten passcode can only be cleared by erasing KeepWise on that device. If you also turn on Face ID or fingerprint unlock, the check is carried out by your phone. KeepWise never receives your face or fingerprint data, only whether the check passed. The app lock controls who can open KeepWise on your device. It does not encrypt the information stored there.
If you log spending in a currency other than your own, your device asks a public exchange rate service for that day's rates so the amount can be converted. The request contains the currency and nothing about you or what you spent. As with any request over the internet, the service can see your IP address. The services used are the open currency data published through the jsDelivr content delivery network and, if that cannot be reached, open.er-api.com. Rates are indicative and may differ from the rate your bank applied.
Where your browser offers it, you can speak instead of typing. Your browser or phone turns the speech into text using its own speech service, which may process the audio on the provider's servers under that provider's terms. KeepWise receives only the resulting words, does not record or keep audio, and reads the words on your device.
When you import a bank statement as a CSV file, a PDF, a scanned PDF or a photo, the file is opened and read on your device. The file is not uploaded to us or to any other party. KeepWise extracts the transactions needed to identify your income, recurring payments, subscriptions and spending categories, and saves the results of that analysis on your device. The original file is not retained by the Service.
Before anything is added, KeepWise shows you each transaction as your bank wrote it, with its date and amount, and where it has been placed. Only the lines you tick are added to your plan, and only when you choose to add them. If you type the name your bank uses for you, so that transfers between your own accounts can be set apart, that name is used on your device for that purpose only and is not sent to us.
If your bank has protected the PDF with a password, KeepWise asks you for it. The password is used once on your device to open the file. It is not saved and it is not sent to us or to anyone else.
To read PDF files, your device downloads a standard open source PDF reading library, pdf.js, from the cdnjs content delivery network the first time you import a PDF. Only the library is downloaded. The contents of your statement are never sent to cdnjs or to any other party.
A scanned statement or a photo is a picture, so the words in it have to be read from the image. To do this, your device downloads a standard open source text recognition library, Tesseract, from the jsDelivr content delivery network the first time you import a scan or a photo. Only the library is downloaded. The reading happens on your device, and the picture and its contents are never sent to jsDelivr, to us or to any other party. KeepWise does not keep the picture.
An account is optional. If you create one, we collect the following information:
| Information | Required or optional | Why we use it |
|---|---|---|
| Email address | Required | To create your account, let you sign in, verify that the address belongs to you, reset your password and send you service messages |
| Password | Required for email sign-in | To let you sign in. Your password is handled by Google Firebase Authentication. We never see or store it. |
| Full name | Required | To show on your profile and to people you split costs with |
| Date of birth | Required | To confirm that you are 18 or older and, if you have opted in to marketing, to send you a birthday offer |
| Phone number | Optional | To let people who already have your number find you for shared costs, when that feature is available. We do not verify phone numbers at this time. |
| City | Optional | To choose offers that are available where you live |
| Approximate location | Optional | To find offers near you on your birthday, if you have opted in to marketing. Collected only when you tap "Use my approximate location", and rounded to about one kilometre before it is saved. We do not store your precise location and do not track your location over time. |
| Profile photo | Optional | To show on your profile. Photos you add are reduced to a small image before they are saved. |
| Marketing preference | Optional, off unless you choose it | To record whether you want offers, birthday deals and news by email, and when you made that choice |
| KeepWise Plus interest | Optional | To email you when KeepWise Plus is available, if you join the Plus waitlist. You can leave the waitlist at any time in the Account screen. |
| Account records | Created automatically | The date your account was created and last updated, the sign-in method you used, whether your email is verified, and the date and version of the Terms of Use and Privacy Policy you accepted |
If you sign in with Google, Google shares your name, email address and profile photo with us, and confirms that your email address is verified. We do not receive your Google password or access to any other Google data.
We use account information only to:
We do not sell or rent account information, we do not share it with advertisers, and we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
We send marketing emails only to people who have ticked the box to receive them. The box is never ticked in advance. You can change your choice at any time in your profile, and every marketing email includes a link to unsubscribe. Any birthday offer is only sent to people who have opted in to marketing. Offers may come from third-party businesses, but we do not give those businesses your personal information.
You can choose to let KeepWise search your contacts, so that you can find friends quickly when you add people to a split. Depending on your device, you either allow the Android app to read your contacts, choose contacts in your phone's contact picker, or select a contacts file (vCard). KeepWise asks before it reads anything.
KeepWise keeps only the name, phone numbers and email addresses of each contact, and keeps them on your device only, in the same storage as your other KeepWise information. They are used only to show matches when you search for people in a split. Your contacts are never uploaded to us or to anyone else, and they are not part of your account. A contact is added to your People list only when you add that person to a split. You can remove all contacts from KeepWise at any time by tapping Remove next to your contacts on the Split tab, or by withdrawing the contacts permission in your phone's settings.
Groups you save, such as a group of friends you split with often, are also stored only on your device.
In the Android app you can turn on reminders about your subscriptions. In the 10 days before your payday, or before a new month if you have not set a payday, KeepWise can show one notification a day that asks how much you use a subscription, with buttons to answer. The reminders stop for that month when you answer one or open the Subs tab, and they become less frequent if you do not respond.
With reminders on, KeepWise can also ask about a subscription about a week before its own renewal date, and can remind you once, the morning after your pay or other income was due, if you have not logged it. On every device, the Month tab may ask whether money that was due has arrived. If you give a bill a due day, KeepWise can remind you the day before it is due and ask once, from the day after, whether you paid it, and it does not ask again until the next due day. Things you pay once a year, such as yearly giving or a card's yearly fee, are handled the same way around their date each year. Your answers are stored on your device only.
Reminders are off until you turn them on, and your phone asks for your permission first. They are scheduled by the app on your device, using the subscriptions you entered. No push notification service, server or device identifier is used to deliver them, and we do not learn whether you received, opened or answered one. You can turn reminders off at any time in Settings or in your phone's settings.
You can protect KeepWise with a passcode. Only a salted, slow hash of the passcode is kept, on your device and apart from your other information; the passcode itself is never stored or sent anywhere. If you turn on fingerprint or face unlock, the check is done entirely by your phone (Android's own biometric prompt, or Face ID and Touch ID on Apple devices). KeepWise never receives, stores or sends your fingerprint, your face or any biometric data. It only learns whether the check passed. If you forget your passcode, you can set a new one by signing in to your KeepWise account with its password, if you have one, or erase KeepWise on that device and restore a backup.
The Android app asks Android for these permissions, and each is used only as described in this policy:
The Android app does not ask for your location, camera, microphone, photos, calendar or SMS permissions. A photo of a statement or a receipt is one you choose or take through your phone's own file picker or camera app, and it is read on your device.
In the web app, including on iPhone after you add KeepWise to your Home Screen, you can turn on notifications in Settings. KeepWise then sends you one short nudge two days before your payday, or before a new month if you have not set a payday. The nudge is the same for everyone and says nothing about your money.
To deliver it, your device works out the dates of your next few nudges and sends only those dates, your time zone and a push address created by your browser to our database, run by Google Firebase. Firebase Cloud Messaging delivers the nudge. No names, amounts, bills, subscriptions or account details are sent. The dates are updated when you open the app and your pay schedule has changed.
Notifications are off until you turn them on, and your browser or phone asks for your permission first. When you turn them off in Settings, the push address and dates are deleted. If your browser stops accepting notifications, we delete them the next time a nudge fails to arrive.
Earlier versions of KeepWise let you connect a US bank through SimpleFIN Bridge, a service run by SimpleFIN that you signed up for and paid directly. KeepWise no longer offers new SimpleFIN links. If you made one, it keeps working until you disconnect it. Your device exchanged the setup token with SimpleFIN for an access link and stores that link only on your device, under a separate key that is never included in backups or in "Copy my data". Your device then asks SimpleFIN for your accounts, balances and the last 90 days of transactions, directly, with no KeepWise server in between. KeepWise never receives your bank data, your bank sign-in or the access link. Account names and balances are kept with the rest of your data on your device; transactions are read only when you review an account, and you choose which of them to add. Disconnecting removes the access link from your device; to end the connection completely, also remove KeepWise in your SimpleFIN account.
If you use KeepWise Plus, you can connect a US bank through Plaid Inc., included in Plus at no extra cost. You sign in to your bank inside Plaid's own window, which KeepWise cannot see; your bank sign-in goes only to Plaid and your bank. Plaid then sends your account names, the last four digits of each account number, balances and up to 90 days of transactions. Plaid handles your information under the Plaid End User Privacy Policy.
These requests pass through the KeepWise server, a small program run for us by Cloudflare, because Plaid requires a server to hold KeepWise's Plaid keys. The server keeps no database and does not log what passes through it. The access token Plaid issues for your bank is sealed by the server with encryption only it can undo, and only the sealed version is given to your device, which sends it back each time you refresh. Your transactions, accounts and the sealed token are stored only on your device, under a separate key that is never included in backups or in "Copy my data", and only the last 90 days of transactions are kept. Transactions are read into KeepWise only when you review an account, and you choose which to add. Disconnecting asks Plaid to end the connection and removes everything about it from your device.
If you use the Business space in KeepWise Plus, you can connect your own Stripe, PayPal, Shopify or Square account so your sales come in by themselves. For Stripe you create a restricted key that can only read; for PayPal you create your own app and copy its Client ID and Secret; for Shopify you create a store app that can only read orders; for Square you copy your access token. These keys are stored only on your device, under a separate key that is never included in backups. Each sync sends the key and the dates to read through the KeepWise server to that service, and hands the answer straight back; the server does not store or log the keys or your sales. KeepWise only reads: it cannot charge, refund or move money. From each sale KeepWise keeps the date, the description or the payer's name, the amount and the fee, as business entries on your device. Disconnecting removes the key from your device; to end access completely, also delete the key or app in your Stripe or PayPal account.
If you use KeepWise Plus and are signed in, KeepWise emails the people in a split their part of it when you add, change, delete or settle a split, and, in the first week of each month, emails you (only you, at your account email) a summary of who owes whom. Only people you have saved an email address for are emailed, and you can turn automatic emails off at any time on the Tell them card, or send them yourself with a tap. For each person emailed, the KeepWise server passes their first name, the email address you saved for them, the split's title and the short message shown on your screen to Resend, the service that delivers the email. The email comes from splits@notify.mykeepwise.com, shows your first name, and replies go to your account's email address. KeepWise does not keep these addresses or messages on its server and sends the people in your splits nothing else. Anyone who doesn't want these emails can reply and ask you to remove their address. The email addresses you save for people stay with your other data on your device.
If you add a client's email address to an invoice and are signed in to KeepWise Plus, you can have KeepWise email them the invoice. If it becomes late, KeepWise sends the client a polite reminder 3 days and again 10 days after the due date, unless you turn reminders off. For each email, the KeepWise server passes the client's name and email address, your business name, the message, the invoice picture and your account email (for replies) to Resend, which delivers it from invoices@notify.mykeepwise.com. Nothing is kept on the KeepWise server. Before adding a client's email, make sure they expect invoices from you.
On the website, Plus is sold by Paddle.com, our reseller and merchant of record. You enter your payment details in Paddle's checkout, not in KeepWise, and we never receive your card number. Paddle shares with us the email address you paid with, your country, the plan, and whether the subscription is active, in its free trial, or cancelled. When you are signed in, our server (run on Cloudflare) sends Paddle the verified email address of your KeepWise account to check whether your Plus is active, and tells the app only yes or no and, during a free trial, the date it ends. We keep no copy of your payment history; Paddle keeps your receipts and invoices under its own privacy policy.
So that a bank connection never stays open after your Plus ends, our server keeps, next to the email address of your KeepWise account, the encrypted key for each bank you connect. This key can only be read by our server, and it holds no balances, transactions or account numbers. When Paddle tells us your subscription was cancelled or paused, or our daily check finds Plus no longer active, the server closes those connections at Plaid and deletes the entry. Disconnecting a bank in the app deletes its key straight away.
If you publish a business page at yourname.mykeepwise.com, the details you choose to show (your business name, logo, a short description, contact details and payment links) are stored in Cloud Firestore and are public: anyone with the address can see them. Nothing else from your Business space is published. You can change or remove the page at any time from the app; removing it deletes it from our server.
In the Business space you can ask KeepWise to find your logo on your website. Only the website address you entered is sent to the KeepWise server, which opens that site's home page, finds its icon or share image and hands the picture back to your device. Nothing is kept on the server. The logo is then stored with your business profile on your device. If you add a PayPal.me, Venmo or Cash App username, your invoices carry a payment link to that service; your clients open it on that service's own website.
KeepWise Plus compares what you pay for with a list of current plans and prices that we collect from each company’s own public website. The list is part of the app. The matching happens on your device, and nothing about your subscriptions, bills or spending is sent to us or to those companies. Opening an official page from a suggestion takes you to that company’s website, which has its own privacy policy. We are not paid by these companies and the suggestions contain no affiliate links.
If you have an account, your profile page shows the browser and device you are using now and when you last signed in, read from your account on your device. We do not keep a list of your devices. Choosing Change password sends a reset link to your email through Google Firebase.
When you plan a trip or an event you can add where it is. If you type at least three letters in that box, the words you type are sent to Photon, a free map search run by komoot that uses OpenStreetMap data, so it can suggest matching places. Nothing else is sent: not your name, your amounts, your dates or anything else in KeepWise. If you pick a suggestion, its name and map position are saved with the trip on your device. You can also leave the box empty, or keep the words you typed without picking a suggestion. Tapping a saved place opens it on the OpenStreetMap website.
We use the following service providers. When your device connects to them, they receive standard technical data that any website receives, such as your IP address, browser type, device type and the time of the request. Each provider handles that data under its own privacy policy.
| Provider | Purpose | What it receives |
|---|---|---|
| Google LLC (Firebase Authentication and Cloud Firestore) | Account sign-in and storage of account information, acting as our processor | The account information described in section 5, if you create an account |
| Google LLC (Firebase Cloud Messaging) | Delivers web app notifications, only if you turn them on, acting as our processor | A push address created by your browser, your nudge dates and time zone |
| GitHub, Inc. (GitHub Actions) | Runs the daily job that sends web app notifications | Reads the push addresses, nudge dates and time zones to send that day's nudges |
| SimpleFIN (SimpleFIN Bridge) | Keeps a bank link made in an earlier version working, until you disconnect it; new links are no longer offered | The setup token you paste, then requests from your device for your accounts, balances and transactions, plus technical data |
| Cloudflare, Inc. (Cloudflare Workers) | Runs the KeepWise server that passes KeepWise Plus bank and sales requests to Plaid, Stripe and PayPal, acting as our processor | Those requests and answers while they pass through, plus technical data. Nothing is stored or logged by KeepWise. |
| Paddle.com Market Ltd and its affiliates | Sells KeepWise Plus on the website as reseller and merchant of record, handles payment, taxes, receipts, cancellations and refunds | What you enter in Paddle's checkout (name, email, payment details, country, postcode where required), and, to confirm your Plus, the verified email address of your KeepWise account |
| Plaid Inc. | Connects your US bank in KeepWise Plus, only if you choose to | Your bank sign-in (entered in Plaid's window, not KeepWise), then your accounts, balances and transactions from your bank |
| Stripe, PayPal, Shopify and Square (Block, Inc.) | Your own payment accounts, read for live sales in KeepWise Plus, only if you connect them | The read-only key you created and the dates to read; they send back your sales |
| Resend | Delivers split emails in KeepWise Plus, only when you tap to send them, acting as our processor | For each person you send to: their first name and email address, the split's title and message, your first name and your account email for replies |
| komoot GmbH (Photon map search) | Suggests places when you type where a trip or an event is | The words typed in that box, only once three or more letters are typed, plus technical data |
| OpenStreetMap Foundation | Shows a saved place on a map, only when you tap it | The map position of that place, plus technical data |
| GitHub, Inc. (GitHub Pages and Releases) | Hosts the website and a test download of the Android app | Technical data when you open the website or download the app |
| Google LLC (Google Play) and Apple Inc. (App Store, if KeepWise is offered there) | Distribute the KeepWise app and, when KeepWise Plus is sold in the app, handle the payment | What you share with the store under its own terms when you install or buy. We receive anonymous, aggregated statistics and, for a purchase, an order record without your card details |
| jsDelivr | Delivers the Firebase sign-in library and the Tesseract text recognition library | Technical data when you open the Account screen, when you are signed in, or when you import a scanned statement or a photo |
| Google LLC (Google Fonts) | Delivers the typefaces used by the Service | Technical data when the app loads fonts |
| Cloudflare, Inc. (cdnjs) | Delivers the pdf.js library | Technical data, only when you import a PDF statement |
| Subscription providers, such as Netflix, Spotify or Apple | Opens the provider's own help page about cancelling | Technical data, only when you tap a "How to cancel" link. The provider does not learn that you came from KeepWise beyond what any website link reveals |
| Google LLC (Google Search) | Opens a web search for how to cancel a subscription when we do not have a link to the provider's own help page | The subscription name as the search term, only when you tap "Find how to cancel" |
We may also disclose information if required to do so by law, or to protect the rights, safety or property of our users or others.
We do not collect, receive or store:
The Service does not display advertising.
KeepWise does not use cookies for tracking or advertising. It uses your browser's local storage and an offline cache to save your information on your device and to allow the app to work without a connection. If you sign in, the Firebase sign-in library stores a sign-in token on your device so that you stay signed in. This storage is strictly necessary to provide the features you request.
If you are in the United Kingdom, the European Economic Area or Switzerland, we rely on the following legal bases:
Financial information processed only on your device is not received by us, and we do not act as a controller of it.
We keep your account information for as long as your account exists. When you delete your account in the app, your profile is erased immediately from our active systems. Our service provider may retain residual copies in secure backups for a limited period before they are overwritten. We may keep limited information for longer where the law requires it.
Depending on where you live, you may also have rights under data protection laws, including the UK GDPR, the EU GDPR and United States state privacy laws such as the California Consumer Privacy Act. These may include the right to access a copy of your personal information, to correct or delete it, to restrict or object to its processing, to data portability, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those laws define those terms. To exercise any of these rights, contact us as described in section 20. We will respond within the time required by law and will not discriminate against you for exercising your rights. You also have the right to lodge a complaint with your local data protection authority.
Account information is transmitted over encrypted connections and stored with Google Firebase. Within the Service, access rules ensure that each profile can be read and changed only by the signed-in owner of that account. Otherwise, access to stored account information is limited to the operator of the Service. Financial information on your device is protected by the security of your device, so we recommend using a screen lock and keeping your device and browser up to date. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Account information is stored on servers operated by Google, which may be located outside the country where you live. Where the law requires it, these transfers are protected by appropriate safeguards, such as the standard contractual clauses approved by the European Commission and the United Kingdom.
The Service is intended for people aged 18 and over. We ask for your date of birth when you create an account and do not allow accounts for anyone under 18. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.
We may introduce further optional features, such as phone number verification, syncing between devices, shared cost splitting with other users or a paid subscription. Before any such feature collects new information, we will update this policy, explain what information is involved and why, and ask for your consent where the law requires it.
We will update this policy whenever a change to the Service affects how information is handled. The effective date at the top of this page shows when it was last changed. If a change is material, we will give notice within the Service or by email before the change takes effect.
For questions about this policy or to exercise your privacy rights, email privacy@mykeepwise.com. For general help, email support@mykeepwise.com, or message us on X at @MyKeepWise or on Instagram at @mykeepwise. Please do not put personal or financial information in a public post. We may need to confirm that a request really comes from you before we act on it. KeepWise will never ask for your password, your passcode or your bank details in a message.