For Keeps Privacy Policy

Who handles your data

For Keeps is a Carry One Creations app, operated by KRUZICHI CONSUMER GOODS STORE (DTI registration No. 4302357), doing business as Carry One Creations. In this policy, “we” means the team that runs For Keeps. This policy covers creating on your device, accounts, backup, public sharing and orders.

For privacy or account help, email marwin@craftimar.com or use the Carry One contact page. Carry One’s business contact address is #14 Saint John St., San Jose Village, Cupang, 1771 Muntinlupa City, Metro Manila, Philippines.

Photos and creation on your phone

You can create keepsakes on your device without an account. Camera and photo access let you take or choose photos. Your local album stores those photos, crops, captions, dates and keepsake settings. Creating a keepsake does not by itself upload your album.

You can also use the camera to take a profile photo. Submitting that photo uses the public-sharing review process below. The camera does not record audio.

Device motion makes the preview respond when you tilt your phone. The preview uses motion on your device. Feed interactions may record that you tilted a public post, but do not send raw motion samples.

Backup and order uploads can include original photos and their embedded metadata. Do not assume that location or other details saved inside a photo have been removed.

Sign-in, profile and age checks

Sign-in uses your email address and a one-time email code. Account records can include your account ID, name, username, full birthday, settings, and any phone number or address you add.

Your birthday is private account data and is not shown on your public profile. Account signup is for people aged 13 or older. Viewing the feed and creator profiles, posting publicly, adding a public profile photo, liking, following and cash-out requests are for people aged 18 or older. On supported Apple devices, the device age-range check can also affect access.

Optional private backup and restore

When private backup is available and you turn it on, we use Supabase to store both original photos and keepsake details with your account. These include captions, dates, format, photo order, file-checking codes and any challenge or referral references. New or changed keepsakes can continue to upload while backup is on. Restore downloads saved copies.

Backup storage is private and separate from public posts. Choosing not to enable backup avoids backup uploads. Copies already uploaded are separate; use account deletion or contact us about removing stored copies.

Public profiles, posts and safety checks

Public sharing requires an account and the required username, age and sharing-permission checks. A submission sends copies of your photos, captions, public username and post details for review. Profile photos are reviewed too. Approved content can be viewed and copied by other people. It is separate from your private album.

Before automatic safety checks, we ask for your public-sharing permission. The checks send public photo copies, captions, your public username and submitted profile photos to OpenAI for moderation. They do not use your private backup originals. Human reviewers can also inspect submissions and report evidence. A submission may stay pending, be approved or be rejected. Safety checks can make mistakes.

We store likes, follows, blocked creators, feed choices, reports and sharing-permission records. Reports include the post you report and the reason you choose. A tilt interaction records a post and the type of interaction, not raw motion. The follow list does not use your phone’s address book.

You can report a post, block a creator or withdraw public-sharing permission in the app. Withdrawal hides your public posts and profile photo and stops further OpenAI checks for your account. Review copies, private backups and safety evidence can remain. It cannot recall copies other people saved.

Save, export and share

When you save or share, the app creates a finished image, GIF or video. Save adds a copy to Photos. The system share sheet sends the export to the app you choose. Instagram and Facebook Story sharing can pass the video through your device’s clipboard to open that app’s Story composer. Sharing a link sends a public post or creation link; challenge or referral details may be included. It does not send your original photo files with the link.

On supported iPhones, choosing TikTok Story sharing saves or reuses the finished video in Photos. The app may ask for Photos read and write access, then sends the saved video’s identifier to TikTok. The video can stay in Photos after sharing.

Sharing to another app is separate from posting in the For Keeps feed. The other app’s privacy policy applies to its use of what you send. Account deletion does not remove copies in Photos or other apps.

Orders, checkout and support

Starting an order uploads the selected original photo pair and design details to our order service. Order records can include your name, email, phone, delivery address, recipient choices and instructions. We use them to make and deliver the order and help with problems. Guest order references or access tokens can link records without an account.

Checkout in the app uses Shopify. Payment providers handle payment entry. Our order records include items, amounts, payment method and status, refunds, delivery tracking and support messages. They do not include raw card numbers entered directly with a payment provider.

People and services handling production, delivery and support receive the order details they need. A delivery address is information you enter, not a reading from your device’s GPS.

Referrals, credits and cash-out

If rewards are available, we store referral codes, linked purchases, credits, balances and transaction records. A cash-out request includes the amount, recipient name, phone or payment destination, and request references. We use these records to check and handle rewards and claims.

Preferences, service security and analytics

Account settings include order email or SMS updates, birthday reminders and offers by email or SMS. Offers choices start off. You can change the available choices in your account.

Online services receive your IP address and request details to handle connections. Account security records can include protected versions of IP addresses used to limit email-code abuse and secure sessions. Those records are not anonymous. Service providers may keep request logs and diagnostics.

The app stores the feed interactions described above. Its separate product-analytics client does not currently send events. This does not mean that checkout, sharing apps or other service providers keep no logs.

No tracking and no sale of data

For Keeps does not track you across other companies’ apps or websites, does not use advertising identifiers, and does not include Meta, TikTok or other advertising-tracking tools. We do not sell your personal information or share it with data brokers or for third-party advertising.

Services and data handling

We use Supabase for supported account, backup, storage and social features; OpenAI for the public-content checks you allow; Shopify for checkout and for our order records; and our order and support services. Email, hosting, production and delivery providers help run these features. An external app receives the export you choose to share.

We share personal information with these providers only to run the features described in this policy. We require them to protect it with the same or equal protection described here and required by applicable law. These services may handle data outside the Philippines. Their own privacy terms may also apply, including when you use checkout or share to another app.

Your choices, retention and deletion

You can create as a guest, choose whether to back up or post, change available account choices and manage camera and Photos access in device Settings. Keep another copy of keepsakes you value. Losing app or device data can lose local keepsakes that have no backup.

To delete your account, open For Keeps, tap ACCOUNT, then tap Delete account. Tap Send verification code. We email a fresh six-digit code to confirm it is you; enter it, then tap Continue to deletion. Choose Keep copies on this phone or Delete account photos from this phone, type DELETE, then tap Delete account. Deletion happens right away and removes account access and account media from private backup and public-sharing storage. Some safety evidence and records needed for orders, refunds or unpaid claims can remain. If you can’t use the app, see our account deletion page or email marwin@craftimar.com from the email address on your account; we delete within 30 days of verifying your request.

In the app, you can choose to keep account-owned local keepsakes as guest copies or remove them. An online deletion request cannot erase files from your phone, Photos, other apps or other people’s devices.

We keep retained order, payment, refund and claim records only as long as needed to resolve them and meet legal duties, such as tax and accounting record-keeping. We keep safety and report records, with account references removed where possible, only as long as needed to handle reports, protect people and meet legal duties. We keep safety copies of reported content for up to 90 days, then delete them. Account deletion does not automatically pay or cancel an unpaid claim. Save any deletion support reference so we can find the relevant records. Contact us about data that remains.

Philippine Data Privacy Act

For Keeps is operated by KRUZICHI CONSUMER GOODS STORE (DTI registration No. 4302357), doing business as Carry One Creations, in the Philippines. We process personal information in line with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. Under that law you may have rights to be informed, to access, to object, to correct, to erasure or blocking, to data portability, and to file a complaint, subject to legal limits.

Questions and privacy requests

Email marwin@craftimar.com or use the Carry One contact page to ask about your information, request access or correction, object to its use, withdraw permission, or request deletion. For email deletion requests, we delete within 30 days of verifying your request. We may need to check that the request concerns your own account. Some requests are subject to legal limits. Do not send passwords, email codes or card details.

If you have a privacy complaint, you can also contact the Philippine National Privacy Commission.

Changes to this policy

We will post updates on this page and show the updated date. Please check this policy when you use a new online feature.