What happens to your mail.
Who we are
Keep or Shred is made by Red Mountain Blue Valley Origami, LLC, a California company. Questions about this policy go to hello@keeporshred.com. This policy covers the Keep or Shred app on iPhone and Android, including test versions, and the website at keeporshred.com.
What the app collects, and where it lives
| Data | Where it is kept | Why |
|---|---|---|
| Photos of your mail | Your phone only | They are your copy of the paper you shred. |
| What the app read: sender, summary, amounts, dates, actions, the keep-or-shred verdict | Your phone only | The catalog, the checklist and the Due screen. |
| Your notes, dates you set, reminders | Your phone only | Reminders are scheduled by your phone; nothing is sent to us. |
| Your settings, and your own AI key if you enter one | Your phone only; the key in the phone's secure store | The key never leaves the device except to call the provider you chose. |
| An anonymous device id and a count of reads | Our reading service | To keep each phone inside a fair-use allowance. The id is random; it does not identify you. |
Nothing else. The app has no accounts, no sign-in, no analytics, no advertising and no tracking. We do not know who you are, and we never see your mail.
Reading a piece of mail
Reading is the one moment data leaves your phone, and it happens only after you have agreed to it inside the app. You are asked once, in plain words, before the first read; you can withdraw that permission in Settings at any time.
When you read a piece, the app sends its pages to our reading service. The service forwards them to the AI provider, returns the reading to your phone, and then discards the pages and the reading. The service writes nothing about your mail to disk: no images, no text, no names. Its only record is one log line per read holding the time, the page count, token counts, the cost, and the anonymous device id.
The AI provider is Anthropic. Pages are processed under Anthropic's commercial terms, which do not allow them to be used to train models. Their handling of API data, including any short-term retention for safety purposes, is governed by Anthropic's commercial terms and privacy policy.
If you prefer, you can connect your own Anthropic key in Settings. The app then talks to Anthropic directly and our reading service is never involved.
Permissions the app asks for
- Camera, to photograph mail. Photos are saved inside the app, not to your camera roll.
- Photos, only if you choose "Choose from photos" to add mail you photographed earlier, or a screenshot. The app reads the images you pick and nothing else.
- Notifications, only if you set a reminder. Reminders are scheduled on the phone itself; the notification never carries an account number or an amount.
Your control
- Delete a piece from its page. Its photos, reading, notes and reminders go with it.
- Erase everything in Settings, two taps.
- Save a copy of everything in Settings: a zip of your catalog and photos, handed to your phone's share sheet. Where it goes from there is your choice, not ours.
- Delete the app, and everything is gone. We hold nothing to delete on our side except the anonymous read count, which expires on its own.
Test versions
Before the app is in the stores, testers run it inside Expo Go, and the app itself is delivered from Expo's servers. Expo sees the ordinary server logs of that download, such as an IP address, the way any download works. Expo never receives your photos or readings; those follow the same path described above.
Children
Keep or Shred is not directed at children under 13 and does not knowingly collect information from them.
Changes
If this policy changes, the new version is posted at this address with a new effective date. A change that would send more of your data anywhere will be asked for inside the app, the same way the first read is, before it happens.