Privacy Policy

1. Data We Collect

Account data

• Email address - for account creation and login.
• Password - hashed by our authentication provider. Never stored in plaintext. EM cannot recover your password.

Encrypted message data

• Your chat content is encrypted on your device before transmission. We store encrypted data that we cannot read without your password - which we do not have.
• Your master encryption key, itself encrypted with your password. We cannot decrypt this.

Voice notes

• If you choose to bring your voice messages in, the audio is encrypted on your device with your own key before it is uploaded, exactly as your messages are. EM cannot listen to your voice notes, and neither can anyone with access to our servers. They are only ever unlocked in your browser, by your key.
• What we can see is the size of each encrypted file and how long the recording runs. We need the first to count your storage, and the second so the player can show a length before it downloads anything. We do not store the original filename, which would carry the date the note was recorded, and each file is saved under a randomly generated name instead.
• Photos and videos are never imported. Even when you upload a WhatsApp export that contains them, EM only ever opens the voice notes inside it. Your pictures are never uploaded, so they never reach us in any form.

Subscription data

• Whether your account is free or premium. No payment details - these are handled entirely by Stripe.

Usage data

• Which features you use and when you open EM - for example that a chat was imported, a note was written, or a memory was shared - recorded against your account so we can understand how EM is used and make it better. This never includes any message content, chat names, journal text, search terms, or dates from your conversations.
• This usage data is deleted with your account, along with everything else.

2. What We Cannot Access

EM is technically incapable of reading your message content. Your messages, journal notes and voice notes are encrypted on your device using AES-256-GCM before they leave your browser, with a key that is locked by your password - a key we do not hold.

The same is true of your voice notes. The audio is encrypted with your key before it is uploaded, so EM cannot listen to a single one of them.

A few details are stored without this encryption, because EM needs them to bring the right memories back on the right day: the date and time each message was sent, the type of each message (text, voice note or media), how many messages a chat holds, whether you marked a chat as in memory of someone, which memories you have marked as loved, the dates and times your journal notes were written and are set to come back, which chat a journal note is linked to, and which kinds of fact cards a chat has. None of these include anything that was written or said.

The names of your chats are encrypted too. EM keeps only a scrambled fingerprint of each name, made with your own key, so it can recognise the same chat when you upload it again, and the fingerprint cannot be turned back into the name. A chat you imported before 22 October 2026 is converted the next time you sign in, in normal use. Copies in our 14-day database backups expire on their normal schedule.

This is not a policy choice that could change with a legal request or a business decision. It is an architectural guarantee. If a government agency, legal process, or attacker gained access to our servers, they would find your messages, journal notes and voice notes only as encrypted data they cannot read.

3. Data Retention

Your encrypted data is retained while your account is active. You may delete your account and all associated data at any time from your Account settings. Deletion is permanent and irreversible - and because your content is encrypted with a key we do not hold, even we cannot recover it after deletion. Deleted data may remain in our database backups for up to 14 days before they are purged, and your messages within them stay encrypted with your key.

4. Third Parties

EM uses the following third-party services:

• Supabase - encrypted data storage and authentication. Supabase stores only encrypted data. Privacy policy
• Stripe - payment processing. Stripe handles all payment data. EM never sees your card details - only your subscription status. Privacy policy
• Google Analytics - usage analytics. We collect page views, navigation patterns, sign-up and subscription events (including the plan and amount of a purchase), and which type of memory card you were shown. No message content, chat names or journal text is ever sent to Google. Privacy policy
• Microsoft Clarity - session replay, used to find broken and confusing parts of the app. It only loads if you accept cookies. It records taps, scrolling and the layout of the screens you visit. Your memories, journal entries and recovery phrase are masked before anything is recorded. Privacy policy
• Meta Pixel - measures whether our Facebook and Instagram ads led to a sign-up or a subscription. It only loads if you accept cookies, and it receives page visits and those two events, never message content. Privacy policy
• Brevo - sends our account and onboarding emails. Brevo receives your email address and the dates you signed up and confirmed, nothing else. Privacy policy

We advertise on Facebook and Instagram and measure whether those ads worked, which is what the Meta Pixel above is for. Beyond that, EM shows no ads, and EM does not sell data to any third party. Ever.

5. Your Rights

You have the right to:

• Access the data EM holds about you - your email address and subscription status. We cannot provide your message content as we cannot decrypt it.
• Delete your account and all associated encrypted data permanently.
• Withdraw consent at any time by deleting your account.

For data requests or GDPR enquiries: hi@emkeep.com

6. Children

EM is available to users aged 16 and over. You must be 18 or over to buy EM Premium, or have a parent or guardian's consent.

7. Changes

We will notify you of material changes to this policy via the app or email. The current policy is always available at emkeep.com/privacy.

8. Contact

Privacy questions: hi@emkeep.com