Privacy

Last updated 29 August 2026

Kept exists so photographs stay private until the people in them are ready to see them. This page explains exactly what we collect, what we do not, and how long anything lasts.

Who we are

Kept is operated by WayPointLabs, 1111B S Governors Ave STE 48363, Dover, DE 19904, United States. For anything relating to your data, contact privacy@kept.film.

What we collect

If you join a roll as a guest

Guests do not create an account. When you scan a code and join, we store:

• The display name you type. Whatever you enter, shown beside your photos. It does not have to be your real name.
• A random access token. Generated by our server and kept in your device's secure storage. It is how we know a photo came from you. It is not linked to your phone number, email, or device identifier.
• The photos you take, with the time each was taken and its frame number.

We do not ask for your email address, phone number, or contacts, and we do not read your photo library. The camera is only opened when you are on the camera screen.

If you create an account

Creating an account is optional and only needed to return to a roll from another device. In that case we store your email address, or the identifier supplied by Apple or Google if you sign in that way. If you use Sign in with Apple and choose to hide your email, we only ever receive Apple's relay address.

Payments

Purchases are handled entirely by the Apple App Store or Google Play. We never see or store your card details. We receive only a confirmation that a purchase succeeded and which item it was for.

How the reveal works

This is the part worth being precise about, because it is the whole point of the product.

Before a roll develops, photographs are not sent to anyone's device. They are not blurred, hidden behind a tap, or downloaded and covered up. Our server does not include the image address in any response until the develop time has passed. Until then, a photo exists in storage and nowhere else, including for the person who created the roll and for anyone who took the photo.

The person who created the roll can choose to develop it early. Nobody else can, and there is no way to view an individual photograph ahead of the rest.

Where photos are stored, and for how long

Photographs are uploaded directly from your device to Amazon Web Services in the United States (region us-east-1) and stored encrypted at rest. They move through storage tiers on a fixed schedule:

• Days 0 to 29. Standard storage. Photos open immediately.
• From day 30. Archived to a lower-cost tier. Photos still open immediately.
• From day 120. Deep archive. Photos are retained, but retrieving them takes between 12 and 48 hours.

Nothing is deleted automatically. If you want a roll erased, ask us and we will remove it, including from archive.

Who can see your photos

• Other guests on the same roll, once it has developed. That is what joining a roll means.
• The person who created the roll.
• Nobody else. We do not make rolls public, sell access, or use your photographs to advertise Kept without asking you first, in writing, for that specific photograph.

We do not use your photographs to train machine-learning models, and we do not run face recognition on them.

Who we share data with

We use a small number of service providers, and only to run the product:

• Amazon Web Services - hosting, storage and databases.
• Apple and Google - app distribution and payments.
• Amazon SES and Twilio - sending sign-in codes, if you create an account.

We do not sell or share personal information for advertising, and we do not use third-party advertising or analytics trackers in the app.

Photographs of other people

If you are photographed at an event using Kept and want that photograph removed, contact us at privacy@kept.film and we will remove it. You do not need an account, and you do not need to have used Kept.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to processing, and to complain to a data protection authority. Contact us and we will action it within the time your local law requires.

Because guests have no account, we identify a guest's data by the access token held on their device. If you have deleted the app and lost that token, tell us the event and the display name you used and we will find it.

Children

Kept is not directed at children under 13, and we do not knowingly collect their personal information. If a child has been photographed at an event, a parent or guardian can ask us to remove the photograph as above.

Changes

If we change this policy in a way that materially affects you, we will say so in the app before the change takes effect.