Privacy

What we store

Your tasks, habits, mood scores, and reflection notes are stored in our EU-based Supabase Postgres database. Row-level security means only you can read your rows.

Your reflections, mood, and habits are locked after they happen.

Reflection fields (Notes, What can be improved, Gratitude) and mood entries lock at midnight in your timezone. Habit ticks can be recorded today or yesterday, but not earlier. You can still delete any entry — including your entire account and all data — but you cannot modify past entries.

This design is deliberate: honest self-report depends on not being able to rewrite yesterday.

Event logging

We log that you did things — created a task, completed a habit, saved a reflection — along with structural signals like priority, category, and word counts. We never log the free-text content of reflections or task titles to the event log. This is how we will power personalized AI coaching without compromising your journal.

What we log about your device.

When you use Keelify, our servers record the IP address and browser user-agent of your requests alongside the action you took (for example, marking a habit complete). We use this information for three purposes: to detect unusual access patterns that could indicate a compromised account, to help support debug issues you report, and to understand which versions of mobile and desktop browsers our users are on so we can test the right devices.

We do not sell this data, share it with advertisers, or use it for cross-site tracking. It is deleted automatically when you delete your account (cascade), or on request via hello@keelify.com.

Cookies

We split cookies into three categories — Necessary, Analytics, and Marketing — and ask for your choice on first visit. Analytics and Marketing are off by default. Our full inventory (name, purpose, lifetime, who sets it) lives on the Cookie policy page, where you can also revisit your choice at any time.

AI features and third-party processors

Pro+ includes AI-powered reflection and planning features delivered by Juno, our warm-companion coach persona. AI features are strictly opt-in: they are off by default for every account and can be turned off at any time in Settings → AI Coach.

When AI features are on, we send the following data to Anthropic (our sub-processor that operates the Claude API) at generation time: your tasks, habits, mood entries, reflection notes, and the optional AI profile you fill out in Settings. We do not send your email address, name, or any contact information. Under Anthropic's commercial terms, your data is not retained for model training, and data in transit is encrypted.

AI-generated content is stored in your account as text (for example, the weekly coaching summary). No conversation history is retained between generations — every AI request is composed fresh from your data plus your profile, each time.

Referrals and invites

You can share Keelify with friends from Settings → Invites. When a friend clicks your link, and they have accepted Marketing cookies, we set a signed cookie called keelify_ref on their browser so we can credit you if they sign up and subscribe within 90 days. See the Cookie policy for the full details.

When you email an invite from the Invites tab, we send the recipient a single message with your link and your optional note. We do not add the recipient to any list, and we do not send follow-up emails on your behalf. The recipient's email is stored in your referrals record so you can see the status of your invite; we mask it on screen and delete it when you delete your account.

Affiliate program

If you apply to the Keelify Affiliate Program at keelify.com/partners, we collect the information you submit on the application form (name, email, country, website or social handle, and a short description of your audience) so we can review and run the program. If approved, we additionally store the payout details you choose to provide (Wise email or bank account) so we can send you commissions.

When someone visits Keelify through your unique affiliate link, and they have accepted Marketing cookies, we set a signed cookie called keelify_aff on their browser carrying your affiliate code and the time it was set, lasting 90 days. We always log each click in a server-side ledger (without identifying the visitor) to power your dashboard analytics. Full per-cookie details are on the Cookie policy.

We do not sell affiliate data, share it with advertisers, or use it for cross-program tracking. Affiliate records are retained for the duration of the program and for the period required by tax law to evidence commission payments.

Your rights (GDPR)

• Access & portability: export your data in CSV or JSON from Settings.
• Erasure: delete individual reflections from the Journal archive, or delete your entire account from Settings → Account. Deletion is permanent.
• Rectification: factual fields (display name, email) are editable in Settings. Subjective reflections lock at midnight by design; you can delete them but not modify them.