Keepsake: Private Doc Vault — Privacy Policy
Keepsake is an encrypted document vault published by NextLayer Technology. Everything you put in it is encrypted on your phone. It works completely offline, and it has an optional subscription, Keepsake Cloud, for backup, sync across your phones and a shared family vault — end-to-end encrypted, so we cannot read it.
The short version: without Keepsake Cloud, nothing leaves your phone unless you share something yourself. With it, your phone encrypts every document before upload and our servers hold only data they cannot open. No ads, no analytics, no advertising ID.
On your phone
Every scan, photo and generated PDF is encrypted on your device with AES-256, using a key held in your phone's hardware-backed keystore. Names, tags, folders and the text recognised from your scans stay in the app's private storage. Access is gated behind your device biometric with a PIN fallback, the vault auto-locks when you leave the app, screenshots are blocked, and the vault is excluded from Android's own cloud backups. Deleting an item securely wipes its contents.
Text recognition
Text is read from your scans on the device itself, so searching inside your documents works in airplane mode. Scanning never sends a page anywhere.
Network access
Up to version 0.2.0 Keepsake declared no internet permission at all. From version 0.3.0 it does, and uses it only for Keepsake Cloud: nothing is sent until you sign in and turn Keepsake Cloud on. Keepsake sends no usage analytics and no crash reports — the Firebase libraries in its code are switched off — and has no advertising ID.
Keepsake Cloud (optional)
- Sign in: with your Google account. We keep its identifier and email address, never a password.
- End-to-end encryption: your phone creates a vault key and encrypts every file and every record — names, tags, folders and recognised text included — before upload. The server holds only ciphertext, plus who belongs to which vault, how many items there are, the size of the encrypted files, and when they changed.
- Your recovery key opens your vault on a new phone. It stays with you and is never sent to us, which also means we cannot recover your backup if you lose it.
- Family vaults: the owner invites up to five people with one-time codes. Members see each other's email addresses. If someone is removed they stop syncing at once, but copies already on their phone stay there.
- Where it is kept: Cloudflare (Workers, D1 and R2), acting only on our instructions. Everything travels over encrypted connections.
- Payment: billed by Google Play. We receive a purchase token to confirm the subscription, never your payment details.
Deleting your data
On your phone: delete items in the app, or uninstall it. In the cloud: in Keepsake, Settings, then Keepsake Cloud, the vault owner can delete the cloud copy (every encrypted file is removed at once) and anyone can delete their Keepsake Cloud account. Documents on your phone are not touched. You can also email support@nextlayertechnology.net from the address you sign in with.
Children
Keepsake is not directed at children under 13.
Changes
If what the app collects changes, this page is updated before that version ships, and the effective date at the top changes with it.
Contact
Questions about this policy: support@nextlayertechnology.net, NextLayer Technology, Ontario, Canada. This page covers Keepsake: Private Doc Vault; the studio-wide policy for every NextLayer app lives at nextlayertechnology.net/privacy.