Controller
Responsible for data processing within the meaning of Article 4 (7) GDPR, and contact point for all data protection matters:
Andreas Schneider
Tränkstraße 3
65558 Holzheim
Germany
info@keepilo.com
This website
Server log files
This website is hosted by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on servers in Germany. As with every web server, requests are recorded in log files: IP address, date and time, the file requested, the referring page, browser and operating system version. This is technically necessary to deliver the pages and to detect attacks.
Legal basis is Article 6 (1) (f) GDPR; our legitimate interest is the secure and stable operation of the site. The logs are deleted after seven days at the latest and are not merged with any other data. A data processing agreement under Article 28 GDPR is in place with the hosting provider.
Cookies, analytics, advertising
None. This site sets no cookies, uses no local storage, contains no analytics, no tracking pixels, no advertising and no social media plugins. That is why you are not being asked to consent to anything.
Fonts and other resources
All fonts, images, styles and scripts are delivered from this server. Nothing is loaded from Google Fonts, a CDN or any other third party, so no data about you is passed to anyone else when you read this page.
Contacting us by email
If you write to info@keepilo.com, we process your address and the content of your message in order to answer it (Article 6 (1) (b) and (f) GDPR). We keep the correspondence as long as it is needed for the matter and any statutory retention obligations, then delete it. There is no contact form on this site, and no newsletter.
The Keepilo app
We collect nothing
Keepilo has no account, no sign-up and no server holding your data. There is no advertising, no tracking and no analytics component in the program. What you enter (supplies, people, medical cards, emergency plan, chat history) stays on your device.
When the app goes online
Only when you download something: the models for search and the assistant, content packages, map regions, and the list of available content. As with any download, the delivering server sees your IP address and typically logs it briefly. Those files are hosted at GitHub, at Hugging Face and in Hetzner storage in Finland; we evaluate nothing there.
The legal basis for that transfer is Article 6 (1) (b) GDPR: without the download the function cannot be provided. The app downloads nothing on its own; every download is triggered by you.
Everything else runs offline
The assistant computes on your device. Your questions, your documents and the answers never leave it, not anonymised and not to improve any model.
Location on the map
The map can show your location. The app asks first and you may say no, the map works without it. Your device works out the position itself (GPS needs no network); it is only displayed, never stored and never transmitted. There is no background tracking.
What you pass on yourself
An export creates a file containing your data. Where it goes is your decision; the app does not send it anywhere by itself. The "sharing" preset contains health data and asks before it includes it.
Deleting
There is nothing to revoke and nothing to request, because nothing is held by us. Deleting the app deletes all data, including the automatic backups in the app folder. Export first if you want to keep it.
Health data
Medical cards and long-term medication are special categories of personal data under Article 9 GDPR. They are stored in the same local database as everything else and are never transmitted. Protect them with the app lock (PIN and fingerprint or face); on iOS and Android the operating system's own encryption applies on top.
Stores and payment
The app is sold through Apple, Google and Microsoft. The data created by a purchase (payment, invoice, refund) is processed by the respective store as controller, under its own privacy policy. We receive no payment data and no list of buyers.
Your rights
You have the rights under Articles 15 to 21 GDPR: access, rectification, erasure, restriction of processing, data portability and objection. For the app they largely run empty, because we hold no personal data about you: there is no record we could give you access to. Your data is exclusively on your device and under your control there.
For the website, those rights apply to the server log files and to any email correspondence. Write to info@keepilo.com and we will deal with it.
You also have the right to lodge a complaint with a supervisory authority under Article 77 GDPR. The authority responsible for our seat is the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany.
Changes to this policy
If the app or the site changes in a way that affects data processing, this page changes with it, and the date at the top is updated. The version inside the app under "Legal" is kept identical to this one.