Keel · Document

Keel Privacy Policy

Effective July 4, 2026 · Version 1.0

Keel is a routine tracker built to keep your data on your phone. This policy explains what little we collect, why, where it lives, and how to delete it. No legalese where plain words will do.

The short version

• Keel works fully offline, with no account. Used this way, your data never leaves your device.
• If you choose to sign in, your routines and logs sync to a server so you can restore them. That is the only reason.
• We do not sell your data, share it for marketing, run ads, or use third-party analytics or tracking SDKs.
• You can delete everything, account and all server data, from inside the app, immediately.

What Keel collects, and why

Nothing, by default. Without an account, everything you enter (routines, programs, dose logs, inventory) is stored only on your iPhone. We have no copy and no way to see it.

With an optional account. If you sign in — with Apple, with Google, or with a one-time email code — we store:

• Your auth identity — your email address, your sign-in identifier, and the display name you entered (or that Apple provided), so you can log back in and be greeted by name.
• Your content — routines, programs, dose logs, and inventory profiles, so they can sync and be restored.

That is the complete list. We collect it for one purpose: making your data available to you when signed in.

Optional location (weather only). If you grant location access, Keel uses your approximate (coarse) location to fetch local weather from Open-Meteo for the ambient sky header. Approximate coordinates are sent to Open-Meteo to answer that request. Keel does not store your location, and it is never tied to your account. Decline the permission and the feature simply stays off.

Notifications. Dose reminders are scheduled on your device using local notifications. No reminder data goes to a server.

Payments. Subscriptions are billed by Apple through the App Store. Keel never sees your payment details.

Where your data lives

Synced data is stored with Supabase, our database provider, on servers in the United States. Each user's rows are protected by row-level security, so your data is accessible only to your authenticated account. Data is encrypted in transit using TLS.

Retention

• No account: we retain nothing, because we have nothing.
• With an account: we keep your synced data for as long as your account exists — no longer.
• Deletion is immediate: deleting your account removes the auth user and every server row at once, via cascading deletion. There is no grace-period copy held back.

Deleting your data

You do not need to email anyone.

• Delete your account: Settings → Delete account. This immediately deletes your sign-in identity and all server data, and clears the app's data from the device.
• Delete all data: a separate Settings option erases everything you have tracked — from this device and, when signed in, from your synced account — while keeping your sign-in identity.
• Delete the app: removing the app deletes its on-device data.

Export

You can export your log history as a CSV file at any time. The export is generated on your device.

Third parties

Keel involves a small, fixed set of service providers, each for a narrow purpose:

There are no advertising networks, no analytics SDKs, and no data brokers. We do not sell personal data and do not share it for marketing.

Children

Keel is for adults 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.

Changes to this policy

If this policy changes, we will update the version number and effective date here and note meaningful changes in the app. We will not quietly expand what we collect.

Contact

Questions about privacy or your data: [email protected]