Privacy Policy

Last updated: 18 September 2026

Kepo saves places you see in social posts and later asks whether you went. It is built so that answering that question never requires anyone but you to see your data.

This policy describes the version of Kepo in testing today. It will be updated on this page before any version that uses accounts or a Kepo server is released.

What Kepo stores, and where

Everything Kepo saves is stored on your iPhone. The places you save, the answers you give and your notes live in a database on the device, shared only between the Kepo app and its share extension. There is no Kepo account, no Kepo server, and no copy of your data anywhere else.

What leaves your phone, and when

Kepo makes network requests only when you ask it to do something that needs one, and only to these places:

• When you share a post into Kepo, it fetches that post's public page to read its caption and, for TikTok, the venue the poster tagged. For TikTok and Instagram this uses those services' own public preview endpoints (www.tiktok.com and graph.facebook.com). For any other link you share, Kepo requests the page you shared. It sends no account information and uses no login; it sees only what a logged-out browser would see.
• When Kepo looks up a place or a city, the name or address you are searching for is sent to Apple Maps so it can be matched to a real location. This is Apple's standard mapping service and is covered by Apple's privacy policy.

That is the complete list. Kepo contains no analytics, no advertising, no tracking of any kind, and no third-party code libraries.

Location

If you allow it, Kepo uses your location for exactly one purpose: to notice when you have spent time at a place you saved, so the app can ask you about it instead of waiting. That matching happens on your phone and your location is never sent anywhere. You can refuse location access, or withdraw it later in Settings, and the rest of the app works unchanged: you tell it where you went yourself.

The activity log

Kepo keeps a small technical log of what its own machinery did: that a share opened, that a lookup succeeded or failed, that a visit was detected. It cannot contain a place name, a caption, a link or a coordinate: the log is built from a fixed list of outcomes rather than from free text, and the build fails if anyone adds a field that could carry one. Like everything else, it stays on the phone.

Sending your data to us

During the test, you may choose to export your data and send it to the developer. Nothing is sent automatically. You tap a button, you see the files, and you choose where they go. If you never tap it, nothing is shared.

Deleting your data

Delete a saved place inside the app, or delete Kepo from your iPhone to remove everything it stored. There is nothing held elsewhere to request, correct or erase.

Children

Kepo is not directed to children under 13 and collects nothing from anyone.

Contact

Questions about this policy: support@getkepo.com.