Privacy Policy

Keipy ("Keipy", "we", "us", or "our") provides an invoicing and business management application for freelancers and small businesses. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the Keipy mobile app and this website.

Keipy is operated from Nigeria and this Policy is written to comply with the Nigeria Data Protection Act (NDPR/NDPA), Apple's App Store guidelines, and Google Play's Data Safety requirements. Where applicable, it also reflects rights available to users under the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

1. Information We Collect

Account & Contact Information

• Name, email address, and optional phone number
• Authentication data via email/password or Google Sign-In
• Profile photo, if you choose to upload one

Business, Client & Financial Data

• Business profile details: name, logo, signature, stamp, category, addresses, and payment method details you configure (e.g. bank account, PayPal, Paystack, Flutterwave)
• Client records you create, import from a CSV file, or add from your device's contacts (name, email, phone, address)
• Invoices, line items, prices, taxes, discounts, payment records, and catalog/inventory items you manage in the app

Voice & AI Content

• If you use voice-to-invoice, your microphone recording is sent to our server, transcribed by our AI provider, and the recording is discarded once transcription completes — it is not stored on our servers
• Free-text prompts you type for AI invoice generation, and the resulting draft, which may be saved to the invoice you create

Device & Usage Information

• Push notification tokens, to deliver invoice and payment alerts
• Crash reports and basic diagnostic data, collected automatically to help us fix bugs

Contacts (Optional, On-Device Only)

If you grant contacts permission and choose to import a client from your address book, Keipy reads that contact locally on your device to prefill a new client record. We do not upload your full address book to our servers — only the client you explicitly choose to save is stored, as a normal client record.

2. How We Use Your Information

• To provide core features: invoicing, client and inventory management, team collaboration
• To generate and send invoices, receipts, and payment reminders
• To power optional AI features (invoice drafting, voice transcription)
• To process subscription purchases and manage your plan
• To send service notifications you've opted into
• To maintain security, prevent abuse, and fix bugs

3. Third-Party Service Providers

We share data with the following service providers, solely to operate the app. None of them are permitted to use your data for their own advertising purposes.

• Google Firebase — authentication, database, file storage, cloud functions, crash reporting, and push notifications
• OpenAI — processes voice recordings (transcription) and text prompts (AI invoice drafting) you explicitly submit
• RevenueCat — manages in-app subscription purchases on our behalf
• Resend — delivers transactional emails, such as team invitations
• Apple App Store / Google Play — process in-app purchases and subscriptions

We do not sell your personal data, and we do not share it with advertisers or data brokers.

4. Data Retention

We retain your account and business data for as long as your account is active. When you request account deletion — in Settings, or via our Delete Account page if you no longer have the app installed — your account is deactivated immediately and permanently deleted after a 30-day grace period, in line with Apple and Google Play policy. Voice recordings are not retained after transcription. You may request deletion of specific data (e.g. a client record) at any time within the app.

5. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or export your personal data
• Request deletion of your account and associated data
• Withdraw consent for optional features (e.g. contacts, notifications, microphone)
• Object to or restrict certain processing

You can exercise most of these rights directly from the app's Settings screen, via our Delete Account page if you no longer have the app installed, or by contacting us at nwerembright@gmail.com.

6. Children's Privacy

Keipy is intended for business use by adults and is not directed at children under 13. We do not knowingly collect data from children.

7. Security

We use industry-standard safeguards, including encryption in transit, access-controlled cloud storage, and per-business data isolation enforced by our database security rules. No method of transmission or storage is 100% secure, but we work to protect your data at every layer.

8. International Data Transfers

Our service providers may process data outside Nigeria, including in the United States and the European Union. Where this occurs, we rely on those providers' standard contractual and security safeguards.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date, and significant changes may be communicated in-app.

10. Contact Us

Questions about this Privacy Policy or your data? Contact us at nwerembright@gmail.com.