KeepUp Privacy Policy
Last updated: December 2025
Bub AI Inc. ("KeepUp", "we", "us", or "our") values your trust and your privacy. This Privacy Policy explains what information we collect when you use the KeepUp mobile app (the "App"), why we collect it, how it is used and shared, and the rights and choices you have.
If you are under 18 years old, you should not use KeepUp. KeepUp is intended for adults only.
1. Who We Are
KeepUp is operated by Bub AI Inc., a company incorporated in California, USA. We act as the data controller, meaning we determine how and why your personal information is processed.
We comply with the California Consumer Privacy Act (CCPA), the EU General Data Protection Regulation (GDPR), the UK GDPR, and other global privacy laws.
2. What KeepUp Is
KeepUp is a private social experience designed for small friend groups. Each group plays through daily AI-powered "Packs" — short interactive moments, questions, or mini-games that help friends laugh, connect, and share. All participation happens inside private invite-only groups.
• No public profiles
• No discovery feed
• No advertising or data sales
The app's purpose is connection, not exposure.
3. Information We Collect
We only collect data necessary to make KeepUp function properly, personalize group experiences, ensure security, and comply with legal obligations.
3.1 Information you provide to us
| Category | Examples | Purpose |
|---|---|---|
| Account Information | Username or display name, profile photo | To create and identify your account |
| Group Information | Group names, members you invite, join links | To enable private group spaces |
| Pack & AI Content | Your text answers, choices, creative inputs, and the AI-generated results visible to your group (and for moderation) | To deliver interactive Packs and personalized results and for content moderation |
| User Communications & Reports | Chat messages, reports of abuse, users you block, and users who block you | To ensure safety and moderate content, and to facilitate private communication |
| Reactions & Feedback | Emojis, comments, or ratings inside a Pack | To show results and group insights |
| Support Requests | Messages you send to support, screenshots you attach | To respond to your requests and improve service |
We do not collect: email addresses, phone numbers, contact lists, or precise location. Sign-in is exclusively handled through Apple Sign In, which provides authentication without sharing your personal email unless you choose otherwise.
3.2 Information we collect automatically
When you use KeepUp, certain technical information is generated automatically:
• Device type and operating system version
• Language and region settings
• IP address (region-level only, used for fraud prevention and regional compliance)
• App events (e.g., Packs opened, buttons tapped)
• Performance, crash, and diagnostic logs
We use trusted analytics and hosting providers — PostHog, and Vercel — to process this data securely and in aggregate form whenever possible.
3.3 AI and personalization data
KeepUp uses generative AI to craft group prompts, summarize responses, and generate insights. To do this, we process limited contextual data such as:
• Your Pack inputs and previous responses
• Group-level preferences (e.g., humor style, activity frequency)
• AI-generated text displayed in the App
All AI processing is performed through OpenAI's API, under a data-processing agreement that disables long-term data retention and prohibits training on user content.
KeepUp maintains a lightweight group memory that allows future Packs to reference prior group activity. This personalization occurs only within your private group and is never used for advertising or external profiling.
4. Why We Process Your Information
We use your data for the following legitimate purposes:
| Purpose | Legal Basis (EU/UK users) |
|---|---|
| To create and manage your account | Performance of contract |
| To provide Packs and AI-powered group experiences | Performance of contract |
| To personalize content and remember past group interactions | Legitimate interest |
| To analyze usage and improve features | Legitimate interest |
| To maintain security and prevent abuse | Legitimate interest / Legal obligation |
| To respond to support requests | Legitimate interest |
| To moderate user-generated content, investigate reports, and enforce our Terms of Service. | Legal obligation / Legitimate interest |
| To comply with laws or regulations | Legal obligation |
We will never use your information for behavioral advertising or sell it to third parties.
5. When We Share Information
We limit sharing to cases required for the operation and safety of KeepUp.
5.1 Service providers acting on our behalf
We engage a small number of trusted vendors that process data under our instructions and strict confidentiality:
• Hosting & Infrastructure: Vercel,
• Analytics: PostHog (aggregated usage only)
• AI Processing & Content Moderation: OpenAI (with data retention disabled) and other third-party APIs (e.g., Google Perspective API if used), which process user content for generating Packs and for content moderation and filtering to maintain community safety
These vendors are contractually prohibited from using your information for their own purposes.
5.2 Legal requirements and safety
We may disclose information if we believe it is reasonably necessary to:
• Comply with law, court order, or government request
• Detect, investigate, or prevent fraud, security issues, or abuse
• Protect the rights, property, or safety of KeepUp users or others
5.3 Business transfers
If Bub AI Inc. is involved in a merger, acquisition, or sale of assets, your data may be transferred under equivalent privacy commitments, and we will notify you where legally required.
6. How We Protect Your Information
We apply technical and organizational safeguards consistent with industry standards:
• Encryption in transit (HTTPS) and at rest
• Authentication via Apple Sign In
• Access controls and employee training
• Routine security testing and auditing
• Data minimization and limited retention
Our infrastructure providers maintain SOC 2 and ISO 27001 certifications or equivalent standards. We regularly review these measures to ensure your data remains protected.
7. Data Retention and Deletion
We keep your information only for as long as needed to provide KeepUp's services and comply with legal obligations.
Retention periods
| Type of Data | Retention Policy |
|---|---|
| Account information | Kept while your account is active |
| Pack & AI interaction data | Kept while your account exists so groups can revisit past Packs |
| Analytics and technical logs | Stored for short periods for security and performance optimization |
| Support correspondence | Retained as necessary to resolve requests and maintain records |
| Backup data | Automatically purged during regular system cycles |
Account deletion
You can delete your account at any time in-app or by contacting privacy@keepup.app. When you delete your account:
• Your profile and content are immediately deactivated
• Personal data is permanently deleted or anonymized within 30–90 days
• Backups are overwritten during scheduled maintenance
• Certain minimal data (e.g., security logs) may be kept temporarily where required by law or legitimate safety reasons
We may also remove inactive accounts after a prolonged period of non-use to reduce data storage and protect privacy.
8. Your Controls and Privacy Rights
We believe privacy should remain in your control. You can manage much of your data directly inside the app and exercise additional rights by contacting us.
In-app controls
• Delete your account and data
• Report objectionable content or abuse
• Manage notifications and permissions
• Block abusive users, which automatically filters their content from your view
• Choose what to share in each Pack
• Control group membership and participation
Your legal rights (depending on your region)
• Access – request a copy of the personal data we hold about you
• Rectification – correct inaccurate or incomplete data
• Deletion – request permanent deletion of your data
• Restriction – ask us to limit certain processing
• Portability – obtain your data in a machine-readable format
• Objection / Opt-Out – object to specific uses, such as optional analytics
• Withdraw Consent – revoke any consent previously given for optional features
We will respond to verified requests within the timelines required by law (typically 30 days under GDPR or 45 days under CCPA). To exercise your rights, email privacy@keepup.app. We may need to confirm your identity before fulfilling requests to protect your privacy.
9. International Data Transfers
KeepUp operates globally. Your information may be processed and stored in the United States or other countries where our service providers are located.
When data is transferred outside your region, we ensure it is protected by appropriate safeguards, including:
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Equivalent frameworks for the UK and other regions
• Binding data-processing agreements requiring our partners to apply GDPR-level protection
Regardless of where your data is processed, it receives the same high standard of security and privacy described in this Policy.
10. Children's Data
KeepUp is intended for individuals 18 years and older. We do not knowingly collect or process personal data from minors. If we become aware that someone under 18 has used KeepUp, we will delete their account and related data promptly.
11. Updates to This Policy
We may update this Privacy Policy to reflect app improvements, legal requirements, or security updates. If material changes occur, we will:
• Update the "Last updated" date at the top
• Provide clear notice in-app or through other appropriate channels
• Explain what is changing and why
Your continued use of KeepUp after an update means you accept the revised Policy.
12. Contact Us
If you have any questions, concerns, or privacy requests, please contact: