Your money, your records.

Keep is part of Voonyle and is built and run by Jacky Voon in Malaysia. Questions or requests about your data go to privacy@voonyle.com.

• Your account: name, email address and a one-way hash of your password. We never store the password itself.
• What you record: transactions, the reasons and notes you add to them, budgets, bills, debts, goals and payments.
• Your settings: currency, time zone and notification preferences.
• Sign-in details: for each signed-in session, the IP address and browser type, so a session can be checked and ended.
• Receipts you scan: the photo is read on Keep’s own receipt reader and is not kept afterwards. The text read from it is held for up to ten minutes while suggestions are prepared.

We do not ask for bank logins, card numbers or government ID, and we do not buy data about you from anyone else.

• To show your records and work out totals, budgets, habits and what is left to spend.
• To send the emails you rely on: password resets and the reminders you have switched on.
• To keep your account secure and the service running.

Totals, budgets and the habits Keep points out are calculated by the app itself. An AI model is only used to help read receipts you choose to scan, and you review the result before anything is saved.

Keep shows no ads, runs no advertising or analytics trackers, and does not sell, rent or trade your data. We do not use your records to train AI models.

These services handle data on our behalf, only to run Keep:

Google Cloud

Runs the app, the API and the receipt reader. Servers in the United States.

Supabase

Stores your account and records in a managed PostgreSQL database.

Amazon Web Services (SES)

Sends account and reminder emails. Servers in Singapore.

DeepSeek

Receives the text read from a receipt you choose to scan, to suggest the amount, date and category. It does not receive the image or your account details. DeepSeek is based in China.

This means your data can be stored or processed outside Malaysia. Everything between your browser and Keep is sent over HTTPS.

Keep keeps your sign-in tokens and basic profile in your browser’s local storage so you stay signed in. It sets no tracking cookies. Signing out removes them.

Your account and records are kept for as long as you have an account. When you ask us to delete your account, we delete it and everything in it within 30 days. Server logs are kept for up to 30 days.

Under Malaysia’s Personal Data Protection Act 2010 you can ask to see the personal data we hold about you, to correct it, or to have it deleted. Email privacy@voonyle.com from the address on your account and we will reply within 21 days. You can switch reminder emails off at any time in Settings.

If this policy changes in a way that affects you, we will update the date above and tell you in the app before the change takes effect.