Privacy policy

Kept is an operations platform for cleaning and housekeeping companies. This policy explains what information we collect on behalf of the housekeeping companies that use Kept, what we collect about you as a visitor or end user, how we protect it, and the choices you have.

The actors

Several distinct people use Kept and we collect different things about each:

• Operators — the housekeeping company subscribed to Kept (e.g. Breck Housekeeping). The operator is the data controller for the data about their staff, properties, and clients. Kept is the data processor.
• Staff — housekeepers, inspectors, and supervisors employed by an operator and using the Kept mobile app.
• Clients — property management companies or owners whose properties an operator services. Some clients receive a portal login (the "Kept client portal").
• Visitors — anyone browsing the marketing site at feelkept.com without an account.

What we collect

About operators and their accounts

• Company name, address, primary contact name + email + phone
• Authentication identifiers (email + hashed password, managed through Supabase Auth)
• Billing details — when an operator connects their own Stripe account, Stripe holds the financial details; we hold a reference to the connected account id
• Operational data the operator enters: properties, services, staff, clients, invoices

About staff using the mobile app

• Name, role, contact details that the operator records for them
• Approximate or precise geographic location while the staff member is signed in to the mobile app and has explicitly consented. We use this so dispatch can route the day and confirm check-ins. Location is captured in the foreground (browser) or foreground + background (native app) only after the operating system's prompt is granted. In the native app, while a staffer is working, location may be recorded as a trail of points: for hourly roles (inspectors and supervisors) this is used to calculate mileage for reimbursement; for housekeepers a rough position is recorded periodically between jobs. Tracking is paused during an active clean and outside the working day, and the staff member can turn it off at any time (see "Your choices" below).
• Photos taken during turnovers and inspections. We strip EXIF metadata (including GPS coordinates) on the server before storing the file in a private bucket.
• Native push notification token, when the staff member grants the OS push prompt. Used to deliver in-app alerts; never shared.
• Tax-form metadata (W-9 / W-4 / W-2 / I-9 status flags, last 4 of identifiers, signed dates) when the operator opts to record it. We never collect full SSN/EIN or bank account numbers.

About clients (property managers)

• Company name, primary contact, email, phone
• Properties under management
• Invoices, quotes, and payment records (Stripe receipts when the operator collects through Kept)

About visitors to the marketing site

• Lead-capture form submissions: name, company, email, properties range, optional "how did you hear" note
• Standard server logs (IP, user agent, request path)

How we use what we collect

• Operating the service. Routing turnovers, dispatching staff, generating invoices, syncing reservations from listing PMS systems (Airbnb, VRBO, etc. via iCal).
• Communicating with operators. Account email about service updates, billing, and pilot-period status. Marketing email only to addresses that submitted the early-access form.
• Securing the platform. Detecting abuse, enforcing authentication, and producing audit logs of operator actions.
• Improving the product. Aggregated, non-identifying usage analytics. We do not sell personal data.

Who we share data with

Operators see their own data only. Their staff see the data the operator has assigned them. Their clients see only their own properties and invoices in the client portal. Beyond that, Kept shares data with a short list of service providers we depend on to run the platform:

• Supabase — database hosting + authentication
• Vercel — application + marketing site hosting
• Stripe — payment processing (operators connect their own Stripe account; payments flow to them, not us)
• Resend — transactional email delivery
• Dialpad / Twilio — SMS delivery, when an operator enables it
• Firebase Cloud Messaging + Apple Push Notification service — push notification delivery to the mobile app
• Mapbox — address geocoding + map rendering
• Sentry — error monitoring (no payloads logged)

Each provider has its own privacy policy and processes data only on our instructions. We do not sell personal data and we do not share it with advertising networks.

How long we keep it

We keep operational records for as long as the operator's account is active. When an operator closes their account we delete or anonymize their data within 60 days unless a legal hold requires retention. Photos stored in our private bucket are removed alongside the service record they belong to.

Your choices

• Location sharing. Staff can decline the OS prompt or revoke location permission at any time. The "Share location" toggle inside Profile in the mobile app turns it off explicitly.
• Push notifications. Decline the OS prompt or revoke in device settings. The app continues to work without push.
• Account deletion. Operators can request deletion by emailing the address below. Staff and clients should contact their operator first; the operator can remove individuals on their own.
• Access + correction. Staff and clients can request a copy of the data we hold about them and ask us to correct inaccurate fields.

Children

Kept is a workplace tool and is not directed at children under 13. We do not knowingly collect information from children.

International

Kept is operated from the United States. By using the service from outside the U.S. you agree your information may be processed in the U.S. Where the law requires it, we will sign Standard Contractual Clauses with operators based in regions with cross-border transfer restrictions.

Changes

We will post the new "Last updated" date at the top of this page when this policy changes. Material changes are notified to operators by email.

Contact

Privacy questions go to privacy@feelkept.com. For account deletion or data access, email support@feelkept.com.