Privacy Policy for Keep Me Posted

1. Who we are

Keep Me Posted is a topic-monitoring app and website operated by Michael Friesen, Reesbergsiedlung 28, 32120 Hiddenhausen, Germany. You can contact us about privacy questions at keepmepostedplatipus@gmail.com.

If you publish an imprint or legal notice, it should stay consistent with this section.

2. What this policy covers

This Privacy Policy applies to the Keep Me Posted mobile apps, the website on the keepmeposted-platipus domains, and the related backend services used to authenticate users, store topics, run research, manage notifications, and handle purchase-linked credit redemption.

3. Information we collect

Depending on how you use Keep Me Posted, we may collect the following categories of data:

• Account and sign-in data: user ID, email address, display name, and sign-in provider information received through Firebase Authentication and, on supported platforms, Sign in with Apple or Google sign-in.
• Topic and preference data: topic titles, specifics, user comments, style instructions, cadence, notification settings, preferred locale, selected research provider, and selected research model.
• Research results and usage data: summaries, chronology entries, source links, research run records, unread counts, quota balances, and usage ledger entries. We may also keep a minimal hashed account-balance marker to prevent repeated welcome-credit claims and restore your remaining balance if the same sign-in identity registers again.
• Device and notification data: Firebase Cloud Messaging token, platform, installation ID, device name, device model, and whether a device is a simulator when device registration is used for push notifications.
• Purchase-related data: App Store product identifiers, transaction identifiers, original transaction identifiers, purchase timestamps, store environment, and credited purchase amounts. We do not receive your full payment card details from Apple.
• Website request data: as of April 4, 2026, the website is a static informational site and does not include its own analytics or contact form, but hosting providers may process standard request logs and technical metadata needed to deliver the site securely.

4. How we use personal data

We use personal data to:

• create and manage your account and sign-in session;
• save, update, and delete the topics you choose to monitor;
• run recurring research and generate summaries, chronology entries, and alerts;
• send push notifications and synchronize unread counts across devices;
• manage credits, balances, and App Store purchase redemption;
• maintain security, prevent abuse, debug issues, and operate the service; and
• comply with legal obligations and respond to lawful requests.

5. AI research processing

Keep Me Posted uses third-party AI services to prepare topic drafts, refine topic focus, and run recurring research. Depending on the provider configured for your account or topic, data such as your topic title, focus, specifics, comments, and related instructions may be sent to providers such as OpenAI and, if enabled in the product, xAI for processing.

Please do not enter sensitive personal data into topic fields unless you are comfortable with that information being processed for research generation.

6. Third-party services and processors

We use service providers to operate Keep Me Posted, including:

• Google Firebase for authentication, Cloud Firestore data storage, Cloud Messaging notifications, backend infrastructure, and Hosting.
• Apple for Sign in with Apple and App Store purchase processing on Apple platforms.
• AI providers such as OpenAI and, where enabled, xAI to help create research drafts and summaries.

These providers process data under their own terms and privacy commitments, in addition to our instructions where they act on our behalf.

7. Legal bases for processing

If you are in the EEA, UK, or Switzerland, we generally rely on the following bases:

• Contract: to provide the app, account, research, and purchase-linked features you request.
• Legitimate interests: to secure, maintain, improve, and defend the service.
• Consent: where required, such as for push notification permissions on your device.
• Legal obligation: where processing is required by applicable law.

8. How long we keep data

We generally keep account and app data for as long as your account remains active or as needed to provide the service.

If you delete your account through the app, or if we process an Android deletion request submitted through the website, the current backend deletion flow is designed to remove the associated user record, topics, chronology entries, usage ledger entries, research runs, archived failed runs, registered device records, and App Store or Google Play purchase-link records tied to your account. We retain a minimal hashed balance marker for abuse prevention and credit continuity, so deleting and re-registering with the same sign-in identity does not grant another welcome-credit allocation.

Some residual data may remain temporarily in backups, logs, or provider systems for a limited period where reasonably necessary for security, disaster recovery, or legal compliance.

9. Sharing and disclosures

We do not sell your personal data. We may disclose data:

• to service providers and infrastructure partners that help us run the app;
• if needed to investigate fraud, abuse, or security incidents;
• to comply with law, regulation, legal process, or enforceable government request; and
• in connection with a merger, acquisition, financing, or asset transfer, subject to applicable safeguards.

10. International data transfers

Your data may be processed in countries other than the one where you live, including by cloud and AI providers that operate internationally. Where required, we rely on contractual, organizational, or statutory safeguards intended to protect transferred personal data.

11. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or restrict certain personal data.

• You can stop using the app at any time and sign out of your account.
• You can manage push notification permissions in your device settings.
• You can request account deletion using the in-app delete account option.
• Android and Google Play users can sign in and delete their account on the Android account deletion page.
• You can contact us using the privacy contact listed above to request access, correction, or deletion where applicable.

12. Children’s privacy

Keep Me Posted is not directed to children under 16, and we do not knowingly collect personal data from children in that age group. If you believe a child has provided us personal data, contact us so we can review and delete it where appropriate.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Material changes may also be communicated through the app or website where appropriate.