Privacy Policy

Effective date: 22 March 2026

1. Data controller

Keel is developed and operated by Keel, based in Denmark. For questions about your data or this policy, contact us at [email protected].

2. What data Keel stores

All data you create in Keel is stored locally on your device using on-device storage. This includes:

• Your name and preferences
• Check-in entries (mood, energy, journal notes, triggers, sleep, gratitude)
• Session conversation history
• Bookmarked responses and memories
• Goals and programme progress
• Insights and streak data

None of this data is sent to Keel's servers because Keel does not have servers. Your data lives only on your device.

3. AI conversations

When you start a session with Keel, your conversation is processed by a third-party AI service (Anthropic's Claude API, based in the United States) to generate responses. This means:

• Your messages are sent to Anthropic's API during the session to generate a response
• This data transfer is covered by the EU-US Data Privacy Framework
• Anthropic does not store or use your conversations for training purposes
• No personally identifiable information beyond your first name is included in API requests
• Conversation history is stored only on your device after the session

For details on how Anthropic handles data, see Anthropic's privacy policy.

4. Lawful basis for processing (GDPR)

Under the General Data Protection Regulation, Keel processes your data based on:

• Consent (Article 6(1)(a)): You consent to data processing by choosing to use the app and entering your information
• Legitimate interest (Article 6(1)(f)): Providing the wellness service you signed up for

You can withdraw consent at any time by deleting your data within the app or uninstalling it.

5. What we do not collect

Keel does not collect, transmit, or store:

• Analytics or usage tracking data
• Device identifiers or advertising IDs
• Cookies or web tracking technologies
• Location data
• Contact lists or phone data
• Health data in any cloud service

There is no tracking, profiling, or automated decision-making as defined under GDPR Articles 21 and 22.

6. Your rights under GDPR

As a data subject in the EU, you have the right to:

• Access your data: use the Export feature in the app to download all your data as JSON
• Rectify inaccurate data: edit your name, stressors, and settings in the Profile page
• Delete your data: delete specific data categories or reset the entire app from the Profile page
• Data portability: export your data in a machine-readable format (JSON) at any time
• Withdraw consent: delete your data or uninstall the app at any time

Since all data is stored on your device, you have direct control over all of these rights without needing to contact us.

7. Notifications

If you enable notifications, Keel schedules them locally on your device. No notification data is sent to external servers. You can disable notifications at any time in the app's profile settings.

8. Data retention and backup

Keel does not automatically back up your data to any cloud service. Your data exists only on your device for as long as the app is installed. If you switch devices or uninstall the app, your data will be lost unless you export it first. We recommend using the export feature periodically.

9. Children

Keel is not intended for use by anyone under the age of 16, in accordance with GDPR Article 8. We do not knowingly process information from children.

10. Not a medical service

Keel is a wellness companion, not a medical device or clinical tool. It does not provide diagnoses, treatment plans, or medical advice. If you are in crisis or need professional support, please contact a qualified healthcare provider or crisis helpline.

11. Changes to this policy

If we make changes to this policy, we will update the effective date at the top. Continued use of the app after changes constitutes acceptance of the updated policy.

12. Contact and complaints

If you have questions about this privacy policy, contact us at [email protected].

You also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.