Your memories. Your privacy.

Ourkeeps is currently operated by STEINER AS, organisation number 936 644 503, Fjerdingen 17, 3050 Mjøndalen, Norway. STEINER AS is responsible for the personal information described here. Ourkeeps AS is being formed; it is not yet the contracting operator. Contact support@ourkeeps.com about privacy, support or information about you in someone else’s collection. You do not need an Ourkeeps account to make a privacy request.

We receive your email address, account name and sign-in information when you register. Workspace members provide photos, videos, audio, file names, dates and locations embedded in files, names, relationships, memory descriptions and project instructions. A collection may contain information about people who have no account, including children; its source is the member who supplies it.

Our processing produces previews, transcripts, image descriptions, proposed people and memory groups, and films or slideshows. We also record membership, invitations, changes, processing status, usage and technical request information needed to run and protect the service. Required account details let us create and secure your account; without them, we cannot provide an account. Additional names, relationships and locations can be left unknown.

We use account and workspace information to provide the service you request, including sign-in, collaboration, preparation, export and deletion (GDPR Article 6(1)(b)). We use necessary security and usage records to prevent abuse, enforce shared limits and investigate failures, based on our legitimate interest in keeping the service safe and available (Article 6(1)(f)). You can object to processing based on legitimate interests.

Optional automatic face grouping requires a separate choice; accepting the terms is not consent to face analysis. Information about other people needs its own lawful basis. Uploading a photo or enabling a workspace setting does not give consent on behalf of everyone depicted. Our assessment of third-party information, children and biometric processing must be completed before unrestricted public use of automatic grouping.

When the owner enables automatic grouping, software running in Ourkeeps’ processing environment detects faces, creates small face images and numerical face signatures, and suggests which faces belong together within the workspace. We use ONNX face models, not an external face-recognition API. Face signatures can be biometric personal data. The intended basis for this optional processing is explicit consent where required (Articles 6(1)(a) and 9(2)(a)); the owner’s switch alone does not establish that consent for other people.

Turning grouping off withdraws the workspace choice, stops further automatic grouping and removes stored signatures, face crops and automatic groups through the deletion process. Manually entered people, names, relationships and tags remain until separately changed or deleted. Previously issued short-lived links can remain usable until expiry. You can review people manually instead. Suggestions can be wrong: members review names and memories before creative work. We do not use these suggestions to make decisions with legal or similarly significant effects about you.

A collection belongs to its workspace. Invited members can see the whole collection and its projects; owners control membership, editors can contribute and edit, and viewers can browse. A paired display receives limited access to the selected project. Be careful who you invite and where you share downloaded files.

Private storage and membership checks protect access, but the service must be able to read media for processing. This is not end-to-end encrypted storage. Our hosting and processing providers handle information for the functions below.

Supabase handles accounts, the database and private media storage; the primary database and storage are in Paris. Vercel hosts the application and processing infrastructure, with application functions configured in Paris. This does not mean all processing, support, logs or provider operations stay in France or the EEA.

Anthropic receives images or video frames and relevant descriptions, transcripts, names, relationships and project context for captions and story drafts. ElevenLabs receives extracted audio for transcription. Resend processes recipient addresses and message content for account and invitation email. These providers and their subprocessors may process information outside the EEA, including in the United States.

Provider retention is separate from deletion in Ourkeeps. Anthropic describes a standard API retention period of up to 30 days, with exceptions for safety, legal requirements and certain features or models. The account owner confirmed on 6 September 2026 that ElevenLabs model-training data use is switched off for the account used by Ourkeeps. This does not mean audio is retained for zero days or that earlier inputs have been deleted. We do not promise zero retention or a verified training opt-out for every provider. Account-specific processing agreements, transfer safeguards and retention settings are still being verified for public launch. The links below explain provider practices; they are not evidence that a particular safeguard has been activated for Ourkeeps.

Active collections remain until the owner deletes the workspace; there is no automatic inactivity expiry. Workspace deletion immediately removes app access for every member and prevents new authorized downloads. A previously issued download link can still work until it expires; original download links last 15 minutes. Files already downloaded or shared outside Ourkeeps cannot be recalled.

Physical workspace deletion starts after 30 days and runs in repeated batches until originals, previews, films and workspace records have been removed. The 30 days are a deletion delay, not an undo or recovery window, and removal does not finish at an exact instant on day 30.

Deleting your account removes your sign-in, profile and memberships. Transfer ownership or delete workspaces you own first. Shared contributions remain with the workspace, with account attribution removed; people named in photos and manually written text are not automatically erased. Ask us separately about information about you in shared content. Export the collection information and download originals or finished films you wish to keep before deleting.

Ourkeeps’ workspace deletion does not promise simultaneous erasure from provider logs or backups. Account-specific backup, log and processor retention periods are still being verified for public launch; we do not offer a guaranteed recovery service.

We use cookies for sign-in, account flows, language choice and paired displays. Upload progress is stored in this browser so interrupted uploads can be resumed; this may include file names and upload status. Clearing browser data can remove that local progress. The current application does not include advertising trackers or sell collection data.

Contact support@ourkeeps.com to request access, correction, deletion or restriction of information about you. You may request a portable copy where the legal conditions apply, object to processing based on legitimate interests, and withdraw consent for consent-based processing without affecting the lawfulness of earlier processing. We may need to verify your identity and protect other people’s information when handling a request.

The workspace owner can export collection information and delete the workspace; account deletion is available in account settings. These tools do not replace your right to contact us, including if you are depicted in a collection but are not a member. You can complain to Datatilsynet in Norway or the relevant supervisory authority where you live or work. We will communicate material changes to this notice and explain their effect.