Privacy policy

Last updated: 12 August 2026

Who is responsible. Keel is made and run by one person: Maxime Teuber, based in Switzerland (the "I" below and, in legal terms, the data controller). Contact: contactkeel@protonmail.com.

Your data stays on your device. Commitments, accounts, payment history and settings live in the app's local storage and in the local backups you create. Keel has no server, no account system, no analytics and no advertising. I cannot see your data.

Network requests. Keel makes two kinds of request, and only these. Exchange rates are fetched from the public Frankfurter API (European Central Bank reference rates); the request is identical for every user and carries no personal data. Brand logos are off until you choose to turn them on: with the choice enabled, a commitment that has a brand website loads its logo through Google's public favicon service, and that request contains the brand's domain (netflix.com, for example) and, like any web request, your IP address. Google may process such requests on servers outside Switzerland and the EU, including in the United States. The switch in Settings turns logo loading off again at any time; logos already on your device keep showing without any further request. Items without a website never trigger a logo request. None of this reaches me: the requests go from your device to those services, and I store nothing about them.

AI import. AI features are entirely optional: if you never use them, no model ever reads your data, and they can be switched off completely in Settings. With "Use your own AI", you share your list with the assistant you choose, under that provider's terms; Keel only reads the answer you paste back, on your phone. Where Keel reads a list itself, that runs on Apple Intelligence's on-device model, processing Apple documents as on-device and offline. Apple has announced a more capable model for apps running on its Private Cloud Compute; if Keel offers it in a future version it will be an option you turn on, it will require a network connection, and we will describe its handling of your data in Apple's own published terms rather than as a promise of ours. This page will say so before that ships.

Reminders are scheduled locally by iOS. The app lock uses Face ID, Touch ID or your passcode through iOS; Keel only receives whether it succeeded.

Backups and exports are files you control. Sharing one sends it wherever you choose; treat exported files like the financial data they contain. If you turn on iCloud backup in Settings, your Keel data is additionally stored in your own private iCloud storage, managed by Apple under your Apple ID; Keel still has no server and I still cannot see it.

The trial date. To keep the 45 day free trial honest across reinstalls, Keel stores one value, the date your trial started, in your device keychain and in your private iCloud key-value storage. It contains that date and nothing else, it never leaves Apple's infrastructure, and it is not written into your backup or export files.

Purchases. The optional Full Keel purchase and its restore are processed entirely by Apple through your App Store account. Keel never sees your payment details; it only learns that the purchase exists.

Retention and deletion. Because everything lives on your device, deletion is in your hands: remove entries in the app, or delete the app to erase all of its data (backup files you exported somewhere else are yours to delete there). There is no account to close and no server copy to request. If you email me, I keep the correspondence so I can follow up if you write again. Ask me to delete it, in plain words, and I will: no formal request or legal citation needed, deletion is guaranteed.

Your rights. Swiss data protection law (FADP) and, where it applies, the EU GDPR give you rights over your personal data: access, correction, deletion and objection, and the right to complain to a supervisory authority (in Switzerland the FDPIC, in the EU your national authority). In practice, the only personal data I ever hold is our email correspondence, so exercising these rights usually means asking me to delete a thread, which I will.

This website is static, sets no cookies and runs no analytics.

Changes. If this policy changes in a way that matters, the date above moves and the change is visible on this page.