Privacy Policy

Last updated 24 September 2026

This policy explains what Keep Company keeps about you, why, where it is stored and who can see it. It names real things, not broad categories. If something is not named here, the app does not collect it.

Who we are

Keep Company is a friendship app. It pairs you with someone who shares your interests, and the two of you talk first.

It is run by Good Life, India, at Upper Ground Floor, UG-26, Radha Palace, Gurudwara Road, Gurugram, Haryana 122001. Under India's Digital Personal Data Protection Act, 2023, Good Life is the "data fiduciary" for your information: the one responsible for it.

For any privacy question, or to use any of the rights below, write to care@keepcompany.in and a person will reply.

What we collect

Your account

Your profile

Photo checks

The selfie check (only if you take it)

The selfie check is optional. If you take it, we keep:

Chats

Location

Keep Company pairs people who are near each other, so it needs to know roughly where you are.

Nobody else ever sees your position. Other people see only how far away you are, in whole kilometres and never closer than 2 km.

You can say no to sharing your location, and you can still sign in, fill in your profile and use your account. But without a position you are not paired with anyone, and nobody is paired with you, until you allow it in your phone's settings.

Blocking someone from your contacts (only if you use it)

You can pick someone from your phone's contacts so that you are never paired with them. The app opens your contacts only when you do this, and it does not upload their name. It takes their email address or phone number, turns it into a fixed-length scramble (a SHA-256 hash) on your phone, and stores only that.

Something has to be stored because a block works both ways: you never see them, and they never see you. Only our server can make sure of the second half, so it needs something to compare against. A scrambled email address is compared with the email address on someone's Keep Company account; a scrambled phone number will be compared in the same way once signing in with a phone number returns to the app.

To be straight about the limit: a scrambled number or email address is not a secret from someone who already holds our database, because phone numbers can be tried one by one and common email addresses guessed. What it does mean is that nobody can read, browse or export it as a list of contacts. Unblocking deletes the entry, and deleting your account deletes all of them.

Your device

How you found us

When you sign up, the last question asks how you heard about Keep Company. It is optional. If you answer, we keep the answer and use it only to work out where to tell more people about the app. Nobody else sees it.

If you joined through a friend's invite link, we note whose invite it was. On Android, installing from Google Play also tells us which of our own links led to the install, using the referrer Google Play provides. It carries only our own link labels: no advertising identifier and nothing that identifies your device.

Payments (only if you buy a paid tier)

Keep Company is free to use. The paid tiers, Pro and Elite, are optional subscriptions that renew automatically until you cancel them.

Paid tiers are bought through Google Play on Android and the App Store on iPhone, not from us. The store takes the payment on its own screen. We never see or store your card, UPI ID or bank details, and we keep no payment method on file. What we receive is a reference for the purchase, which we ask the store to confirm before giving you anything.

Because the store handles the billing, cancelling, changing or getting a refund on a subscription is done in Google Play or the App Store, not in Keep Company. Your tier stays active until the end of the period you have paid for, even after you cancel. See Cancelling and refunds.

What we do not collect

• No card numbers, UPI IDs or bank details.
• No video or photo from the selfie check, and no face template.
• No background location and no location history.
• No calendar data. If you tap Add to calendar on a plan you have both agreed, the app opens your phone's own calendar sheet with the details filled in, and you decide whether to save it. On iPhone the app asks only for permission to add events; on Android it needs no calendar permission at all. It never reads your calendar.
• No address book. The only thing taken from your contacts is the scrambled email address or number of someone you choose to block, described above.
• No microphone use except while you are recording a voice note.
• No advertising identifiers, and no advertising or analytics trackers.
• No identity documents.

Who can see what

• Before a chat is kept, the other person sees your first name, the interests you share, whether you have passed the selfie check, and how far away you are in whole kilometres (never closer than 2 km). Nothing else from your profile.
• Once you have both kept it, each of you can see the other's full profile: photos, bio, age and the rest of what you have added.
• Messages, voice notes and photos in a chat can be seen only by the two people in it, apart from the review described below. A photo sent before the chat is kept stays blurred until you have both kept it.
• Never shown to anyone: your email address, your date of birth, your position, and anything from your contacts.
• Someone you block or report is never told that you did it.

These rules are enforced by the database itself, not only by the app, so a mistake on one screen cannot open your data to other people.

What our own team can see

Keep Company is run by a small team, and keeping it safe needs some access. The limits of it:

• When a chat is reported, a moderator can read that chat, including its photos and voice notes, so the report can be judged. Nobody reads chats that have not been reported, with one exception: the next point.
• When the message filter catches a message, the team can read that message so it can be reviewed.
• The team can see photos waiting in the photo-check queue, including ones held back automatically.
• An administrator can see and correct an account's position, grant or remove the verified mark, and close or delete an account.
• Nobody on the team can read a password, because there is none.

Notifications

If you allow notifications, we send one when someone you are chatting with sends a message, and when a chat changes, for example when it is ready to keep. A message notification contains the sender's first name and the first 140 characters of the message, so it can show a preview on your lock screen. Anyone who can see your screen can read that preview.

To reach your phone, that text passes through Expo and then Google Firebase (Android) or Apple's notification service (iPhone). You can turn notifications off at any time in your phone's settings; messages still arrive when you open the app.

Some messages are part of the service and are sent when it needs them: your sign-in codes, notices about safety, your account or a purchase, and the chat notifications above (which you control in your phone's settings).

News and offers about Keep Company are different. They are off unless you switch them on, by notification, by email or both, in the app under You, then Notifications. You can switch either one off again at any time, and every news email has an unsubscribe link. News contains nothing about you except, sometimes, your first name, and we do not track whether you open it.

GIFs

The GIF picker in a chat is supplied by Klipy. When you search, your search words go to Klipy with a scrambled code that is different from your account number and cannot be traced back to you. GIFs are loaded from Klipy's servers, which, like any website, see your phone's internet address. When you send a GIF, Klipy is told which one, so it can count what people use. Nothing else about you or your chats is shared with Klipy.

Where your data is stored

Your profile, photos, voice notes, chats, position and selfie-check results are stored and processed in India, and so is our record of any purchase. What leaves the country is: your emails, the preview inside a notification, technical error reports, GIF searches, and a payment, which the store takes on its own systems. The chat itself stays in India; only the copy inside a notification travels. We only send data to countries the Government of India allows.

When the app breaks

When something goes wrong, the app sends a technical error report to Sentry, a service that collects them for us, in the European Union. It says what went wrong and where in the code, your phone model and system version, the app version and the screens you moved through just before. It also carries the internal number your account already has with us, so we can tell whether one person hit a problem forty times or forty people hit it once.

It deliberately leaves out your messages, photos, voice notes, name, email address, position and any sign-in code. Screen recording, which this kind of service offers, is switched off, because in a chat app it would capture other people's words as well as yours.

How long we keep it

• A chat that is not kept is deleted when its 48 hours run out. A kept chat is deleted when one of you leaves it. A reported chat, or one with a message sent for review, is kept until that has been dealt with, for 90 days at most, and then deleted.
• Everything else is kept while your account exists. When you delete your account, your profile, photos, voice notes, chats, payment records, selfie-check record, position and notification tokens are deleted with it, straight away. We do not keep a hidden copy. See Delete your account.
• A notification token is deleted when you sign out on that phone.
• Error reports are deleted automatically by Sentry after 90 days at most.
• One thing outlives an account: a ban. If an account is closed for breaking our rules, its email address is recorded as blocked, and that record is kept even if the account is later deleted. Otherwise deleting an account would undo its ban. It holds nothing but the address.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

• See your data. Export a copy from inside the app, under Account & data. You do not need to ask anyone. If you want something the export does not cover, write to care@keepcompany.in and tell us what.
• Correct it. Edit your profile in the app, or ask us to.
• Delete it. From inside the app, straight away.
• Withdraw your consent. Deleting your account withdraws it completely. You can withdraw consent to the selfie check on its own by asking us to remove the verified mark and its record.
• Nominate someone to use these rights for you if you die or become unable to. Write to us with their name and how to reach them.
• Complain. Write to our Grievance Officer (below). If you are not satisfied with the answer, you can complain to the Data Protection Board of India.

Decisions made automatically

A few things happen without a person deciding each time, and you should know about them:

• Photo checks. Every photo is checked automatically. A clearly explicit photo closes the account. Anything borderline, and anything showing violence, hate symbols or drug use, is held back for a person to look at.
• The message filter. Messages are checked automatically for harmful content, such as threats, slurs or sexual messages. When the filter catches one, the sender is warned, the message still reaches the other person with a warning mark (an exclamation mark) beside it, and our team reviews it.
• The selfie check. If you take it, the verified mark is given and taken away automatically, based on the check and how closely your face resembles your photos.
• Pairing. Who you are paired with is worked out automatically from your interests and how far apart you are.

If you think any of these got it wrong, write to care@keepcompany.in and a person will look again.

Age

Keep Company is for adults. You must be 18 or over, and the app refuses to create an account for anyone younger. If you think someone under 18 is using it, report them in the app or tell us at care@keepcompany.in and we will remove the account. See our child safety standards.

Security

Signing in is by a one-time code, so there is no password to steal. Photos and voice notes are never on a public web address, and the links that show them expire. Who can see what is decided in the database, not screen by screen.

No system is perfectly secure. If a breach ever affects your data, we will tell you and the Data Protection Board of India, as the law requires.

Grievance Officer

Our Grievance Officer is Gaurav Grover. Write to care@keepcompany.in with "Grievance" in the subject line. We acknowledge a grievance within 24 hours and resolve it within 15 days, as the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 require.

Changes to this policy

If this policy changes in a way that matters, we will update the "Last updated" line at the top and tell you in the app or by email before the change takes effect.