Privacy Policy

Effective date: 1 April 2026

Keepsafe ("we", "us", "our") is committed to protecting your personal data in accordance with Singapore's Personal Data Protection Act 2012 (PDPA). This Privacy Policy explains what data we collect, how we use it, and your rights.

1. What we collect

We collect the following categories of personal data:

  • Account data — full name, email address, date of birth, marital status, nationality, religion.
  • Asset information — descriptions and estimated values of assets you enter (property, bank accounts, investments, CPF, insurance, etc.).
  • Documents — files you upload to the Document Vault (e.g. title deeds, insurance policies, wills).
  • Will drafts — executor, guardian, and beneficiary details you enter during the Will Wizard.
  • Family members — names and relationships of trusted persons you designate.
  • Usage data — login timestamps, feature interactions, and error logs for service improvement.

We do not collect Singapore NRIC numbers, bank account numbers, or payment card details.

2. How we use your data

  • To provide, maintain, and improve the Keepsafe platform.
  • To pre-fill your will draft and estate planning documents.
  • To send important service notifications (e.g. security alerts, feature updates).
  • To comply with legal obligations.

We do not sell your personal data to third parties. We do not use your data for advertising.

3. Third-party service providers

We use the following sub-processors who may handle your personal data on our behalf:

ProviderPurposeData location
SupabaseAuthentication, database, document storageSingapore (ap-southeast-1)
VercelApplication hosting and edge deliverySingapore edge node

4. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it for a longer period.

5. Your rights

Under the PDPA, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Correction — request correction of inaccurate personal data.
  • Withdrawal — withdraw consent for use of your personal data (this may affect your ability to use the service).
  • Portability — receive your data in a machine-readable format.
  • Deletion — request deletion of your account and associated data.

To exercise any of these rights, email us at privacy@keepsafe.sg. We will respond within 10 business days.

6. Cookies

We use strictly necessary session cookies for authentication. We do not use tracking cookies or third-party analytics that identify you personally.

7. Security

Your data is encrypted in transit (TLS 1.3) and at rest. Access to production data is restricted to authorised personnel only. See our Security page for details.

8. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you by email or in-app notification at least 14 days before any material change takes effect. Continued use of the service after that date constitutes acceptance of the updated policy.

9. Contact

For any privacy-related questions or requests, please contact our Data Protection Officer at privacy@keepsafe.sg.