Legal
Privacy policy
Last updated: September 2026 · Applies to billkeep.ing
The short version
We collect your email address (and optionally your first name) so we can tell you when BillKeep opens. We use privacy-friendly, cookieless analytics to understand how the page is used. Everything we store is encrypted on Amazon Web Services, and your data is never used to train AI or machine-learning models. We never sell data, never run ads, and never ask for your bank credentials.
Who’s responsible for your data
BillKeep operates billkeep.ing and acts as the data controller for the information described in this policy — meaning we decide why and how it’s processed, and we’re responsible for handling it properly. You can reach us about anything in this policy at [email protected].
What we collect
Information you give us:
- Email address — required to join the waitlist and to create an account.
- First name — optional; only used to greet you in emails.
- Consent — we record that you asked to be emailed, and when.
- Signup context — which part of the page you joined from (e.g. the calculator), so we know what people find useful. Calculator entries themselves never leave your browser.
- Subscription details — in the app, the subscriptions you choose to track (service names, amounts, billing cycles, renewal dates), stored to provide the service.
- Correspondence — if you email us, we keep the conversation and your address so we have context if you write again.
Information collected automatically:
- Anonymous usage stats — page views and button clicks via cookieless analytics. No cookies, no fingerprinting, no cross-site tracking.
- Security data — standard server logs (including IP addresses) and the results of Cloudflare Turnstile bot checks, used to keep the site and signup endpoint safe.
What we don’t collect
Bank credentials, card numbers, transaction data, your location, your contacts, or the contents of your inbox. BillKeep works on information you type in — nothing is scraped or pulled from your accounts.
Your subscription data
The subscriptions you enter are stored encrypted on Amazon Web Services and used only to provide the service to you: showing every recurring charge in one place, reminding you before you’re billed, and totaling what they cost each month and year.
It stays yours — you can edit or delete entries at any time, and closing your account deletes them for good. It’s never sold, never used for advertising, and never used to train AI or machine-learning models.
Never used for training
Your data is never used to train AI or machine-learning models — ours or anyone else’s. It isn’t sold, rented, or shared for advertising either.
The legal bases we rely on
If you’re in the EU, UK, or a similar jurisdiction, we process your data under these legal bases:
- Consent — you asked to join the waitlist and be emailed. You can withdraw consent anytime via the unsubscribe link.
- Contract — storing your subscription details and account so we can provide the service you signed up for.
- Legitimate interest — keeping the site secure, preventing abuse, and understanding aggregate usage to improve the product.
Who processes it
A small number of service providers help us run the site. Each is bound by contract to keep your data confidential and to process it only on our instructions:
- Amazon Web Services — hosts our servers and database; all data is stored encrypted at rest.
- Cloudflare — hosting and bot protection (Turnstile).
- Email provider — stores the waitlist and sends double opt-in confirmations and the launch announcement.
- Analytics — a cookieless, GDPR-friendly analytics service that reports aggregate numbers only.
That’s the whole list. No data is sold or shared beyond what’s needed to run this page — the only other exceptions are if the law requires it, or if BillKeep is ever acquired (in which case we’d tell you before your data moved).
Where your data lives
Data is stored on Amazon Web Services infrastructure, encrypted at rest and in transit. If you’re outside the region where our servers are located, your data may cross borders — where required (for example, for EU and UK residents), we rely on recognized safeguards such as Standard Contractual Clauses.
How long we keep it
Waitlist emails are kept until you unsubscribe or ask us to delete them, or until the waitlist converts to early-access accounts — at which point you’ll be told exactly what carries over. Subscription data is kept while your account is active; deleting entries or closing your account removes it for good. Server logs rotate out on a short cycle.
Security
All traffic is served over HTTPS, and data is encrypted at rest on Amazon Web Services. Access to production systems is limited to the people who need it to run the service. Form submissions are protected by rate limiting and Cloudflare Turnstile. No system is perfect, but we collect so little that there’s very little to lose — and if a breach ever affected your data, we’d tell you promptly.
Your rights
Wherever you live, you can ask us to:
- See the data we hold about you (access)
- Fix data that’s wrong (correction)
- Delete your data (erasure)
- Give you a copy in a portable format (portability)
- Stop or restrict a particular use (objection / restriction)
- Withdraw consent at any time — every email includes an unsubscribe link
Just email [email protected]. Deletion means deletion — we don’t keep “just in case” copies. If you’re in the EU or UK, you can also complain to your local data-protection authority. California residents have equivalent rights under the CCPA — and since we don’t sell or share personal information for advertising, there’s nothing to opt out of.
Children
BillKeep is not directed at children, and we don’t knowingly collect data from anyone under 13. If you believe a child has signed up, contact us and we’ll delete the data.
Changes
If this policy changes meaningfully, we’ll say so on this page and email the waitlist before the change applies.
Contact
Questions, access requests, or deletion requests: [email protected]