KeepsakeTerms of Service
Effective 6 July 2026 · Operator: Ali Muhammad (see imprint)
1. What Keepsake is
Keepsake is document-vault software for Windows, Android and the web, plus this website and the Secure Send relay. Your documents are processed and encrypted on your devices; we provide software, not storage.
2. Licenses
The free tier may be used by anyone, on any number of their own devices. Premium and Family license keys are personal (or household, for Family), non-transferable, and valid for the period stated on the key. Keys are verified offline; you may use one key on all devices belonging to the covered people.
Premium and Family are purchased by invoice and bank transfer. You may cancel for a full refund at any time before your license key is emailed. Requesting the key is a request for immediate delivery of a digital good: once it is sent the sale is final, because an offline key activates on your device and there is no activation server that could switch it off. See the Refund Policy. The free tier lets you evaluate Keepsake indefinitely before buying.
Revocation. We can withdraw a specific key, and we say so plainly rather than leaving it in the small print. Withdrawn keys are listed in a signed file that ships inside the apps and is also published alongside our downloads, so a withdrawal reaches a device on its next app update or update check — never sooner, and never for anyone else's key. We use it in one situation: a key that has been published, resold, or offered for sale by someone who is not us. We contact the person the key was issued to first, and if you are a customer whose key was copied or who bought Keepsake in good faith from someone with no right to sell it, you get a free replacement — you are the person this protects, not the person it is aimed at. Withdrawing a key never affects your documents, which stay readable, exportable and decryptable regardless of license state.
What you may not do with the software. Do not redistribute Keepsake as your own, sell or sublicense keys, or distribute modified builds, key generators, patches or instructions for circumventing licensing. You may reverse-engineer Keepsake for interoperability, security research, or to satisfy yourself about our privacy claims — we publish the vault format and the signing keys precisely so that you can, and we would rather you check than take our word for it.
3. Your responsibilities
- Your password and Recovery Kit are the only ways into your vault. We cannot reset, recover or bypass them. Losing both means permanent loss of access to your encrypted data.
- You are responsible for backups. The apps make this easy (sync, exports, Paper Vault), but the copies are yours to keep.
- Use Secure Send only for content you have the right to share. Illegal content will be deleted and reported where the law requires.
- Do not attempt to disrupt the website, relay or other users.
4. Secure Send
Secure Send stores encrypted blobs (≤10 MB) for at most 7 days or one download, whichever comes first. It is a best-effort convenience relay, not archival storage; do not rely on a share link as the only copy of anything.
5. No warranty; limitation of liability
Keepsake is provided "as is". To the maximum extent permitted by law, our total liability for any claim is limited to the amount you paid us in the twelve months before the claim. We are never liable for loss of data caused by forgotten credentials, device loss, or your cloud provider — by design we cannot hold the keys that would let us prevent it.
6. Continuity
Because licenses verify offline and vaults live on your devices and your cloud, the software keeps functioning even if this website or company ceases to exist. The vault format is documented on the security page so your data remains readable.
7. Termination
You can stop using Keepsake at any time; local data stays on your devices and is yours to export or delete. We may refuse service (e.g. Secure Send) to abusers.
8. Changes & governing law
Updated terms are posted here with a new effective date; material changes are announced on the blog. These terms are governed by the law of the operator's jurisdiction stated in the imprint.