KeeperPlus Privacy Policy

Last Updated: November 1, 2026

KeeperPlus ("KeeperPlus", "we", "us") is a record-keeping app for iPhone and Android, with a web app at keeperplus-app.web.app, that helps Canadian self-employed people and small businesses track the money they receive and spend, keep their tax slips, and prepare a tax package for their accountant. KeeperPlus never connects to the CRA, Revenu Québec, your bank or any government system, and it never files anything for you. This policy explains what information we collect and how we use it.

1. Information We Collect

• Account Information: When you sign in with Apple (iPhone and web) or Google (iPhone, Android and web), we receive an account identifier and the email address and name you choose to share. The same account works in the app and on the web.
• Receipt & Invoice Data: Photos and PDFs of receipts and invoices you scan or import, extra files you attach to an expense, expenses you enter by hand, and the text extracted from documents (merchant, dates, amounts, tax, invoice numbers, line items, and categories you assign).
• Income Data: Income you record or scan (who paid you, dates, amounts, GST/HST and QST collected, paid or unpaid status), recurring income, invoices you create (your client's name, email and address as you enter them, items, totals and the invoice PDF), and figures read from platform earnings statements.
• Tax Slips: Photos or PDFs of tax slips you add (for example T4, T5, T3, T2202, RRSP receipts and Québec relevés) and the box amounts read from them. From your Social Insurance Number we store only the last 3 digits. The full number exists only in the slip image you scanned, which is stored like your other documents.
• Bank Statements: If you import a bank or credit-card statement file you downloaded (CSV or PDF), it is uploaded so we can read the transactions, then deleted from our storage right after reading, whether or not reading succeeds. Only the transactions you tick are saved, without the statement. We never ask for or store your bank login, and we never keep full account numbers (at most the last 4 digits are shown).
• Tax Profile and Related Records: Your legal and business names, GST/HST and QST numbers, province, the situations that apply to you (for example employee, self-employed, landlord), rental properties, vehicles and kilometres, capital assets, and how an expense is used (for example business, medical or donation, with the details you add such as a family member, charity number or child's name).
• Accountant Details and Tax Packages: The name, firm, email and phone of your accountant if you enter them, and the tax packages you prepare (the year, the files in the package, a private link, a hashed PIN, the expiry date, and how many times and when the link was opened).
• Web Payments: If you subscribe on the web, Stripe collects your payment details and billing address. We receive your subscription status, plan, renewal date and a Stripe customer ID, never your card number.
• Usage Data: Basic app usage statistics (Firebase Analytics on Android) used to improve the app. We do not use advertising identifiers and show no ads.

2. How We Use Your Information

• Provide the KeeperPlus service — scanning, importing, storing, and organizing your receipts and invoices
• Extract merchant, date, total, and HST/GST so records are tax-ready
• Sync your data across your devices when you are signed in
• Generate reports, form worksheets (for example T2125, GST/HST, T776, T777, TP-80 and QST) and tax packages for your accountant to review. Worksheets are prepared from your entries and are not filed with any government. We do not calculate your income tax payable or refund
• Ask you when a document could be income or an expense, and flag documents you already saved, so income and expenses are never mixed
• Improve and optimize the app

3. Data Storage and Security

• Your images, documents, and data are stored securely using Firebase (Google Cloud)
• All data is encrypted in transit and at rest
• Your data is accessible only to you through your authenticated account
• Tax package links: When you prepare a tax package, we create a private link and a 6-digit PIN that we show you once. Anyone who has both the link and the PIN can open and download the package, so send them separately and only to your accountant. We store only a hash of the PIN. After 5 wrong PINs the link locks for 15 minutes. Links expire after 30 days, after which the package file is deleted; you can turn a link off in the app at any time, which deletes the package file right away. KeeperPlus does not email your accountant: you choose how to send the link.
• We do not sell, rent, or share your personal data with third parties for marketing purposes

4. Data Retention & Account Deletion

• Delete your account in the app: Settings → Delete Account (iPhone, Android and web). This permanently deletes your account, expenses, income, invoices, tax slips, recurring income, scheduled payments, rental properties, vehicles, assets, tax profile, all stored documents and attachments, and any tax packages (their links stop working first). If you subscribed on the web, your Stripe subscription is cancelled.
• Or by email: write to info@keeperplusapp.com from the email address on your account and we will delete your account and data within 30 days.
• Your data is retained while your account is active

5. Your Rights

• Access your personal data
• Export your data (PDF, CSV, and other formats)
• Delete your account and all associated data

6. Third-Party Services

• Apple Sign In: Secure authentication on iPhone and on the web.
• Google Sign-In: Secure authentication on iPhone, Android and the web.
• Apple App Store / Google Play: In-app subscriptions and purchases are processed by Apple or Google; we receive only the subscription status, never your payment details. On iPhone, the app sends Apple's signed purchase records to our server so we can confirm your subscription on all your devices.
• Stripe: Processes subscriptions and purchases made on the web, including GST/HST or QST based on your billing address. Stripe handles your card details under its own privacy policy (stripe.com/privacy).
• Firebase (Google): Cloud storage and synchronization.
• Apple Vision Framework: On iPhone, a backup on-device text reader used only if our server cannot be reached (no data leaves the device).
• Google Cloud Document AI / Gemini: Receipts, invoices, tax slips, platform statements and bank statement files you scan or import are processed to extract merchant or payer, dates, totals, tax, line items, slip boxes and transactions. The reader is instructed to return only the last 3 digits of a SIN, and our server removes any longer SIN or full account number from the result. This processing is performed by a sub-processor acting on our behalf to provide the feature; the data is not used to build or improve general-purpose models and is not sold.

7. Children's Privacy

KeeperPlus is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the new policy here and update the "Last Updated" date.

9. Contact Us

Questions about this Privacy Policy? Contact us at info@keeperplusapp.com.