Keep2Protect helps you record and value your home inventory, and we handle your data with care along the way. This policy explains in plain language what data we process, why, on what legal basis, and what rights you have. Keep2Protect is built on one principle: your data stays yours. Your inventory lives on your own device and in your own iCloud, and nothing goes to any AI service until you have explicitly agreed to it.
Contents
- Who is responsible
- What data we process
- Storage on your device and in your iCloud
- AI features: what leaves your device
- Evidence registration, verification and review by your insurer
- Your consent for AI
- Purposes and legal bases
- Subscriptions and payments
- Third parties and sub-processors
- How long we keep data
- Security
- Transfers outside the EEA
- Your rights
- Children
- Changes
- Contact and complaints
1.Who is responsible
Keep2Protect (“the app”) is made and offered by Dimitrios Logothetis, an independent app developer based in Belgium. He is the data controller within the meaning of the GDPR for the processing described in this policy. Where this policy says “we” or “us”, that means him. Keep2Protect was formerly called Casavi.
Questions about your privacy? Email support@keep2protect.com.
2.What data we process
The app is deliberately designed so that we process as little data centrally as possible. In practice:
Content you enter (stays on your device and in your iCloud)
- Inventory details: descriptions, categories, rooms, brand, purchase date, replacement value, estimated current value, condition and notes for your items. For some items you can record extra attributes, such as media details (media type, creator/author and year for books, films and music), whether an item has sentimental value, and whether an electronic device works properly.
- Photos of items and homes that you take or add.
- Documents you attach, such as receipts, warranty certificates or insurance policies.
- Home details: name, optional address, and notes (e.g. wifi code, parking info) that you enter yourself.
- Insurance details for your home: the name of your insurer or broker, your policy number, the e-mail address you send claim files to, and your policy renewal date. You enter them yourself; they live on your device and in your iCloud, and appear on the reports you create.
- Photo metadata: photos you add are stored untouched, including the data the camera embeds (date, time, device type and, for photos from your photo library, sometimes the location). That is what makes a photo usable as evidence. This metadata stays on your device and in your iCloud. Reports show only the capture date and device type, never the location. If you share a photo yourself, its metadata travels with it, just like any photo on your iPhone.
- An optional custom logo that you place on your export documents.
Identity documents: on your device only
If you scan an eID or passport to create a rental handover document, that document is read entirely on your device. The photo and the extracted details are never sent to any server or AI service.
Data needed to make the app work
- Camera and photo access: only to take or pick photos that you add to your inventory. We never open your photo library in the background.
- Microphone access: only when you use voice entry to dictate items.
- Subscription status: whether you have Keep2Protect Pro, received via Apple (see §8). We never receive any card details.
- An anonymous installation ID: a randomly generated number, not linked to your name or Apple account, that our relay uses to enforce usage limits for the AI features (see §4).
- Evidence fingerprints: a SHA-256 hash of every photo, item and report, which the app sends to our relay to obtain a server timestamp (see §5). A hash is a 64-character string from which the photo or item cannot be reconstructed.
- Technical diagnostics: if you allow this with Apple, we receive anonymous crash and performance data via Apple. It contains none of your inventory content.
We collect no advertising identifiers, set no tracking cookies and use no third-party ad trackers. We never sell your data.
3.Storage on your device and in your iCloud
Your entire inventory — items, photos, documents, rooms and homes — is stored locally on your device. This data is not on our servers and we cannot access it.
In addition, Keep2Protect syncs your inventory through your own iCloud account (Apple CloudKit). That keeps your data safe and makes it available on your other Apple devices. It lives in your personal iCloud, encrypted and covered by Apple’s privacy policy; we cannot access it. If you prefer not to sync, you can switch iCloud off for Keep2Protect in your device’s iCloud settings.
4.AI features: what leaves your device
Some Keep2Protect features use artificial intelligence. Only the features below send any data off your device. For the AI features this happens only after you have given your consent (see §6). The last three rows of the table are not AI: the barcode lookup automatically sends only the anonymous digit code of the product, no photo and nothing about you; evidence registration sends fingerprints only (see §5), and fetching the insurer list sends nothing about you at all. Here is exactly what each feature sends, and to whom:
| Feature | What leaves your device | Sent to |
|---|---|---|
| Photo scan (recognising and valuing items) | The home photo you scan, a cropped image of each detected item, the app’s category and room names, and the names of up to 150 items already in your inventory (as context, e.g. to avoid duplicates) | Google Gemini |
| Voice entry (dictating items) | The full transcript of what you said, as text | Anthropic Claude |
| Receipt scan | The photo of the receipt | Anthropic Claude |
| Price by brand | Item name, brand, condition and category, as text — no photo | Anthropic Claude |
| Barcode scan | Only the numeric EAN/UPC product code | UPCitemdb and Open Food Facts |
| Evidence registration (server timestamp) | Only the fingerprint (SHA-256 hash) of a photo, item, dossier version or report, no content (see §5) | Our own relay (Cloudflare) |
| Fetching the insurer list | Nothing about you: the app downloads a list of insurance companies | Our own relay (Cloudflare) |
Our own relay
Every AI request travels through our own secure relay, hosted on Cloudflare. The app never talks to Google or Anthropic directly, and our access keys to those services live on the server — never inside the app. The relay:
- stores no content — no photos, no transcripts, no text;
- keeps a counter per anonymous installation ID to enforce usage limits and prevent abuse; the counter is kept for roughly two days and then expires automatically;
- keeps a cache of barcode lookups (only product codes and the matching product info, no personal data), so the same code doesn’t have to be looked up again and again.
Barcode lookups normally go through this relay too. If it is temporarily unreachable, the app queries UPCitemdb or Open Food Facts directly — and even then, nothing is sent beyond the numeric code.
No model training, short retention at the AI providers
We use Google’s Gemini API on the paid tier, which means Google does not use your data to train its models. Anthropic likewise does not use API data for model training by default. To be completely honest: both providers may keep your input for a short period to detect abuse of their services, after which it is deleted. Keep2Protect itself keeps nothing of what you send — the analysis result returns to your device and stays there.
5.Evidence registration, verification and review by your insurer
Keep2Protect exists so that, after a loss, you have a file an insurer can rely on. For that we offer three features that go a small step beyond “everything stays on your device”. Here is exactly what they do, and above all what they do not do.
Server timestamps (evidence registration)
When you save a photo, add an item or create a report, the app computes a fingerprint of it: a SHA-256 hash, a 64-character string unique to exactly that content. Only that fingerprint goes to our relay. The relay answers with a server timestamp: the fingerprint, the time, and a digital signature from Keep2Protect. The app stores that answer on your device, next to the photo or item.
What this proves: that this photo or this item existed at that moment, independently of your device’s clock. What we do not need for it, and therefore never receive: the photo itself, the item’s name or value, or anything else about you. A fingerprint cannot be turned back into the content.
The relay does not keep these fingerprints. They are signed and returned immediately; the signature can be verified later without anything having been stored. As with the AI features, the relay does keep a counter per anonymous installation ID to dampen abuse (kept for roughly two days).
Registration happens automatically in the background, without a consent screen: no content and no personal data leave your device. Without a network connection a photo or item remains fully usable; registration follows once you are back online.
Verification page for insurers
Our reports, and the e-mails you send to your insurer, carry a verification code or link
(…/verify). Anyone holding that code can check on our verification page whether it was
genuinely issued by Keep2Protect and at what time the corresponding fingerprint was seen. The page shows
nothing else: no photos, no inventory, no name. We do not record who visits the verification page.
Claim files and dossier versions to your insurer
When you send a claim file or a dossier version to your insurer, it goes from your own Mail app, with the report (PDF) attached. Keep2Protect does not send the e-mail and never sees it; the content of your file travels directly from you to your insurer. Your insurer’s name, your policy number and the claims e-mail address come from the details you entered for your home.
For a dossier version the e-mail also contains a review link
(…/review). That link carries a code containing the fingerprint of the dossier version
and of the exact PDF file, again no content. Your insurer’s reviewer can do two things on that page:
- Verify the received PDF. This happens in the reviewer’s browser; the file is not uploaded to us.
- Give a single verdict: “seen, no remarks”, “questions” or “not accepted”, with a comment, their name and e-mail address.
Only that verdict is stored, linked to the fingerprint of the dossier version:
| What we keep | Why | How long |
|---|---|---|
| The verdict (seen / questions / not accepted) and the comment | So you can see it in the app and it can appear on later reports | At most three years, then deleted automatically |
| The reviewer’s name and e-mail address | So you know who gave the verdict and can reach them | At most three years |
| Time and fingerprint of the dossier version | To link the verdict to the right version | At most three years |
We do not keep: your inventory, the PDF, photos or values. Those exist only with you and, once you e-mail them, with your insurer.
The reviewer is usually an employee of your insurer or broker. We process their name and e-mail address as business contact details, on the basis of our legitimate interest in making the review process work. A reviewer can exercise the rights listed in §13 as well. The legal basis for evidence registration and the review feature is the performance of our contract with you: these are core features of the app. You can simply choose not to use the review feature; the rest of the app keeps working as normal.
6.Your consent for AI
Before Keep2Protect sends anything to an AI service for the first time, the app shows a consent screen. It spells out exactly what will be sent and to whom: photos to Google Gemini, text and receipts to Anthropic Claude. You choose Agree or Not now.
- If you choose Not now, all AI features stay off. The rest of the app works as normal: you can add, edit and export items manually.
- You can withdraw your consent at any time in Settings inside the app. From that moment, Keep2Protect sends nothing to the AI services anymore.
- The legal basis for this processing is your consent (Art. 6(1)(a) GDPR).
7.Purposes and legal bases
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Providing the app and its features (keeping your inventory, exports, rental handover document) | Content you enter | Performance of the contract |
| Syncing between your Apple devices | Your inventory, in your own iCloud | Performance of the contract |
| Recognising, valuing and entering items with AI | The per-feature data listed in §4 | Your consent (withdrawable in Settings) |
| Usage limits and abuse prevention | Anonymous installation ID with counter | Legitimate interest |
| Managing and activating subscriptions | Subscription status from Apple | Performance of the contract |
| Improving the app and fixing bugs | Anonymous diagnostics | Legitimate interest / your consent with Apple |
| Making evidence verifiable (server timestamps) | Fingerprints (hashes) of photos, items and reports | Performance of the contract |
| Delivering a claim file or dossier version to your insurer | Insurer, policy number and claims address you entered; you send the e-mail yourself | Performance of the contract |
| Showing your insurer’s verdict in the app | Verdict, comment, reviewer’s name and e-mail address, time, fingerprint of the version | Performance of the contract (you) / legitimate interest (reviewer) |
| Reminder to create a new dossier version | Your policy renewal date (on your device only) | Performance of the contract |
| Complying with legal obligations | Limited, where applicable | Legal obligation |
8.Subscriptions and payments
Keep2Protect offers a free version and a Keep2Protect Pro subscription at €4.99 per month or €39.99 per year, with a free 7-day trial. The subscription is billed through your Apple account in the App Store. Payment and payment details are handled entirely by Apple; we never receive card or account numbers. From Apple we only receive what is needed to activate your subscription and keep it valid.
9.Third parties and sub-processors
We never share your data for commercial purposes and never sell it. We do rely on a small number of service providers. Here they are — all of them, by name:
| Party | What data | What for | Where & safeguard |
|---|---|---|---|
| Apple | Subscription status, anonymous diagnostics, your inventory in your own iCloud | App Store, payments, iCloud sync | EU and US · EU-US Data Privacy Framework / standard contractual clauses |
| Cloudflare, Inc. | AI requests in transit (the photos and text listed in §4), anonymous installation ID with counter, barcode cache, reviewer verdicts (verdict, name, e-mail, comment) per dossier version | Secure relay between the app and the AI services (hosting of our relay); storage of review verdicts and the verification and review pages (data processing agreement: Cloudflare Data Processing Addendum) | Global network, US company · EU-US Data Privacy Framework / standard contractual clauses |
| Google LLC | The photos and context of the photo scan (§4) | Image recognition and valuation (Gemini API) | US · paid API tier, no model training · EU-US Data Privacy Framework / standard contractual clauses |
| Anthropic PBC | Voice-entry transcripts, receipt photos, and item name/brand/condition/category for price queries (§4) | Text and receipt analysis (Claude API) | US · no model training via the API · standard contractual clauses |
| UPCitemdb | Only the numeric EAN/UPC product code | Barcode lookup (product name and info) | US · no personal data is sent |
| Open Food Facts | Only the numeric EAN/UPC product code | Barcode lookup for food products | EU (France, non-profit) |
10.How long we keep data
- Inventory data: on your device and in your iCloud, for as long as you keep it. Delete an item and it disappears from sync as well. If you delete the app, you can erase the synced data yourself through your device’s iCloud settings.
- AI requests: Keep2Protect and our relay keep none of it. The AI providers may keep your input for a short period for abuse detection and delete it afterwards (see §4).
- Usage counter: roughly two days per anonymous installation ID, then wiped automatically.
- Barcode cache: product codes and product info only, no personal data.
- Subscription data: as long as needed to manage your subscription and meet legal (accounting) obligations.
- Fingerprints for server timestamps: not stored; only signed and returned.
- A reviewer’s verdict (with name, e-mail, comment, time): at most three years after the verdict, then deleted automatically; earlier on request.
- Photo metadata (date, device, possibly location): for as long as the photo is in your inventory; on your device and in your iCloud only.
11.Security
We take appropriate technical and organisational measures to protect your data: storage on your own device and in your own iCloud, encrypted connections (TLS) for everything that leaves the device, and access to the AI services through keys that live on our server and are never embedded in the app. No service is entirely risk-free; please protect your own device with a passcode and up-to-date software.
12.Transfers outside the EEA
Some of our service providers (Apple, Cloudflare, Google, Anthropic and UPCitemdb) may process data outside the European Economic Area, notably in the United States. Where they do, we rely on appropriate safeguards: the European Commission’s standard contractual clauses and, where the party is certified, the EU-US Data Privacy Framework. In every case this only concerns the limited data described in §4 and §9.
13.Your rights
Under the GDPR you have the right to:
- Access your personal data;
- Rectify inaccurate data;
- Erasure (“the right to be forgotten”);
- Restrict processing;
- Data portability — Keep2Protect lets you export your inventory to PDF and spreadsheet (XLSX);
- Object to processing based on legitimate interest;
- Withdraw consent where processing relies on it — for the AI features you can do this directly in the app’s Settings.
Because your inventory lives on your own device and in your own iCloud, you exercise most of these rights directly in the app yourself (edit, delete, export). For requests to us, see §16.
A reviewer at an insurer who gave a verdict through our review page can also ask us to access or erase their name, e-mail address and comment. When we erase a verdict, it disappears from the policyholder’s app as well.
14.Children
Keep2Protect is not aimed at children under 16 and we do not knowingly collect data from children. If you believe a child has nevertheless provided us with data, please get in touch and we will delete it.
15.Changes
We may update this privacy policy from time to time, for instance when new features are added. The date at the top shows the latest revision. For significant changes we will let you know in the app or through another appropriate channel.
Version 2.2 (14 October 2026): only the name of the app changed, from Casavi to Keep2Protect. The content of this policy is otherwise unchanged.
16.Contact and complaints
Questions, or a request about your data? Email support@keep2protect.com.
Not happy with how we handle your data? You have the right to lodge a complaint with the Belgian Data Protection Authority (Drukpersstraat 35, 1000 Brussels, Belgium), or with the supervisory authority in your own EU country.
© 2026 Keep2Protect · This document was last updated on 14 October 2026.