Privacy Policy

Effective date: 3 October 2026 · Version 1.6

This policy explains what personal information Keep Above collects, why, who receives it, how long it is kept, and what you can do about it. It covers the Keep Above app for iPhone, iPad and Android, the keepabove.com website, and messages you send us. Manandai Ltd is responsible for your information.

1. Who we are

Keep Above is made by Manandai Ltd (“we”, “us”, “our”), a company registered in New Zealand, at Suite 1179, Unit A, Level G, 26 Hobson Street, Auckland City 1010, New Zealand. We decide how and why your personal information is used, which makes us its “agency” under New Zealand’s Privacy Act 2020 and its “controller” under European and UK data protection law.

For anything about your privacy, email our privacy officer at support@keepabove.com.

This policy doesn’t cover our affiliate program for creators, which has its own privacy notice, or the services of Apple, Google and other companies you use alongside Keep Above, which have their own policies.

2. What we collect

Your account

Your email address and password. Your password is handled by Google’s Firebase Authentication and stored in a form that can’t be read, so we never see it. We also keep when you created your account, when you last signed in, and when you last opened the app, in your phone’s local time. We keep which version of our Terms of Service you accepted, and when.

When you sign up, we record your phone’s time zone as your home time zone. It sets what day it is for the budgets you own, and you can change it in the app’s settings. If you share a budget or join one, you also give a name to show to the other people in it.

What you put into Keep Above

Your budgets and everything in them: balances, income, bills and other spending, categories, dates, amounts set aside, goals and plans, the notes you add, and when you’ve asked to be reminded about something. Depending on what you use, that includes:

• bills and incomes: whether an amount varies, when a free trial’s first charge comes, whether an income counts only once it lands, whether a date that falls on a weekend moves, and a note, such as a reference;
• savings and credit cards: a target and the date you’d like to reach it, a credit limit, the day a card’s payment is due, any intro rate and the day it ends, and a starting balance, so the app can show what’s been saved or paid off since then;
• loans and payment plans, including who a loan is with, its payments, whether a lump sum at the end is counted, and the day it was paid off early or the month it’s written off;
• home loans, including a home value if you enter one, details from your loan documents such as when it ends, how interest is compounded and a yearly allowance for paying more, your own marks on what’s left, which of your budgets’ balances count as money kept against it, and a record of the payment changes you’ve put into the expense it follows;
• trip plans: places, dates, how you’re travelling, costs (with any amount you typed in the local currency and the date of the rate used), lists, notes, and the names of the people on the trip;
• shared bills: who pays what and how each bill is split, including on a single date, whether an amount varies and what it came to, and any last date set ahead;
• event plans: costs (and, for a cost priced per head, the figure a head and the plan’s headcount), a total you set for the plan, its day and any last day, who paid, money offered or received, and the people involved;
• occasions: people’s names, dates such as birthdays, gift ideas and the gift chosen for someone, totals and amounts, what things came to, and whether an occasion’s name is kept off its savings goal;
• things you own: what they cost, dates such as when a warranty ends or a cost is due, how much you use them (for a car, how far it goes), and notes, such as a serial number;
• shopping lists, including notes on items, where you get them, the order of the aisles and the days you shop.

We also keep your settings, such as currency, number format and the order you put your budgets in, and what you save in some tools, such as your favourite tools.

This is information you choose to enter, and it can say a lot about your life — for example what you earn, what you spend on your health, or where you’re travelling. We treat all of it as private and use it only to run Keep Above for you and the people you share it with.

Shared budgets

When you share a budget or join one, we keep the names people use, who is a member and what they can do, when they joined, the invite code in scrambled form (with its budget, what it lets people do and when it expires), and a list of recent changes showing who changed what and when, such as an amount or a date changed, a payment recorded, or a trip or event plan marked settled.

Where a budget splits costs between people — a trip, shared bills or an event plan — we keep each person’s share, whether they accepted it and which of their budgets it went into, and any payments people record between themselves, with the amount, date and note. On shared bills, we also keep whether someone says they pay their share by automatic payment to whoever pays the bill, the day someone leaves or is removed, and whether a payment is money held for someone, such as a bond. When someone marks a trip or an event plan as settled, we keep where each person stood at that moment. On shared bills split by income, we keep the income figure each person adds. On a shopping list, we keep who added, ticked or marked each item.

Your subscription

Whether you have Premium, which plan, when it started and renews, and the store’s transaction references. This comes from Apple or Google through RevenueCat, the service that manages our subscriptions. We never receive your card or bank details.

When the screen that offers Premium opens, the app tells RevenueCat that it was shown and when, so that we can count how many people who see it go on to subscribe.

If you share budgets, our server checks with RevenueCat whether your Premium is active, so that it can cover the people you share with. It checks when you create an invite, when someone joins, when your subscription changes, and once a day, and it keeps whether your Premium is active and when the current period ends.

How you found Keep Above

• Apple Search Ads. On iPhone and iPad, if you downloaded Keep Above after tapping an Apple Search Ads ad, Apple gives the app a token that lets RevenueCat look up which ad campaign led to the download. This doesn’t use your device’s advertising identifier.
• Affiliate links. Some creators recommend Keep Above through our affiliate program, which runs on Insert Affiliate. The first time you open the app, it sends Insert Affiliate your device’s model, operating system version, screen size, time zone, language and region settings and the time, which, with your IP address, lets Insert Affiliate match the download to a recent tap on an affiliate link. On iPhone and iPad the app also checks your clipboard once for an affiliate link code and sends it only if it finds one; on Android it reads Google Play’s install referrer. If there’s a match — or you open an affiliate link or enter an affiliate’s code — that affiliate’s code, with a random code the app made for your device, is stored with your subscription record and in crash reports, so the creator can be credited and any offer applied.
• Other ads. We also run ads on services such as Google and Microsoft Bing that lead to the App Store or Google Play. The stores tell us how many downloads each campaign brought, not who downloaded. For our Google ads, Google Play also tells our Google Ads account how many subscriptions were bought after a download from an ad, and what they were worth, not who bought them.

Crash reports

If the app crashes or hits an error, Google’s Firebase Crashlytics records what the app was doing, the device model, operating system and app version, free memory and storage, identifiers for the app installation, and your account’s user ID. Reports also carry a few facts that help us reproduce problems, such as whether you have Premium, how many budgets you have and share, whether notifications are allowed, and the affiliate code you came through, if any. Where the app notes which budget or entry it was working on, it records a short code instead of the name, but an error message can occasionally include the name of a budget or goal.

Feedback and emails

If you send feedback from the app — a rating, a bug report or an idea — we receive what you choose and write, where in the app you sent it from, your user ID, and your language setting, platform and app version. A bug report or idea also says which part of the app it’s about and whether we may email you about it; if you say yes, we use your account’s email address. It includes your phone’s model and operating system only if you choose to include them. If you email us, we receive your email address and whatever you send.

How Keep Above is used

To understand how Keep Above is used, our own dashboard keeps a record for each account made since 1 July 2026, under a coded version of the user ID: the platform, country and app version, when the app was first opened, how you found Keep Above (as above), whether you’ve made a budget, and how many entries you have — a count, never what they say. For every account, it also notes which days the app was opened in the last 35 days. It’s built from the information above, and only the people who run Keep Above can see it.

Technical information about the app

Keep Above is built with the Unity engine, which sends Unity Technologies anonymous statistics about the device’s hardware and software, such as its model and operating system.

What we don’t collect

We never ask for bank logins, card numbers or account numbers, and notes hold whatever you type, so please keep those out of them too. Keep Above doesn’t collect your precise location, contacts, photos, camera or microphone, doesn’t use your device’s advertising identifier, and doesn’t contain ads. Your home time zone shows roughly where you live, but not where you are.

You don’t have to give us anything, but without an email address and password we can’t create an account, and Keep Above only works with the information you enter. The demo works without an account; its sample data isn’t yours and nothing you do in it is saved, but the technical details described above are still collected.

3. Information about other people

This section is also for anyone whose details someone else has put into Keep Above.

• What we hold. Names of people on a trip, in shared bills, in an event plan or in occasions; who a loan is with; the name an owner gives someone they share a budget with; dates such as birthdays, gift ideas and the gift chosen for someone; and each person’s share of a cost, with any payments recorded between people, money held for someone, and where each person stood when a trip or event plan was marked settled.
• Where it comes from. The Keep Above user who entered it.
• What it’s used for. Only to show it in that budget, and in any budget it’s linked to — for example, an occasion’s savings goal carries its name, unless the occasion keeps its name off it — to the people who have access to them; in reminders on their phones, if reminders are on there; and in what a user chooses to send from the app, such as a trip plan with each person’s share. The owner of a shared budget can change the name shown for anyone in it.
• Why we don’t tell each person. We don’t have contact details for the people someone adds, and we don’t collect them just to send a notice. This page is where we explain it instead.
• Legal basis (European Economic Area, United Kingdom, Switzerland): our legitimate interest in providing the features the user asked for.

If you add someone, please only add people who would expect it, and let them know. If someone has added your name to their budget and you want it changed or removed, ask them, or email us and we’ll help. You have the same rights over this information as anyone else in this policy (section 10).

4. What stays on your device

• Reminders. Reminders are worked out and scheduled on your phone by the app itself; nothing goes through a push-notification service, and nothing about your money is sent anywhere to make them. Under Menu → Settings → Reminders, each kind has its own switch — bills, tight days ahead, trips and event plans, rate changes, occasions, things you own, and shopping days — and you pick the time they come. Every kind starts on, and you can switch any of them off there (if you’d turned bill reminders off in an earlier version of the app, the other kinds start off too); your phone still has to allow Keep Above’s notifications. Everything for one day arrives together in one notification. Depending on what you use and which kinds are on, they cover bills, on the day they’re due or 1, 3 or 7 days before, including a free trial’s first charge and a card’s payment due day; money you plan to take out of savings; a heads-up three days before, and the day before, a budget you’re paid into would go below Critical, from what’s entered; things on a trip or event plan; the end of an intro rate, a fixed home-loan rate, an interest-only period or an interest-free period; occasions; warranties and costs on things you own; and the days you shop. Some, such as bills you pay yourself, tight days ahead, occasions and shopping days, come without anything else to set; others come only for the things you ask to be reminded about. You can also choose a reminder to update your balance every 3 days or once a week, counted from when a budget’s balance was last updated, or on each payday. Reminders can include names and amounts, including other people’s names from occasions, and your phone may show them on the lock screen depending on its settings.
• Reminders on more than one phone. The reminder switches and time are saved on each phone, so another phone you sign in on keeps its own. A reminder you set on something in a budget, such as a bill’s heads-up or a reminder on a trip, is saved with that budget, so on a shared budget it comes on every phone the budget is shared with that has that kind of reminder on.
• Opening a reminder. Each reminder carries a note of what it’s about, such as which budget and day, so tapping it opens the matching screen, and the app keeps a note of the last one you opened so it isn’t opened twice. Both stay on your phone.
• Offline copy. The app keeps a copy of your data on the device so it works offline. The copy is cleared the next time the app starts after you sign out or delete your account.
• Setting up a budget. If you stop partway through setting up a budget, the answers you’ve given so far are kept on your phone so you can pick up where you left off. They’re deleted when you finish, start again, sign out or delete your account.
• Settings. Some settings and tool inputs, such as your theme, your reminder switches and time, or an hourly rate you entered in a tool, are saved on the device and stay there until you uninstall the app. So are notes of some prompts you’ve closed, such as the dashboard’s “Anything out of the usual” line, which stays closed until your next payday.
• Motion. If your phone is set to reduce motion (Reduce Motion on iPhone and iPad, or Remove animations on Android), the app reads that setting while it’s open and stops its decorative animations. What it reads isn’t saved or sent anywhere.
• Sending and copying. When you send or copy something from the app — an invite code, a shopping list, a list of things you own, an occasion’s list or someone’s gift ideas, a trip plan, an event plan’s costs, a shared bills record, or a copy of a budget’s data — it goes through your phone’s own share sheet or clipboard to wherever you choose. It doesn’t pass through our servers, and we don’t see what you send or who you send it to. What you send can include other people’s names and amounts, such as each person’s share of a trip. When you paste a list into the app, such as bills while setting up a budget or items for a shopping list, the text stays on your phone and only what you add from it is saved.

5. How we use it

The last column matters if you live in the European Economic Area, the United Kingdom or Switzerland, where each use needs a legal basis.

We don’t sell your information, share it for advertising, use it for targeted ads, or make automated decisions about you that have legal or similarly significant effects. We use the dashboard described in section 2 only to run and improve Keep Above.

6. Who can see it or receive it

People you share with

Everyone in a shared budget can see everything in it, including the names people use, the notes people add, the list of recent changes, each person’s share of a cost, the payments people record and any money held for someone, whether someone says they pay their share by automatic payment, where everyone stood when a trip or event plan was marked settled, and, on shared bills split by income, the income figure each person adds. When a budget adds something to another budget — such as an occasion’s savings goal, or a share of a cost someone accepts — anyone that other budget is shared with can see it too.

A budget can also show things from your other budgets: a home loan, a loan or a cost on something you own shows the payment it follows; a shopping list shows the name and dates of the expense it follows; and a home loan shows how much money is kept against it and the payment changes it has put into the expense it follows. Anyone that budget is shared with can see these, even if your other budgets aren’t shared with them. If the money kept against a home loan is your budgets’ balances, the people you share it with see only the total, not which of your budgets it comes from: that list is saved with your account, which only you can see.

The people in a budget you share can see whether your Premium covers them and until when, and which time zone the budget runs on — your home time zone, which the app shows as a country. If you own more than one shared budget, the people in any of them can see the names of your shared budgets, the names of the people you share them with, what each person can do, when they joined, and whether your Premium covers each of them.

If you’re a member, the owner and the other members see your name, when you joined, what you can do and the changes you make. Your email address is never shown to anyone.

Service providers

These companies handle information for us. Each is bound by a contract or terms that require it to protect your information to at least the standard in this policy. Google and Cloudflare act only on our instructions. RevenueCat can also use limited information to secure and improve its own service. Insert Affiliate decides for itself how it uses what it collects to match downloads to affiliate links, under its own privacy policy.

Apple and Google

Apple and Google sell Premium and process your payment under their own privacy policies. They also provide the download information described in section 2 and show the app’s review prompts.

When the law requires it

We may disclose information if the law requires it, or where it’s reasonably necessary to protect someone’s safety, to prevent fraud, or to establish or defend a legal claim.

If Keep Above changes hands

If Keep Above is sold or merged, your information would pass to the new owner, who would have to keep treating it as this policy describes. We’d tell you before that happens.

7. Where it is stored

We’re based in New Zealand. Your information is stored and processed in the United States by the providers above — our database is in Google’s United States region, and Firebase Authentication runs only from United States data centres — and wherever else those providers operate. Insert Affiliate is in the United Kingdom. We remain responsible for your information under New Zealand law, and we only send it to providers that must protect it to a standard comparable to New Zealand’s, by law or by contract.

New Zealand is recognised by the European Union, the United Kingdom and Switzerland as protecting personal information adequately. Where information from those places goes on to providers in the United States, it is protected by the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified to it, as Google is, and otherwise by standard contractual clauses (with the UK addendum). You can ask us for a copy of the safeguards that apply.

Information held in another country can be accessed by that country’s courts, law enforcement and national security authorities under its laws.

8. How long we keep it

When something is deleted from our systems, Google and our other providers remove the remaining copies from their live and backup systems on their own schedules — for Firebase, within 180 days. We don’t keep separate backups of your data.

9. Deleting your account

Delete your account in the app under Menu → Profile → Delete account. You’ll need your password and an internet connection. If you can’t use the app or reach that screen, email us from your account’s email address and we’ll delete it for you.

When you delete your account, we:

• delete your budgets, settings and sign-in account;
• stop sharing any budget you own — the people in it lose access, and it’s deleted;
• remove you from any budget shared with you, and take back any income figure you added to someone else’s shared bills;
• delete the feedback you’ve sent, and remove your email address from your subscription record at RevenueCat.

Some things stay for a while or with someone else:

• what you added to someone else’s budget stays part of their budget, including your shares of costs and payments recorded there; your name stays where they entered it, and, for up to 90 days, in their list of recent changes;
• on shared bills, what you said about paying your share by automatic payment, and the payments recorded with you, stay part of that household’s record of payments; what you said stops counting from the day you leave the household or delete your account, so no date from then on is counted as paid by you by automatic payment;
• RevenueCat keeps the record of your purchases, and Apple, Google and Insert Affiliate keep their own records;
• crash reports expire after 90 days, and emails you sent us are kept for up to two years;
• settings saved on your device stay until you uninstall the app.

Deleting your account doesn’t cancel a Premium subscription. Cancel it in your App Store or Google Play subscription settings.

10. Your rights and choices

In the app

• See, change or delete anything you’ve entered, or delete your whole account (section 9).
• Get a copy of the incomes, expenses and saving goals you’ve entered, under Menu → Profile → A copy of your data. It covers three kinds of budget — Checking, Savings and Credit card — and puts the ones you own into a table you can paste into a spreadsheet or send as text, with each day’s estimated balance for the next 90 days if you want it. Each budget of those kinds, including one shared with you, also has its own copy under Menu → Budgets. Home loans, loans and payment plans, trip plans, things you own, shopping lists, shared bills, occasions and event plans aren’t in it, and nor is the rest of what we hold about you, such as your account details; ask us for those (below).
• Change the email you sign in with under Menu → Profile → Change sign-in email; you’ll need your password. Firebase Authentication, which already handles signing in, emails a link to the new address, and the new address replaces the old one when you open it. Firebase normally also emails your old address to tell you, with a link to undo the change.
• Leave a shared budget, or, as its owner, remove people or stop sharing.
• Turn each kind of reminder on or off under Menu → Settings → Reminders, or turn them all off in your phone’s notification settings.

By asking us

You can ask us for a copy of the personal information we hold about you, including anything the copy in the app leaves out, to correct it, or to delete it. Depending on where you live, you may also have the right to object to or restrict how we use it, to receive it in a portable format, and to withdraw any consent you’ve given.

Email support@keepabove.com, ideally from your account’s email address, so we can confirm it’s you; we’ll ask for more only if we have a real doubt. It’s free. We’ll respond within 20 working days (and sooner where your local law requires it), and if we need longer or can’t do what you ask, we’ll explain why.

Complaints

If you’re unhappy with how we’ve handled your information, email support@keepabove.com or write to the address in section 16. We’ll acknowledge your complaint within 30 days, look into it without undue delay, and tell you what we found and what we’ve done. You can also complain to a privacy regulator — see section 14.

11. Security

Your budgets can only be read by your account and the people you share them with; our database’s security rules enforce this. Information is encrypted when it travels between your device and our providers, and Google encrypts it where it’s stored. Access to our systems is limited to the people who run Keep Above.

No system is perfectly secure. If a breach of your information is likely to cause you serious harm, we’ll tell you and the relevant regulators as the law requires.

12. Children

Keep Above is for people aged 18 and over. We don’t knowingly collect information from anyone younger. If you think a child has given us information, email us and we’ll delete it.

13. The website and cookies

• No cookies. keepabove.com doesn’t set cookies, and the app doesn’t use them.
• Visit counts. Cloudflare Web Analytics counts visits without cookies. It receives the page, where you came from, your browser and device type, and your country.
• Hosting. The site is hosted by Google’s Firebase Hosting, which logs each request (including your IP address and browser) to keep the site secure and working.
• Fonts. Our pages load fonts from Google Fonts, so Google receives your IP address and browser details when you visit.
• Campaign links. If you arrive through a link carrying campaign tags (such as utm_source), the page keeps those tags in your browser tab and adds them to its App Store and Google Play links, so we can see which campaigns lead to downloads. They’re cleared when you close the tab.
• Calculators. The free calculators run in your browser. Nothing you type into them is sent to us or saved.
• Do Not Track. We don’t track you across other websites, so there’s nothing for a Do Not Track or Global Privacy Control signal to switch off. Apart from the affiliate matching described in section 2, we don’t let other companies collect information about your activity over time and across other websites or apps through Keep Above.

14. Where you live

New Zealand

You have the right to access and correct your personal information under the Privacy Act 2020, and we’ll respond within 20 working days. If you’re not happy with how we’ve handled a complaint, you can take it to the Privacy Commissioner at privacy.org.nz.

European Economic Area, United Kingdom and Switzerland

You have the rights of access, correction, deletion, restriction, objection and portability, and you can withdraw consent at any time without affecting what happened before. Where we rely on legitimate interests, you can object and we’ll stop unless we have compelling grounds. We’ll respond within one month, which can be extended by two months for complex requests; we’ll tell you if that happens. You can complain to a data protection authority, in particular in the country where you live, work, or where you think the problem happened — see the list of European authorities, or in the UK the Information Commissioner’s Office at ico.org.uk.

Australia

We follow the Australian Privacy Principles as good practice. Your information is sent to providers in the United States and the other places listed in section 6. You can complain to the Office of the Australian Information Commissioner at oaic.gov.au, after first giving us 30 days to respond.

United States

In the last 12 months we collected these categories of personal information: identifiers (email address, user ID, device identifiers), customer records (name and account details), commercial information (subscription purchases), internet or other electronic network activity (crash diagnostics, when the app was opened, and information about how you found Keep Above), general location (your country and home time zone), and the budget information you choose to enter, which can include financial information such as income. Your account login (email and password) counts as sensitive personal information under some state laws; we use it only to provide Keep Above. The sources, purposes, recipients and retention periods are in sections 2 to 8.

We don’t sell personal information or share it for cross-context behavioural advertising, and we haven’t done so in the last 12 months. Whatever state you live in, you can ask to know, access, correct or delete your information, and you won’t be treated differently for doing so. You can use an authorised agent, whom we’ll ask to show your permission. If we decline a request, you can appeal by replying to our decision; if you’re still unhappy, you can contact your state attorney general.

California residents: under California’s “Shine the Light” law, we don’t disclose personal information to others for their direct marketing.

Canada

You can access and correct your information, and complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

South Africa

You can access and correct your information, and complain to the Information Regulator at inforegulator.org.za.

15. Changes to this policy

We’ll update this policy when Keep Above or the law changes. The date at the top shows the current version. If a change materially affects how we use your information, we’ll tell you in the app or by email before it takes effect. Earlier versions are available on request.

16. Contact us

Privacy officer, Manandai Ltd
Suite 1179, Unit A, Level G, 26 Hobson Street
Auckland City 1010, New Zealand
support@keepabove.com