Keen Drop is the only Keen app with a server. The other Keen apps keep everything on your phone; this one exists to hand the photos of a night to the people who were there, so those photos have to travel. This page describes Keen Drop and nothing else.
Keen Drop is made by Ubique Technologies OÜ (Estonia; registry code 17102934, Ahtri tn 12, 15551 Tallinn), the data controller for the processing described here. Contact: contact@ubique-technologies.com.
You sign in with Sign in with Apple, and there is no other way in. We never receive an email address at all, not even one of Apple's relay addresses: the app asks Apple for your name and for nothing else, so no address is ever sent to us. There is no password, so there is nothing for us to store or lose.
Your profile holds a display name, a @username you pick, your date of birth, and — if you add them — a gender, a one-line bio and a small profile photo. That photo is uploaded, because it is what the people in your albums see next to your name.
Your date of birth is never shown to anyone. We keep it to apply the age limit in section 12 and for nothing else. A gender is optional and you can leave it unset.
Accounts and photos are stored in the European Union.
Nothing is uploaded until you tap Drop. The app reads your photo library to find candidates from a night and show them to you; the ones you do not pick never leave the device.
When you drop a photo, two copies travel: a preview (1600px) and the original file, exactly as your camera wrote it. Both are encrypted in transit and at rest, stored with Cloudflare R2 in the European Union.
An album also takes clips of up to 15 seconds. A clip is re-encoded to 1080p on your iPhone before it is uploaded, so what travels is not the file your camera wrote: it is a delivery copy of it. Its preview is a single still frame, not a shorter video.
A clip keeps its sound, and sound is the part worth thinking about before you drop one. A photo captures whoever was in front of the lens; a clip captures whoever was audible, including people who are not in shot and never saw a camera pointed at them. Keen Drop does not strip the audio, because a silent clip pretends to be something it is not. It is declared as audio data on the App Store page, and it is why this paragraph exists.
The microphone permission is a separate matter: it is used only while you are recording video inside the app. Keen Drop never listens on its own.
Originals are deleted 30 days after the album is created. That is the product, not a limitation to work around: the app shows the day count on every album, and saving every photo back to your camera roll is free and always available before then. With Pro, a person in the album can choose to keep that album's originals, album by album, and only for albums that two or more people dropped into; nothing is kept on its own. While at least one such subscription covers the album its originals stay; when it ends, the 30 days start again from that moment. Previews are smaller and are kept while the album exists.
For a clip, the clock means something heavier, and the app says so before you drop one. When a photo's original goes, the 1600px preview stays and it is still the photo. When a clip's original goes, what stays is one frame of it: the clip itself is gone. The app draws that frame as a frame, with no play button and the reason on screen.
Every album has a switch that strips the location from each photo and clip on your iPhone, before anything is uploaded. It is checked afterwards, on the file that is about to be sent: if the location cannot be removed, the file is not uploaded at all. With the switch off, what travels is the location exactly as your camera wrote it inside the file, coordinates and all — not a rounded-off neighbourhood — and the album uses it to place a pin on your map. Keen Drop never asks iOS for your location: what it knows comes from the files you chose to drop.
An album is visible to the people it belongs to. Its creator can also share it with their friends, who can look but cannot download the originals — the full-quality file stays with the people who were there, because a night out has faces in it that never agreed to be handed further. For the same reason a clip does not play for them: a clip has only one copy and that copy is the original.
An album can also be made public, and only one way: everyone in the album has to vote yes — everyone, not only the people who dropped photos, and not a majority, and not the person who created it. Withdrawing your vote, at any time, makes the album private again immediately, and until the last vote is in nothing changes.
There are no followers and no algorithmic feed. An album that every one of its people voted public shows on the map to anyone with a Keen Drop account, and one withdrawn vote makes it private again at once. Reactions, comments and tags are visible to the people in the album and to nobody else.
Who can see what is enforced in the database itself, row by row, not only in the app.
If someone tags you in a photo, undoing it is your decision alone: you can remove the tag or hide the photo from your profile at any time, and it disappears for everyone.
Blocking someone is total, and it works in both directions. Once you block a person, their photos, clips, comments, reactions and profile disappear for you, and yours disappear for them, in every album you both happen to be in. Neither of you can invite or tag the other again. It is enforced in the database, not only in the app, so it holds even for a request the app never makes.
The list of people you blocked is readable only by you, and only you can undo it. It is in Settings, under Blocked people.
Anything can be reported — a photo, a clip, a comment, a profile or a whole album — from the item itself. Reporting hides it for you immediately, whatever anyone else decides afterwards, and you can undo that in Settings under Hidden by you. A report also goes to a person on our side, who reads it, and takedowns come before anything else; while that happens the reported item can be put out of sight for everyone. Nothing is deleted by a report: the item is held, and the person who posted it keeps seeing their own copy, marked as under review.
Before an album can be made public, whoever publishes it has to accept the content rules — a screen listing what cannot be posted, with a zero-tolerance statement. That acceptance is recorded on our side and required there, not merely asked for in the app. Accounts that break those rules are closed.
If you allow them, we store the notification token iOS gives your device so we can tell you before an album's originals expire. The token identifies the installation, not you, and it is deleted as soon as Apple tells us it is no longer valid.
Subscriptions are processed by Apple through your Apple ID. We receive no card details and no billing identity. Because the plan has to be known by the server too, Apple's signed receipt is validated through RevenueCat, our subscription processor, which returns only whether the plan is active and until when.
Two features use an AI provider, Anthropic, and both send photos to it over an encrypted connection (TLS), solely to produce the result you see:
Per our agreement with the provider, this content is not used to train AI models and is processed transiently, not stored on their side.
You have the rights of access, rectification, erasure, restriction, portability and objection; write to contact@ubique-technologies.com. You may also lodge a complaint with your supervisory authority (in Estonia, the AKI).
Keen Drop is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.
Everything travels over TLS and is stored encrypted at rest. Access between accounts is enforced by row-level rules in the database, so a mistake in the app cannot hand someone an album they are not in. Secrets never ship inside the app: the phone never talks to our storage provider or to the AI provider directly.
We will post any changes here and update the effective date. Material changes will be flagged inside the app.