Privacy

Last updated: 7 September 2026. KeepLah is operated by ProtoLah. This page explains exactly what the app stores about you and what you can do about it. It is written to be read, not to be survived.

What we store

• Your email address and a hashed password. The password is stored only as a bcrypt hash — it is never stored in a form anyone can read, including us.
• The money information you type in: your entries (what you spent, the label, the amount, the category), your goals, your budget split, your monthly take-home figure and any fixed commitments you add.
• Your in-app game state: Scratch Points, Keeplings owned, streaks, pulls and parcels.
• If you turn on reminders: a push subscription for that specific browser — an endpoint and two public encryption keys the browser gives us. It contains nothing about you personally.

What we do not do

• KeepLah never connects to your bank. There is no bank link, no open banking, no card details. The app only knows what you type into it.
• We do not sell your data, and we do not share it with advertisers.
• We do not put money amounts in notifications. A notification appears on your lock screen where other people can read it, so reminders only ever talk about logging, never about what you have or spent.

Who else touches it

As few parties as possible, and each for one job: Vercel hosts the app, and Neon hosts the database (in Singapore). If you turn reminders on, your browser's own push service — Google, Apple or Mozilla depending on your device — delivers the notification; it receives an encrypted payload, not your account.

Your data is yours

• Export it. Settings has an export button that downloads everything the app holds for you as a JSON file.
• Delete it. Settings has a delete-account button. It removes your account and everything attached to it. It is not a flag or a hidden archive.

Under Malaysia's Personal Data Protection Act 2010 you may also ask us directly for a copy of your data, ask us to correct it, or ask us to delete it. Email [email protected].

Cookies

One cookie, for keeping you signed in. There are no analytics or advertising cookies.

Changes

If what we store changes, this page changes with it and the date at the top moves.