Privacy Policy

Effective date: March 21, 2026

1. Overview

This Privacy Policy explains how In House Advantage LLC ("In House Advantage", "we", or "us") collects, uses, and protects personal information when you use the Keywords.app mobile applications (iOS and future Android), the website at https://keywords.app, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

Data storage and Google Ads access (summary for app stores)
Keywords.app uses Google OAuth to access your own Google Ads account data with limited scopes (profile email and Google Ads) so you can view and analyze your campaigns in the app. We store your account email and encrypted OAuth tokens on our servers, but we do not store or aggregate any Google Ads campaign or performance data on our servers; that data is processed and stored only on your device and is removed when you log out or uninstall the app.

2. Information We Collect

2.1 Account and Contact Information

When you create an account or communicate with us, we may collect:

• Email address (required).
• Optional profile details you may choose to provide now or in the future, such as name, profile photo, and phone number.

2.2 Connected Google Account Information

If you connect a Google account to use the Google Ads integration, we receive:

• OAuth access and refresh tokens associated with your Google account, currently with scopes limited to your profile email and Google Ads.
• Your Google account email address for identification and access control.

Tokens are stored in encrypted form and used only to access your Google Ads data on your behalf as part of the Service.

2.3 Google Ads Data (On-Device Only)

When you connect your Google account, the app may retrieve Google Ads campaign and performance data so you can view and analyze it in the app.

• Google Ads data is stored and processed only on your device.
• We do not store Google Ads metrics or campaign data on our servers and do not aggregate it server-side.

2.4 Usage and Device Information

We may automatically collect certain information when you use the Service, such as:

• Device type, operating system, app version, and device identifiers.
• Log information such as IP address, pages or screens viewed, time and date of use, and error or crash data.
• Product analytics data such as feature usage, session duration, and user interactions, collected via PostHog (see Section 2.6).

This information is generally collected using standard web and app technologies and used to operate, secure, and improve the Service.

2.6 Product Analytics (PostHog)

We use PostHog, a product analytics platform, in our iOS app and web app to understand how users interact with the Service. PostHog may collect:

• Feature usage events (such as which screens you visit and actions you take within the app).
• Session information such as session duration and frequency of use.
• Device and browser information such as device type, operating system, and screen size.
• IP address (used for approximate geolocation and then discarded by PostHog).

PostHog does not collect or have access to your Google Ads data. Analytics data is used solely to improve the Service. For more information, see PostHog's privacy policy.

2.7 Payment and Transaction Information

If you purchase a subscription or in-app product, payment is processed by the relevant app store or payment provider (for example, Apple or Stripe). We do not receive your full payment card number. We may receive limited transaction information such as subscription status, product purchased, and billing period.

3. How We Use Information

We use the information we collect to:

• Create and manage your account and provide the Service.
• Connect to your Google account (if you choose) and retrieve Google Ads data for your use in the app.
• Communicate with you, including service-related messages and support responses.
• Operate, maintain, and improve the app, website, and infrastructure.
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information.

4. Legal Bases (EEA/UK Users)

Where GDPR or similar laws apply, we process personal information based on:

• Performance of a contract: to provide and maintain your account and the Service you request.
• Legitimate interests: to improve the Service, prevent abuse, and protect our legal rights, where these interests are not overridden by your rights.
• Consent: for certain communications or optional features, which you may withdraw at any time.
• Compliance with law: where necessary to comply with legal obligations.

5. How Long We Keep Information

We keep personal information only as long as necessary for the purposes described in this policy or as required by law.

• Account email addresses as business records: Your account email is treated as a business record. After your account is closed, we retain your email address in plain form for up to 90 days for record-keeping and to resolve account-related questions.
• Hashing after 90 days: After this period, we convert your email address into a non-reversible hash. The hash cannot be used to contact you and is used only to confirm that a particular email address previously corresponded to an account (for example, if you contact us and need to prove prior usage).
• Absolute deletion on request: You may request absolute deletion of your personal information. Subject to legal obligations to retain certain records, we will delete your personal information from our active systems within 3 business days of verifying your request.
• Google Ads data and tokens: Google Ads data in the app is stored on your device and is removed when you log out of the app or uninstall it. Encrypted Google OAuth tokens are retained only as long as needed to provide access to your Google Ads data and are deleted when you disconnect your Google account or delete your account.

6. How We Share Information

We may share personal information in these limited circumstances:

• Service providers: With third-party vendors that help us provide the Service (for example, hosting, email delivery, analytics, and payment processing), under appropriate confidentiality and data protection obligations. Current providers may include Google Analytics, PostHog, Resend, Xano, and Stripe.
• Legal and safety: When required by law or legal process, or when necessary to protect our rights, property, or safety, or that of users or others.
• Business transfers: In connection with a merger, acquisition, financing, or sale of all or part of our business, personal information may be transferred as part of the transaction, subject to this Policy or a successor policy that is at least as protective.

We do not share your Google Ads campaign metrics with third parties for their independent marketing or analytics purposes.

7. Cookies and Similar Technologies

Our website and app may use cookies and similar technologies to remember your preferences, maintain sessions, and understand how the Service is used.

You can control cookies through your browser or device settings, but disabling certain cookies may affect some functionality.

8. Your Rights and Choices

Depending on your location, you may have some or all of the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal obligations.
• Restriction or objection: Request that we restrict processing or object to processing based on legitimate interests.
• Data portability: Request a copy of your personal information in a commonly used, machine-readable format where applicable.
• Marketing choices: Opt out of marketing emails at any time using the unsubscribe link or by contacting us.

To exercise these rights, contact us using the details in the "Contact Us" section. We may need to verify your identity before fulfilling your request.

Users in the EEA, UK, and certain U.S. states (such as California) may have additional rights under local law and may have the right to lodge a complaint with a supervisory authority or regulator.

9. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will take steps to delete it.

10. International Data Transfers

Your information may be processed and stored in the United States and other countries where our service providers operate. Where required by law, we implement appropriate safeguards for international transfers, such as standard contractual clauses.

11. Security

We use commercially reasonable measures to help protect personal information from loss, misuse, and unauthorized access, disclosure, alteration, or destruction.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, our practices, or legal requirements. When we do, we will update the "Effective date" above and may provide additional notice where required by law.

Your continued use of the Service after any changes become effective signifies your acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, or if you wish to exercise your rights, please contact:

Daniel Thies
Email: help@keywords.app
In House Advantage LLC
6242 SW Trellis Dr.
Corvallis, OR 97333