Legal
Privacy Policy
How LossKeeper handles your information, in plain language. LossKeeper is free, has no ads, and keeps your claim file on your own device unless you choose otherwise.
The short version
- Your claim file stays on your device. Without an account, it is stored only in this browser and does not leave it unless you export it, print it, or send part of it to a business.
- An account is optional. If you create one, a backup copy is kept with our database provider (Supabase, US region) so you can use it on other devices. LossKeeper’s support staff can view it, read-only, to help you when you contact us. Every view is logged.
- We do not sell or share your personal information. No ads, no ad pixels, no data brokers. If we use analytics, they are cookieless and count visits in aggregate. [Confirm at launch: analytics installed or remove]
- A business gets your details only when you ask. If you tap to request contact, we send your name, email, phone and a short claim summary to the one business you picked.
- AI drafting is optional. If you use it, the text you typed is sent to Anthropic to structure it. Nothing is saved until you approve it.
- You stay in control. Export a backup, print a PDF, erase everything with “Start over,” or delete your account at any time.
Who we are and what this covers
LossKeeper is operated by [LossKeeper LLC] (“LossKeeper,” “we,” “us”), [mailing address]. This policy covers the LossKeeper web app, its website pages, the business listing portal, and the emails we send.
It does not cover the businesses listed in our directory. Once a business receives your contact request, its own privacy practices apply.
Your claim file lives on your device
LossKeeper is built “local-first.” Everything you enter — your claim log, photos, estimates, payments, living expenses, contents inventory and documents — is saved in your browser’s storage (IndexedDB) on the device you are using.
- Without an account, we never receive your claim file.
- Anyone with access to your device and browser profile can open it. Use a screen lock, and use “Start over” before leaving a shared or borrowed computer.
- Clearing your browser’s site data, or uninstalling the app, erases the device copy. Export a backup if you have no account.
What we collect
We collect only what is needed to run the features you use.
| Information | When we receive it | Examples |
|---|---|---|
| Claim file | Only if you create an account and sync | Log entries, photos, documents, estimates, payments, receipts, contents lists, property address, insurer and adjuster names, policy and claim numbers |
| Account details | When you create an account | Email address, password (stored by our provider in hashed form, never readable by us), sign-in dates |
| Contact requests | When you ask a business to contact you | Your name, email, phone, the business you chose, the date, and a claim summary: type of loss, property type, location, insurer, claim number, date of loss |
| AI drafting text | Only when you use “Draft my log entry” | The description you typed, today’s date and your insurer’s name, passed through to Anthropic and not stored by LossKeeper |
| Technical data | Whenever you load a page | IP address, browser type and request times in our hosting providers’ server logs |
| Aggregate analytics | Whenever you load a page | Page visited, referring site, browser, device type and country, counted without cookies and without identifying you |
| Messages to us | When you email us | Your email address and what you write |
| Business listings | When a business lists itself | See Information about listed businesses |
We do not buy information about you, and we do not combine your information with data from other sources.
How we use information
- To back up and sync your claim file across your devices, if you have an account.
- To send a contact request to the business you choose.
- To return an AI-drafted log entry for you to review.
- To send account emails, such as password resets, security notices and notice of changes to this policy.
- To keep LossKeeper secure, prevent abuse of the directory, and fix problems.
- To understand, in aggregate, which pages are used, so we can improve them.
- To comply with the law.
We do not use your claim file for advertising, profiling, training AI models, or evaluating your claim. We do not send marketing email unless you opt in.
Who we share it with
We share information only with the service providers that run LossKeeper, and with a business when you ask us to. Each provider receives only what its job requires and is bound by contract to use it only for that job.
| Recipient | Role | What it receives |
|---|---|---|
| Supabase | Database, sign-in, file storage and server functions (US region) | Account details, your synced claim file, contact request records |
| Netlify | Website hosting | Technical data in server logs |
| Anthropic | AI drafting, only if you use it | The text you submit for drafting, today’s date and your insurer’s name |
| [Email provider] | Sends contact requests and account emails | Recipient address and message content |
| [Analytics provider, e.g. Plausible] | Cookieless visit counts | Aggregate page-view data; no cookies or persistent identifiers |
| The business you choose | Responds to your request | Your name, email, phone and claim summary |
We may also disclose information if required by law, subpoena or court order; to protect the safety, rights or property of users or others; or as part of a merger, acquisition or sale of assets, in which case this policy continues to apply to information collected under it and we will notify account holders.
We never sell personal information and never share it for cross-context behavioral advertising. No third party is permitted to collect information about your activity on LossKeeper over time or across other websites.
The AI drafting feature
- It is off unless you use it. Nothing is sent to Anthropic unless you tap “Draft my log entry.”
- What you typed, today’s date and your insurer’s name go from your browser to our server function, then to Anthropic’s API, which returns a structured draft.
- The draft appears on your screen. Nothing is saved to your file until you approve it.
- LossKeeper does not store the text you submit. [Confirm: server function does not log request bodies.]
- Anthropic processes the text under its commercial API terms, which [confirm current wording: do not permit training on API inputs by default, and describe how long inputs are retained].
- Leave out details you do not want processed by a third party.
Requests to contact a business
Contact requests require an account. When you tap to request contact, you see which business will receive your details and what will be sent, and you confirm. We then:
- Email that business your name, email, phone and claim summary through [Email provider].
- Keep a record of the request (who, which business, when, and delivery status). The business receives the request by email. LossKeeper admins can see request records to deliver them, handle complaints and prevent abuse.
Once a business has your details, its use of them is governed by its own policies. Our listing terms require businesses to use your details only to respond to your request and to follow anti-spam and telemarketing laws. You can tell a business to stop contacting you at any time, and you can report misuse to us.
“Write them a message” works differently: LossKeeper prepares text on your device for you to copy and send yourself. We do not send or see that message.
Who can see your online copy
- Your online copy is protected by row-level security. Other users can never see it.
- LossKeeper support staff can view your online copy — including photos and documents — read-only, so they can answer your questions when you call or write to us. They cannot change it. Support staff are LossKeeper personnel with individual logins and multi-factor authentication. Every search and every file they open is logged, and only LossKeeper administrators can review that log.
- Support staff use your file only to help you. It is not used for marketing, not shared with insurers or businesses, and not given to any public adjusting firm.
- LossKeeper admins also moderate directory listings and see contact request records.
- Infrastructure-level access (for example, the database owner credentials held for maintenance) is limited to [role], protected by multi-factor authentication, and used only to operate the service — such as restoring a failed backup — or to comply with the law. [Confirm with technical lead.]
- Your online copy is encrypted in transit and at rest by our providers. It is not end-to-end encrypted.
Photos, documents and sensitive details
Claim files often hold sensitive material: photos of the inside of your home, IDs, bank or payment records, policy numbers, medical receipts for living expenses, or other people’s information.
- You decide what to add. Crop or redact what is not needed.
- Photos may carry embedded location data from your camera. Check before sharing a PDF or export.
- A PDF report or JSON backup is an unprotected copy once it leaves LossKeeper. Store and send it with care.
- We use sensitive information only to provide the service to you — never to infer anything about you.
Analytics, cookies and Do Not Track
LossKeeper uses no advertising cookies, ad pixels or cross-site trackers. Our analytics tool ([Analytics provider, e.g. Plausible]) counts visits without cookies and without building a profile of you.
The app uses your browser’s storage for functional purposes only: your claim file, your light/dark theme choice, and, if you sign in, your sign-in session.
Do Not Track. Because we do not track you across websites, there is nothing for a Do Not Track signal to switch off; LossKeeper works the same whether it is on or off. We also treat a Global Privacy Control signal as a valid request to opt out of the sale or sharing of personal information, which we do not do in any case.
How long we keep information
| Information | Kept for |
|---|---|
| Device copy of your claim file | Until you use “Start over,” clear site data or uninstall. We do not control it. |
| Account and online claim file | Until you use “Start over” (claim file) or delete your account (everything) |
| Provider backups of deleted data | Purged within [30] days after deletion |
| Contact request records | [24 months] after the request, then deleted or de-identified |
| AI drafting text | Not stored by LossKeeper; Anthropic’s retention under its API terms [confirm period] |
| Server logs | [30 days], per our hosting providers’ standard log retention |
| Emails with us | [24 months] after the conversation ends |
We may keep information longer only where the law requires it, or to resolve a dispute or enforce our terms, and only for as long as that requires.
Security and breach notification
- All connections use HTTPS (TLS).
- Online data is encrypted at rest by Supabase. Photos and documents are kept in a private storage area reachable only by your signed-in account and, read-only, by LossKeeper support staff.
- Row-level security keeps every claim record away from other users; support access is read-only and logged.
- API keys, including the Anthropic key, stay on the server and are never sent to your browser.
- Admin accounts use strong authentication, and access follows least privilege. [Confirm MFA on all admin and provider accounts.]
No system is perfectly secure. If a breach affects your personal information, we will notify you without unreasonable delay, as required by California Civil Code §1798.82 and other applicable law, and tell you what happened, what information was involved, and what you can do.
Reviewing, changing and deleting your information
- Review and correct. Everything in your claim file can be viewed and edited in the app. You can change your account email in [account settings].
- Export. Download a JSON backup of your file, or print a PDF report, at any time.
- Start over. Erases the claim file on this device and, if you are signed in, the online copy.
- Delete your account. Removes your account, your online claim file and its files. The device copy remains until you clear it.
- Contact requests already sent cannot be recalled from the business. Ask the business directly to delete your details, and tell us if it does not.
- Anything else — email privacy@[losskeeper domain].
Your California privacy rights
California residents have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act. We honor these rights for every user, whether or not the law currently applies to LossKeeper.
- Right to know and access the personal information we hold about you, its sources, why we use it, and who receives it.
- Right to delete personal information we collected from you.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing. LossKeeper does not sell or share personal information, as those terms are defined in California law, and has not done so in the past 12 months.
- Right to limit use of sensitive personal information. We use it only to provide the service you asked for, as the law permits.
- Right not to be discriminated against for using any of these rights.
How to ask. Use the in-app tools above, or email privacy@[losskeeper domain] from your account email. We will confirm receipt within 10 business days and respond within 45 days. If you have no account, we hold almost nothing about you; we will tell you what, if anything, we can match to your request. You may use an authorized agent with your signed permission; we may ask you to confirm your identity directly.
Categories, in the law’s terms. Identifiers (name, email, phone, IP address); customer records (property address, insurer, policy and claim numbers); audio/visual information (photos you sync); internet activity (server logs); and sensitive personal information (account sign-in credentials, and anything sensitive you choose to sync). Sources, purposes, recipients and retention are described above.
Shine the Light. We do not disclose personal information to third parties for their direct marketing purposes.
Children
LossKeeper is intended for adults managing their own property claim. Accounts are for people 18 or older. LossKeeper is not directed to children under 13, and we do not knowingly collect personal information from children under 13. We do not sell or share the personal information of anyone, including consumers under 16.
If you believe a child under 13 has given us personal information, email privacy@[losskeeper domain] and we will delete it.
Information about listed businesses
When a business lists itself, we collect its business name, category, service areas, description, highlights, website, phone, license number, logo link, and a contact email for requests. Listing details other than internal contact and billing information are shown publicly in the directory. We use license details (and any documents we ask for) to verify listings, and contact details to deliver requests and manage the listing. Business accounts have the same rights to access, correct and delete described here.
Where data is stored
LossKeeper is operated from the United States and stores online data in the United States. It is intended for use by people with property in the United States.
Changes to this policy
When we update this policy, we will post the new version here and change the “Last updated” date. For a material change, we will also show a notice in the app and email account holders at least [30] days before it takes effect. We will not use information already collected in a materially different way without your consent.
Contact us
[LossKeeper LLC][mailing address]
privacy@[losskeeper domain]