Privacy Policy

What we collect

When you create a saved card, Kehdoo stores the card text, names you enter, style choices, creation time, and a randomly generated card ID so the recipient can open the shared link.

If you add a photo, the server resizes it, converts it to WebP, and strips metadata before storing it. If card saving is unavailable, Kehdoo will not create a share link; you can try again once the service is available.

If you sign in with Google, Kehdoo receives the account information needed for sign-in and uses your account ID to show your saved cards in the dashboard. You can create cards without signing in.

The Garden

Kehdoo's Garden (kehdoo.in/garden) has two kinds of letters. The starter letters shown there are fixed example content, not written by visitors. A letter you write yourself works like a regular Kehdoo card. Signing in isn't required, and it's reachable by anyone with its link but isn't listed publicly for others to browse. It runs through an automated filter before it's created. Don't include anything in a letter you wouldn't want its recipient to see.

Cookies & tracking

Kehdoo uses PostHog for aggregate, privacy-preserving product analytics (such as which pages are visited and which buttons are used) so we can see what's working and fix what isn't. PostHog may also record anonymized session replays (how you move through the app) to help us find and fix usability problems; the text of your wish message and the recipient/sender names are masked and are never included in these recordings. Kehdoo may also use Google Tag Manager to load a small number of marketing tags. Kehdoo does not use fingerprinting scripts, and analytics events aren't linked to your identity unless you sign in. If you sign in, a session cookie set by kehdoo.in itself keeps you signed in; no third party sets it. Card pages also use local browser storage to avoid counting repeated opens from the same session.

Kehdoo also keeps its own usage records, on its own servers: which pages are opened, the steps taken while making a card (such as the occasion picked, the design chosen and whether a photo was added), what you type in the occasion search (up to 40 characters, so we can add the occasions people look for), whether a card was shared and opened, page speed and errors. They are tied to a random identifier kept in your browser's local storage, and to your account if you sign in. They include your approximate location (country, region and city, worked out from your network) and your type of device and browser. They never include the words on a card, names, or your IP address, and they are deleted after about 13 months.

Third-party services

Kehdoo runs on Cloudflare. Your account, cards and saved dates live in a Cloudflare D1 database and photos are kept in Cloudflare R2 storage, so Kehdoo can provide saved card links and optional dashboards. Sign-in with Google goes through Google; a one-time email link is sent from kehdoo.in.

Kehdoo uses PostHog to understand aggregate product usage. PostHog may process your IP address and device/browser information to record these events according to its own privacy policy.

Kehdoo may use Google Tag Manager to load marketing/advertising tags. Google may process your IP address and device/browser information according to its own privacy policy.

Google provides optional sign-in. Google may process your sign-in request according to its own privacy policy.

When you use the WhatsApp share button or your device's native share sheet, those services handle the share action according to their own privacy policies.

Data retention

Saved cards remain available through their private link unless they are removed from the service.

To request deletion of a saved card, a Garden letter or account-related data, use the contact form, choose “Delete my card or data” and paste the link. If you created it while signed in, send the request while signed in so we can confirm it's yours.

Contact

Questions? Send us a message through the contact form or email hello@kehdoo.com. For form messages we store what you write, plus any name or contact detail you choose to add, only so we can read and answer it. If you are signed in, the message is linked to your account.