[ security ]
Built to be trusted with your household
Kepter holds vehicle titles, health records, credentials, and financial history — some of the most personal data a family has. Here is, plainly, how we keep it safe.
Encrypted in transit and at rest
Every connection between your device and Kepter is encrypted with TLS (the same technology your bank uses). Your data — including uploaded documents and photos — is stored encrypted at rest on our infrastructure.
Access rules enforced in the database
Kepter uses row-level security: the database itself refuses to return a record unless it belongs to your household and the signed-in member has permission to see it. Access control isn't just an app feature that could be bypassed — it's enforced at the data layer on every single query.
A private document vault
Your files live in private storage that has no public web address. When you view a document, Kepter generates a short-lived, cryptographically signed link just for you — and it expires. Nothing you upload is ever publicly reachable.
Modern sign-in
Sign in with Apple, sign in with Google, or use email and a strong password. Passwords are never stored in readable form — only industry-standard salted hashes. Household accounts are created by invitation only; there is no open signup for strangers to probe.
Least privilege inside your household
You decide what each family member can see or change, module by module — view, edit, full, or nothing. A child's login can log fuel fill-ups without ever seeing the finance module. These permissions are enforced server-side, not just hidden in the interface.
Professionally operated infrastructure
Kepter runs on Supabase and Amazon Web Services — infrastructure providers that maintain independent security certifications (including SOC 2) and provide continuous patching, monitoring, and physical security for the underlying platform.
Our commitments to you
- We never sell your data. Kepter has no advertisers and no data partnerships. Our only revenue is subscriptions — you are the customer, full stop.
- Your data is yours to take. Export service histories, fuel logs, and insurance reports as PDFs, and download your original documents at any time.
- We collect only what the product needs. Kepter stores what you put in it. We don't harvest contacts, track your location, or mine your records for insights to sell.
- We fix problems fast and tell the truth about them. If a security issue ever affects your data, we will notify you promptly and plainly.
Reporting a vulnerability
If you believe you've found a security issue in Kepter, we want to hear from you before anyone else does. Email security@kepter.tech with the details. We read every report, respond quickly, and will never take action against a good-faith researcher.