Privacy policy
Last updated 12 October 2026 · Version 2.0
The Keep holds some of the most sensitive records a family has: a custody order, children’s names, addresses, a log of what one parent did or did not do. This policy is written to be read, not to be survived. If anything in it is unclear, write to [email protected] and we will explain it.
What is operating today. The Keep has not launched. The only thing this website does right now is collect a waitlist email address, with an optional state and an optional note about where you are in your case. Sections 3 onward describe the app and will apply when it opens. Section 2 is the part that applies to you today.
1. Who we are
The Keep is a product of Sigma Stronghold LLC, a Texas limited liability company. For privacy law purposes, Sigma Stronghold LLC is the controller of the information described here. Our address and contact details are in section 14.
The Keep is not a law firm and does not provide legal advice.
2. The waitlist
This is the only processing happening today.
When you join the waitlist we collect:
- Your email address, which you type in.
- Your state and case stage, if you choose to select them. Both are optional and the form works without them.
- The time you signed up, and a one-way hash of your IP address. The hash exists to stop one source submitting the form thousands of times. It cannot be reversed to recover the address, and it is deleted after thirty days.
We use this to email you once, when The Keep opens in your state, and to decide which states to open next. We do not use it for anything else, we do not add you to a marketing list, and we do not share it. Every email we send carries a one-click unsubscribe, and you can ask us to remove you at any time by writing to [email protected]. When you unsubscribe, the record is deleted rather than flagged.
3. What the app collects
The Keep is built so the server knows as little as possible. What it holds is deliberately limited to what is needed to run an account:
| What | Why |
|---|---|
| Email address | It is how you sign in, and how we reach you about your account. There are no passwords, so there is nothing to leak or reuse. |
| Subscription status | To know what your account is entitled to. Card details go to our payment processor and never reach us. |
| Device registration and push token | To deliver a notification to the right device. |
| Reminder times | To send a reminder we need to know when. We do not store what the reminder is about, who it involves, or where. The notification text is generic; opening the app on your device is what shows you the detail. |
| Invitations you send | So a co-parent, attorney or mediator can accept one. We store a hash of the invitation link, not the link itself. |
| An encrypted backup, if you turn one on | Encrypted on your device with a key derived from a passphrase we never receive. We can tell you a backup exists and how large it is. We cannot open it, and neither can anyone who compels us to hand it over. |
| Security events | Sign-ins, sign-outs, plan changes and deletions, with the time and IP address. This is a security log, not analytics. |
If you use a phone number issued through The Keep to communicate with a co-parent, the messages and call records that cross that number are part of your record, because the whole point of that number is that those communications are documented. Section 4 explains where that record lives.
4. What stays on your device
The substance of your case — the documents you add, your children’s names and details, your calendar, your logs, your notes, your expenses — is held on your device. It is not uploaded to us in a readable form, and there is no column in our database where it would go.
This is a deliberate architecture, not a promise about good behaviour. We cannot produce what we do not hold, which matters in section 12.
The trade-off is real and you should know it: if you lose your device and have not turned on an encrypted backup, we cannot recover your records for you. We would rather tell you that plainly than hold a copy we could be made to hand over.
5. Children’s information
The Keep is for adults. It is not directed to children, it is not designed for children to use, and you must be 18 or older to create an account. We do not knowingly collect personal information from a child.
The Keep does, by its nature, hold information about children — names, ages, schools, medical notes, where they are on a given night. That information is entered by a parent or guardian about their own children, and it is held on that parent’s device as described in section 4. It is never used to build a profile of a child, never used for advertising, never sold, and never shared with anyone outside the people you choose to share your record with.
If you believe a child has created an account, write to [email protected] and we will close it and delete the data.
6. Research and advocacy
Please read this section even if you skip the rest, because one part of it is on unless you turn it off.
Almost nothing is actually known, in numbers, about how custody orders work in practice. The Keep counts what happens and gives the totals to researchers and advocates. Your case is counted in those totals by default. You are told this when you first open the app, with the switch in front of you, and you can turn it off there or at any time afterwards under Research & Advocacy.
What is contributed is statistics, not records: percentages rounded to the nearest five, age bands, distance bands, counts. What is never contributed, under any setting:
- Your name, your co-parent’s name, or your children’s names
- Your address, your county, or your cause number
- A single word of any message, note or document
- Any date that could be matched back to a real event
Those are not stripped out later. They are never sent.
One block is off unless you turn it on. The compliance figures — exchanges documented and failed, nights denied, violations logged — describe your co-parent’s conduct rather than your own. Your co-parent has not agreed to anything, and in some cases does not know The Keep exists. We will not contribute a summary of someone else’s behaviour on one person’s say-so unless that person deliberately chooses it. That block is off by default.
Turning contribution off deletes what you have already contributed, rather than hiding it. No feature of The Keep depends on this setting, we will not ask you twice, and we will not bundle a change to it into a terms update. If The Keep is ever sold, this data does not transfer — it is deleted.
7. Who we share with
We share your information with a small number of service providers who need it to make the product work. Each is bound by contract to use it only for that purpose:
| Provider | For | What they see |
|---|---|---|
| Cloudflare | Hosting, database, storage | What section 3 describes, plus encrypted backup blobs they cannot read |
| Stripe | Card payments | Your payment details, which go to them directly and never pass through us |
| Seamless Chex | Bank payments | Your bank details, for the same reason |
| Telnyx | Phone numbers, calls and texts | The numbers involved and the content of messages carried over the network, as any phone carrier does |
| Resend | Email delivery | Your email address and the message we send you |
We also share when you tell us to — when you invite a co-parent, an attorney or a mediator into your record, that is you choosing to share with them, and you can revoke it.
And we share when the law requires it, subject to section 12.
8. Selling, advertising and tracking
We do not sell your personal information, and we never have. We do not share it for cross-context behavioural advertising. We do not show advertisements. We do not embed advertising SDKs, advertising identifiers, or third-party trackers that follow you to other sites.
This is a flat commitment rather than a current practice we might revisit. Under the Texas Data Privacy and Security Act, and under the laws of California, Virginia, Colorado, Connecticut and the other states with comparable statutes, we make no sale and no targeted-advertising disclosure because there is none to make.
9. How long we keep things
- Waitlist entries — until launch in your state, or until you unsubscribe, whichever comes first. Then deleted.
- Account information — while your account is open.
- IP hashes used for rate limiting — thirty days.
- Security log entries — twelve months.
- After you delete your account — everything is deleted within thirty days, except a record that the email address was closed, which carries nothing about you and exists so a closed account cannot be silently recreated. Payment records are kept as long as tax and accounting law requires.
10. Security
- Everything travels over TLS.
- There are no passwords. You sign in with a link sent to your email, and we store a hash of that link, never the link.
- Session tokens are stored as hashes, so a copy of our database holds no usable credential.
- Backups are encrypted on your device before they reach us.
- Access to production systems is limited and logged.
No system is perfect. If there is a breach affecting your information we will tell you, and we will tell you what actually happened rather than a sentence drafted to minimise it.
11. Your rights and choices
Wherever you live, you can:
- See what we hold. Ask and we will tell you, in plain terms.
- Correct it. Most of it you can edit yourself.
- Take it with you. Export your record at any time, in a format you can open without us.
- Delete it. See how deletion works. Deletion is available inside the app and by writing to us.
- Opt out of research contribution, as section 6 describes.
- Appeal. If we refuse a request, you can appeal it by replying to our refusal, and we will respond within forty-five days with our reasoning.
Residents of Texas, California, Virginia, Colorado, Connecticut, Utah, Oregon, Montana and other states with comprehensive privacy statutes have these rights by law, including the right to confirm whether we process your information and the right to obtain a copy of it. Residents of California may also designate an authorised agent to act for them. We will not discriminate against you for exercising any of these rights — there is no worse tier of the product for people who ask.
To exercise any of these, write to [email protected]. We respond within forty-five days and will tell you if we need longer.
12. Legal process and subpoenas
The Keep is used by people in active litigation. It is realistic that someone will one day try to obtain records from us rather than from you.
- We require valid legal process. A letter from an opposing attorney is not legal process.
- Unless we are legally barred from doing so, we will notify you before producing anything, with enough time for you to object.
- We will produce only what is actually demanded and only what we actually hold.
- What we hold is section 3. What we cannot produce is section 4, because we do not have it and cannot read the encrypted copy.
13. Changes to this policy
If we change this policy in a way that affects how your information is used, we will tell you before the change takes effect — by email, and in the app — rather than quietly republishing the page and updating the date. The version number at the top goes up every time it changes, and previous versions are available on request.
14. Contact
Privacy questions, requests and complaints: [email protected]
Sigma Stronghold LLCAttn: Privacy
Texas, United States
Full mailing address on request