Privacy Policy

Last updated: March 23, 2026

What We Collect

• Account data: Email address, hashed password (or Google OAuth ID)
• Beneficiary contact info: Names, emails, phone numbers, Telegram IDs
• Encrypted message blobs: Client-side encrypted content we cannot read
• Delivery logs: Timestamps, channels, delivery status (Proof of Delivery)
• Payment data: Managed by Stripe. We store only the Stripe customer ID

What We Cannot Access

• The plaintext content of encrypted messages
• Encryption passphrases
• Shamir secret shards A and B
• Your payment card details (held by Stripe)

How We Use Your Data

• To operate the dead man's switch (heartbeat monitoring, message delivery)
• To send check-in reminders and escalation notifications
• To deliver messages to beneficiaries when triggered
• To process subscription payments

Third-Party Services

• Stripe: Payment processing
• Resend: Email delivery
• Twilio: SMS delivery
• Meta (WhatsApp Business API): WhatsApp delivery
• Telegram Bot API: Telegram delivery
• Google OAuth: Optional authentication

Data Retention

Active accounts: data retained as long as the account is active. Triggered switches: data retained for 12 months post-trigger. Deleted accounts: data removed within 30 days.

Your Rights

You may request data export or deletion at any time by contacting admin@stillhere.life. Under GDPR/applicable privacy law, you have rights to access, rectification, erasure, and portability of your personal data.

Contact

admin@stillhere.life