Privacy Policy

SiloKeep is built so that we cannot read your group's data. Most privacy policies describe what a company promises not to do with your information; this one is mostly a description of what we never receive in the first place. SiloKeep is operated by Life Strategy OS, LLC ("we", "us").

What we cannot see

Your group's content — rosters, names, phone numbers, responsibilities, calendars, action items, and meeting notes — is stored on your devices and end-to-end encrypted before it ever leaves them. The encryption keys exist only on group members' devices. Our sync relay passes and stores ciphertext: encrypted bytes we have no ability to decrypt. We cannot read your data, we cannot search it, we cannot hand it to anyone else in readable form, and a breach of our servers cannot expose it.

What we do hold

• Encrypted sync data. Opaque encrypted records, identified by random identifiers (e.g. co_z…) that carry no names or content.
• Payment state. If a group has ever paid: the date its payment runs through, and an optional short note we type in ourselves (e.g. "Venmo, 2026-09-05") when we mark it received. This is bound to an opaque group identifier — never to a person, and never to any payment details, which stay on Venmo's own platform between the payer and us.
• Connection metadata. Like every internet service, our infrastructure briefly processes IP addresses and connection logs to operate and defend the service. We don't build profiles from them.

There are no user accounts, no usernames, and no password database. Your account is derived from a recovery phrase that only you hold. We do not use analytics trackers or advertising cookies on the app or this site.

Payments

SiloKeep has no payment processor and holds no payment information at all. Encrypted sync is paid for with a flat, once-a-year fee sent directly via Venmo, under Venmo's own privacy policy — your name, Venmo account, and payment details never reach our systems. All we receive is your group's opaque ID (which you send us yourself, after paying) and, from us, a note we write ourselves to remember when we marked it received. Nothing links a payment to your group's content.

Honest limits

End-to-end encryption protects content, not everything. Our relay can observe traffic patterns — that some device synced some encrypted data at some time, and roughly how much. Members of your group can, of course, see what your group shares with them, and removing a member stops future access but cannot un-share what already synced to their device. If you lose your recovery phrase, your passkeys, and every signed-in device, we cannot recover your data — nobody can; that is the design.

Deletion

Your data lives on your devices; deleting the app from your devices deletes your copy. To have a group's encrypted data removed from our relay, contact support with the group's identifier and we'll delete it.

Changes & contact

If we change this policy we'll update it here with a new date. Questions: support@silokeep.com.