Privacy policy
Effective August 18, 2026 · Honor & Keep, a product of IdaMil LLC.
The short version
We store what you type so the product works. We don't sell it, we don't show ads against it, we don't run third-party analytics trackers on it, and we don't take referral commissions from banks, insurers, or funeral homes to steer what we tell you. You can export everything or delete everything yourself, from Settings, without asking us.
What we store
Your account email and authentication records. What you enter about the estate: the deceased person's name, state, date of death, will status; tasks and their completion; institutions you're notifying and their statuses; documents you generate and choose to save; the asset inventory and heir records if you use them; and an activity log of actions taken on the estate, which exists so co-executors can trust each other's work. If you buy something, we store what was bought and the email used at checkout — your card details go to Stripe and never touch us.
Where it lives
In a Postgres database hosted by Supabase on infrastructure in the United States, with row-level security so that an estate is readable only by the people invited to it — enforced in the database itself, not just the app. The site is served by Vercel. Payments are processed by Stripe. Those three are our only subprocessors.
What we deliberately don't do
No advertising, no sale or sharing of personal data for value, no third-party analytics or tracking pixels, no data brokers, and no affiliate commissions from institutions we tell you to contact — that last one is a product decision, because our only credibility is having no stake in what the checklist says. We use only the cookies and local storage needed to keep you signed in.
Documents deserve a special word
Letters you generate exist only in your browser unless you press “Save to estate documents.” Preview without saving, and the text never reaches our servers.
Your controls
Export everything (Settings → “Take your records with you”), delete the estate permanently (Settings → “Delete this estate”), or email john@idamil.com to have your whole account removed. Deletion removes the estate's records from the live database; short-lived encrypted backups age out on the infrastructure provider's schedule, and we don't restore deleted estates from them.
Sensitive context, said plainly
This product necessarily holds information about a person who died — their name and financial footprint. Privacy laws mostly protect the living, but we treat the deceased person's information with the same care as yours, because you care about it and because dignity doesn't expire with a death certificate.
Legal requests and changes
We disclose data only when legally compelled, and we'll tell you it happened unless the law forbids it. Material changes to this policy get a dated note here. Questions to john@idamil.com. See also the terms of service.