Standing. (the "App") is published by Standing Still ("we", "us").
The short version
Your evidence — vault incidents, letters, voice letters, care logs, intel notes, press kits, reunify letters, decree data — is stored on our servers so it can be sealed in a tamper-evident chain and restored if you change devices. It is partitioned to you; we do not browse it and we never sell it.
Two features keep their raw input on your device — the Patterns corpus and the Depose discovery text. We receive only a SHA-256 fingerprint of those.
Using Standing. requires an account. We store your email address and an account id to anchor your subscription and restore your data.
We do not ship crash or analytics diagnostics off your device. We do not sell your data and we do not run ads.
What we collect, why, and where it lives
Stored on our servers
To seal your evidence in a tamper-evident chain, restore it if you change devices, and run the analysis features, the content you create is stored on our servers (a database and, for media, object storage). It is partitioned to your device and linked to your account, so only you can retrieve it. This includes:
Vault incidents: your note, category, the optional per-incident GPS location and weather snapshot, the voice transcript, and any attached photo / audio media.
Letters: subject, body, the context you provide, recipient details, and draft / sent status.
Voice letters: the audio or video recording itself, plus its transcript, title, notes, and the recipient child's name.
Guardian care logs: session events and the details you log, including meals, activities, notes, and medication entries.
Intel notes: the role, name, jurisdiction, observation, and outcome you record.
Press kits: the snapshot of items you choose to include.
Reunify: letters to your child (final text and revision history) and milestones.
Decree: the uploaded decree file and the schedule and clauses we extract from it.
The tamper-evident chain hashes that seal all of the above.
You can request deletion of this server-side data at any time — see Your rights below.
Kept on your device only
Your profile is stored in the App's local storage and is not sent to our servers: your name, jurisdiction, case label, your children's first names, and your attorney and trusted-contact details. When you address a voice letter or a letter to a specific person, that recipient's name is saved with that record on our servers, as noted above.
Kept on your device — we receive only a fingerprint
Two features deliberately never send us their raw input. We store only a SHA-256 fingerprint (for chain integrity) and the analysis result:
Patterns scraper: the co-parent message corpus you paste.
Depose: the discovery text you paste.
Sent to AI providers for processing
Several features send your input through our backend to a third-party AI provider (Anthropic, OpenAI) to generate a result:
Letter Composer, incident categorization, voice transcription, and decree parsing: the input is processed and the result is stored on our servers as described above.
Shield, Patterns scraper, Depose, and Reunify review: the input is processed to produce the analysis; for Patterns and Depose we retain only the fingerprint and the summary, not the raw input.
Account and push
Account: your email address and account user id. Used to anchor your subscription and restore your data on a new device. Deletable in-app from Settings → Account → Delete account.
Push notification token: if you opt in to push, the Expo push token assigned to your device is stored against your device id (and, if signed in, your user id). Used only to send you push notifications. Deletable by revoking notification permission or by uninstalling the App.
Diagnostics
We do not collect crash reports or performance diagnostics from the app. Server-side logs from our API use a redaction list that scrubs vault-shaped fields before any line is written.
Subscription billing
Standing. Pro is billed by Apple via the App Store. Apple — not us — collects your payment details and handles the transaction. We receive from Apple only the cryptographically signed transaction (JWS) the App sends us when verifying your subscription. From that we read the product id, expiration date, and a transaction id; we do not see your name, credit card, or billing address.
What we DON'T collect
Your contacts.
Background or continuous location. The App captures a location only when you add a per-incident GPS pin and grant permission.
Advertising identifiers. We do not run ads. We do not embed any third-party advertising SDK.
Behavioural analytics (no Mixpanel, no Amplitude, no Segment).
We do not sell, rent, or trade your personal information.
Children
Standing. is built for adults navigating their own legal matters. It is not directed to children under 13 and we do not knowingly collect personal information from children. If you believe a child has provided information through our App, contact us and we'll remove it.
Third parties
We share data with the following service providers only as needed to run the App:
Provider
What they receive
Why
Apple
Subscription transactions, the App download.
Required to sell the App and the subscription on iOS.
Clerk (account)
Email address, sign-in events.
To run the account and sign-in system.
Anthropic / OpenAI
Inputs you provide to AI features.
To process AI requests. Some results and associated content are stored on our servers (see above); for Patterns and Depose the raw input is not — only a fingerprint and summary are kept.
Expo Push (Apple APNs)
Push token + notification payload.
To deliver push notifications.
We do not sell, rent, or trade personal information to third parties for marketing.
Push notifications (Expo / Apple)
If you opt in to push notifications, Standing. registers your device with the Expo Push Notification service (expo.dev, operated by Expo, Inc.), which in turn registers your device with Apple Push Notification service (APNs). This generates an opaque push token that we store on our server, associated only with your device's installation identifier (not your name, not your email). We use this token to send the limited notifications you have opted into.
We do NOT use push notifications for advertising, marketing, or analytics. We never send push payloads containing your vault contents, your letters, or anything from your case. You can disable push notifications at any time in iOS Settings → Standing. → Notifications. Expo's privacy policy: expo.dev/privacy.
Your rights
You can, at any time:
Export your evidence chain from the App.
Delete your account (Settings → Account → Delete account). This removes your email and login record from our authentication provider. To delete the evidence stored on our servers, email us and we will erase the data tied to your device and account.
Wipe the App's local data (your on-device profile and any cached records) by uninstalling the App. This does not erase the server-side copy — use the deletion option above for that.
If you are in the EU, UK, California, or another jurisdiction with specific data-protection rights (access, rectification, erasure, portability, restriction, objection), exercising any of those rights is as simple as emailing us at the address below.
Security
Every record is cryptographically sealed in a tamper-evident chain; altering one row invalidates every row that follows it. Data is encrypted in transit (HTTPS).
Voice letters and other media are stored with object-storage access control keyed to your device id; cross-device retrieval is rejected at the server.
Subscription receipts are verified server-side against Apple's root certificate chain.
We do not store secrets in source control; production secrets are managed via EAS Secrets and the API host's environment-variable store.
We process data in the United States. If you are outside the US, your data may be transferred to and processed in the US, where data-protection law differs from your country's.
Changes
We will update this policy from time to time. Material changes will be surfaced in-app before they take effect. The "Last updated" date at the top of this page is always current.