How privacy actually works here
This isn't a promise about a database somewhere being “secure.” There is no database. Here's exactly what happens to what you type.
The questionnaire runs entirely in your browser
Keystone Binder is a client-side application. When you type an answer, it's held in your browser's memory: there is no network request carrying that value anywhere, not to save it, not for analytics, not for error logging.
The PDF you download is the only copy
When you generate your binder, the PDF is built in your browser and handed directly to you as a download. Your structured answers are embedded inside that same PDF file (as an attached data file, not visible text) so that re-uploading it later can repopulate the form, without a server ever holding your data in between.
What we do store
To validate your $24 purchase and the 12 months of re-edit access that come with it, we keep a minimal license record: your email, a license key, and an expiration date. That record never includes anything from your binder: no names, contacts, account numbers, or medical information.
Your responsibility
Because the PDF is your only save file, treat it like any sensitive document: store it somewhere you control, the same way you'd store a printed copy of your will.