You're being followed back to your car.
No time to call. Pulling out your phone would be a signal. Shouting would alert the attacker as much as any bystanders — and there are none.
Three presses on the volume button. No visible SOS button, no sound, no icon that changes. While the screen stays frozen on its usual interface, a human operator receives your location, audio and photos in real time, assesses the situation, and dispatches the relevant emergency services if the threat is confirmed.
App download reserved for signed-in members.
Status forwarded to the supervisor.
An attacker grabs your phone, demands the code, checks that no alert has gone out. Anything visible — an SOS button, a lone-worker device, an emergency icon — is neutralised in seconds. The numbers don't lie.
a woman killed every 2.5 days by her partner or ex-partner in France.
Source: French Ministry of the Interior, national study on violent deaths within couples, 2023.
women victims of domestic violence every year. One in five files a complaint.
Source: SSMSI & ENVEFF, 2023.
journalists imprisoned or missing worldwide as of 1 January 2024.
Source: Reporters Without Borders, 2024 annual round-up.
And yet, not a single iOS app today combines the three criteria that matter: total discretion (no visible button), a 24/7 human operator, and strict GDPR hosting in France. That's the gap KeepAlive fills.
The core mechanism is a decoy: two visually identical PIN codes. Your attacker sees no difference — the operator, meanwhile, is already alerted.
A "normal" code and a "duress" code. Visually identical (e.g. 1234 / 1235), functionally opposite. Only you know the difference.
You enter the duress code. The app shows the usual screen — while it streams GPS, audio and photos to the encrypted backend. No visual feedback, no sound.
Live location, audio, photos, history: the on-call operator qualifies the alert, listens, looks, then decides — calling the emergency services (police, gendarmerie, ambulance) or acknowledging a false alarm. You have nothing to do.
Not textbook cases. The real situations KeepAlive was built for.
No time to call. Pulling out your phone would be a signal. Shouting would alert the attacker as much as any bystanders — and there are none.
You're a journalist on a sensitive story. Calling the front desk may be a bad idea — you don't know who's on which side.
You want to warn your flatmate, but without looking like you're panicking. And if the person speeds up, you want someone to already know where you are.
Activists at a protest, an expat in an authoritarian region, a victim under domestic coercion: your code is demanded. Refusing raises suspicion. Giving the real code exposes everything.
No solution is perfect. Here, without cheating, is where each one shines and where it falls short. Spot a mistake? Write to us — we'll fix it.
| Criterion | KeepAlive | Lone-worker device (PTI) | BLE jewellery (bracelet, pendant) | WhatsApp / location sharing |
|---|---|---|---|---|
| Total discretion (nothing visible) | Yes | Visible bracelet/badge | Visible but jewellery | Explicit interaction |
| Works under duress (attacker has the phone) | Duress code | Button can be torn off | Jewellery removed | Code demanded openly |
| 24/7 human operator | Included in beta | Monitoring centre | None | None |
| Cellular autonomy independent of the phone | v1.3a in progress (LPWAN) | Native sub-GHz | BLE → phone required | Phone required |
| Strict GDPR, hosted in France | France | Varies by provider | Often US cloud | Meta · USA |
| No ad trackers | NSPrivacyTracking = false |
Dedicated hardware | Companion app varies | Ad profiling |
| Webhook / custom API (employer integration) | Documented Go backend | Depends on provider | Closed platform | None |
| Monthly entry price (incl. tax) | €0 in private beta | €15–40 + operator subscription | €5–15 + jewellery €30–80 | €0 (but it isn't a safety service) |
Comparison compiled in May 2026 across the main French offerings (Magneta, Atrineo, Saphymo, Dring, Vivago, etc.). Price ranges are public. Spot an error? Let us know.
Reporting in hostile areas, sensitive sources. Periodic check-ins, a silent alert in case of a check or an abduction.
Long missions in unstable regions. Compatible with employer safety protocols and crisis centres.
An app that looks like any other. Nothing reveals what it's for. The duress code can be entered under coercion.
Hiking, remote tourism, late-night business trips. If you don't answer the check-in, your contacts are alerted automatically.
Five links. Each auditable. No shortcuts, no compromises.
TLS 1.2+ mandatory, certificate pinning on leaf + intermediate against interception.
Annual pentest by an ANSSI-certified firm (planned Q3 2026).
Servers in France. Strict GDPR compliance.
Passwords + PIN derived. iOS Keychain / Android KeyStore.
Immutable, verifiable integrity chain. Every action traced.
flutter_secure_storage. Wiped on sign-out.NSPrivacyTracking = false in the iOS manifest.PIN decoy, scheduled check-ins, audio/photo capture, GPS streaming, a 24/7 human operator for verification.
Particle Boron / Nordic Thingy:91 in a pocket or a bag. Cellular/Sigfox alert even with the phone switched off. MVP in 2–3 months.
A discreet form factor, multi-month battery life, RED/FCC certifications, factory integration with signed firmware.
KeepAlive is in private beta, by invitation. No charge, no commitment. The public pricing grid will be announced later, alongside the terms of service. The app is free throughout the beta-test phase.
Free throughout the beta-test phase
Personal, Family or Pro — everything is open to beta testers at no charge.
Registration is open. The TestFlight invitation link is delivered in your space after you create an account.
No charge is applied during the beta. The public pricing grid and the final terms of service will be communicated before the commercial launch.