A manifestoDavid Hitchman
There is a clipboard in every waiting room in America.
Name. Date of birth. Allergies. Medications. Emergency contact. Anything else we should know.
You have filled it out a hundred times. You will fill it out again next week. A new doctor. A new lender. A new school for your kids. Every time, you start from zero. As if your own life is a rumor you have to keep proving.
01 · The clipboard
The clipboard is not a formality. It is the price of admission.
Your therapist does not know about the medical debt. Your doctor does not know you just lost your job. Your lender does not know this house is your fresh start. Your daughter’s school does not know why you were late again. The hospital that admitted you at two in the morning does not know what you are allergic to, because that page is in a clinic that closed at five. And the receptionist holding the clipboard does not know any of it either, because nobody ever gave her a way to.
Everyone holds a piece of you. Nobody knows you.
None of them are keeping it from each other. There is nowhere for it to go. So the work of being whole falls to you, and it falls hardest on the days you have the least to give.
The clipboard is not a person. It is the last piece of a system that assumed you would only ever exist in one building.
It asks you to remember your worst year, on your worst day, from memory. It gives one empty box to three different answers: the thing you do not have, the thing you cannot remember, and the thing you are not ready to say. It keeps what you wrote and hands you nothing back. It expires at the door, so the next room starts you at zero. It cannot show where an answer came from, so a doctor has to trust your handwriting instead of your record.
And it is not the receptionist’s fault. She was handed six inches of paper and asked to hold a life in it.
You should not have to be a stranger to get help.
02 · The wall
I kept building around this.
Before Continuum we built ten working operating systems across healthcare, human development, workforce development, life rebuilding, and applied data and AI. Different problems. Different people. The same wall every time.
Some of them have real users. Some have none. Both kinds taught me the same thing. Every one of them started at a screen that asked the person to become a summary of themselves before the software could do one useful thing for them. The person was whole. Their information was in pieces.
Nobody had to build this. I could not keep building around it.
03 · The form
A form is the smallest version of you that fits in boxes someone else chose.
Whatever you could remember. In boxes someone else chose. On a bad day. With nothing attached to prove it. Then somebody makes a decision about your life from that.
One empty box for three different answers. You do not have it. You will not say it. You forgot. The box cannot tell them apart. The person reading it has to guess, and they usually guess the one that costs you.
The form is not the enemy, and neither is the person holding it. A form is how a stranger asks a fair question when they have no other way to ask. It was a reasonable invention for a world where records lived in one building.
So everyone builds a faster form. Autofill. Prefill. One less page.
That is the wrong fix. Refusing to build it is why this company exists.
Fidelity over convenience. Custody over access. The whole story over the tidy summary. The person over the form.
There is real value on the right of each of those lines. A summary is fast, and speed matters when someone is waiting. We value the left more, because a fast picture of the wrong person helps nobody.
04 · The view
Not a faster form. A truer one.
The composer on this site runs today, and it is where the argument stops being a claim.
Every claim says where it came from, or says it has none. There is no third state, and the view shows you the ratio. The composer scores what fraction of the claims in a view carry a source. A form scores zero. Not low. Zero, because a form has nowhere to put one.
Every gap says which kind of gap it is, so an absence stops being a shrug.
Two sources that disagree are both shown. Deciding which one is true about you is not ours to do.
A topic you never offer is not a switch a recipient can see you turn off. On a view built for a lender there is no medical control at all, because an option a reader can see is an option you can be pressured about.
Hold back part of your medication list and the view says so, and says how many. It says so by count and never by content. A doctor who thinks you take none has been misled by the design, not by you.
That is the difference between a faster form and a truer picture. It is also the whole company.
05 · The format
Products die. Formats outlive them.
Think about what .pdf became. Not a product. A format. Somebody made it and then let go of it, and because they let go, a contract signed on one continent opens on another thirty years later.
Think about what .mp3 became. A format pulled a song out of the object it was pressed into, and the song stopped belonging to the disc.
A product is something you rent from whoever runs it. A format is something you hold.
Now look at how a life is stored. Your medical history is a product. Your work history is a product. Your treatment record, your housing file, your child’s education plan, the letter that proves the thing you needed proven. Every one of them lives inside somebody’s software, under somebody’s terms, and the only exit is a printout.
A person’s own record is the last great unowned format.
That is what .continue is for. Not another app. Apps are the thing you already have too many of. A file. One file. Encrypted. Owned by you. It grows with you. It moves with you. It waits for you. No company can take it, because no company owns it.
We call it Continuum.
A file is a boring idea, and that is the point. Boring things last. A format does not ask an institution to trust a startup. It asks it to read a file.
06 · The room
Now walk into that doctor’s office again.
You open your phone. You make a view that shows her your medical history and nothing else. One day. One doctor. Because you said so. The receptionist scans it.
You sit down.
There is no clipboard.
The visit starts with care, not paperwork.
Now picture the day you get the job. One fact changes, in one file you own, and every place you chose to show it to is looking at the same true thing on the same day. Nobody is guessing. Nobody is asking you to prove it again.
The scene you just imagined has an institutional side, and it is designed and not yet built. No institution has ever read a .continue file. The day one does, you will find it on the security page before you find it in an advertisement.
07 · The engine
Personalization that leaves the person is surveillance with a better name.
Every intake, every action, every integration you ever allow makes the picture truer. Not because the system learned something you never told it. Because what you told it once stays told, dated, attached to where it came from, all of it in one place, and all of it talking.
That is the direction we are building in, and it is the part that frightens people, correctly. Personalization has always meant a company learning you.
Here is the architectural decision, and what it costs. The engine runs where the whole file already is, on your device. Running it on our machines would be cheaper and far more capable. It would also mean holding your life on our machines. So we do not run it there. That closes doors we would like open. We made the choice anyway.
We are not building the easy version.
The engine runs where the whole file is, so nothing about you has to leave to be understood.
Your file is encrypted in your browser with a passphrase that never leaves it and is never stored. Which also means that if you lose it, nobody can open the file. Including us. That is not a feature I am proud of. It is the price of the promise, and we would rather tell you here than in a support email.
It does not read your messages. It never will. It does not diagnose you. It does not judge you. What it does is smaller than what people are afraid of and more useful than what they were promised. On the day you can barely think, the things that help are already in your file, already yours, and one tap away.
08 · The proof
Do not take my word for any of this. Run it.
Seal a file at /compose and the page audits it in front of you, in your browser, on the file you just made. No key was written beside your ciphertext. No field named like a passphrase exists anywhere in it. The header is readable in any text editor and the content is not.
Then share one. Compose a view, send the link, open it in a browser you have never touched. End the share and open that same link again. It opens nothing, right away. When you end a share, the row holding those bytes is deleted. Not flagged. Deleted. The whole share loop works today, with no account.
The key that opens a view rides in the part of a web address that browsers never send. The sealed view reaches our machine. The key never does.
We are not choosing not to look at it. We are holding a box we were never handed a key to.
The app is stricter than any sentence about it. Its page carries a content policy that forbids network calls of any kind, so the document is structurally incapable of sending anything anywhere. Not a promise about what we would do. A property of the page.
There are 192 assertions across six test suites covering the crypto, the vault, the composer and the audit. They are not wired into the build yet, so I am not going to tell you they gate anything. The audit you can run on your own file is the part that runs in front of you.
09 · The refusals
A promise is only worth what it costs you.
We will not read your messages. We will not pull your wearable into a server. We will not keep a copy of your file that we can open. We will not run the engine on our machines, because running it there would mean holding your file there. We will not sell a view of you to anyone, at any price, ever. We will not charge you to own your own data.
Some of those cost us money. The last one costs us the easiest revenue in software. They are written down here so you can hold us to them, and so that on the day one of them becomes inconvenient, it is already public.
10 · The ledger
Here is what exists today.
As of 2 August 2026. This block keeps its own clock.
Runs today
- This site, and every page on it, with no third-party requests on any of them.
- Real encryption in your browser: AES-256-GCM, with a key stretched from your passphrase at 310,000 rounds. The passphrase never leaves the page and is never stored.
- A composer at /compose that seals a real .continue file you can download and keep.
- The whole share loop, with no account. Compose a view, send the link, watch someone open it in a browser we have never touched, then end it and watch the same link open nothing.
- An on-device vault in the app, which holds your file sealed and never in the clear.
- The audit, shipped as a function rather than a paragraph, run in front of you after every seal.
- A preview that says it is a preview, over a file that says it is fictional.
- First-party counting of page views and button presses, so we know which pages get read. No cookies, no profile, nothing that follows you off this site.
What we hold
- Copies of your file: zero. The one thing we do hold is the ciphertext of a view you shared, until you end it or it expires. When you end it, those bytes are deleted.
Does not exist
- Accounts.
- Sync between your devices.
- An app in any store.
- Any integration with any other software.
- Notifications.
- A middleman that collects your wearable data. That one is not a schedule. We are not building it.
- One institution that has ever read a .continue file.
- One dollar of revenue.
- One user I could name, because there are none.
Twenty-four systems are designed against this file. Five are live in the preview today. The other nineteen are designed, and your file is ready for all of them: a system that arrives later still reads everything already in it.
I would rather you read that list here than find it out later on your own. This block changes before anything ships, not after, and the date on it will say so. The manifesto keeps the date it was written.
11 · The deal
You never pay to own your own data.
Not ever. The institutions that want to read your file pay for that privilege. That is the deal, and it does not change.
No institution pays us today, because no institution has read a .continue file yet. The deal is written down before there is any money in it, which is the only moment a promise like this is worth anything. I am telling you now so you can hold me to it once there is.
A company that charges you to hold your own life has already told you who it thinks the file belongs to.
12 · The close
You deserve to stop starting over.
Companies come and go. Your file stays. And your kids can start theirs the day they are born, and never learn what a clipboard is.
Almost none of this is finished. No accounts. No sync. Not one institution has ever read one of these files.
Your file is not finished. Neither are you.
Another room is coming. A new doctor, a new lender, a new school.
I am not asking you to believe a roadmap. Most of it is not built. I am asking you to hold the one true thing that is. A file that is yours, that nobody else can open, that nobody can take, on a day when little else about your life feels like it belongs to you.
One file. Your whole life. Owned by you.
Somebody has to go first. Will you?
David Hitchman
Founder, TwinFlame Group · May 2026, revised August 2026