Tidemere Residences

The house, run like you mean it.

One private application for the family and the people who run their homes. Built to the shape of your operation, not a template. Hosted on your own instance. Speaking to no one but you.

1desk. The estate director sees both houses, every shift, every open matter.
0third parties. No trackers, no analytics, no scripts. Not even the typefaces.
Everyaction carries a name and a time. The house keeps its own record, and can read it.

Three questions, answered straight

It keeps the house.

Who is in the house. What is happening today. What needs doing. What the family said and who has it in hand. What is broken and where it stands. Who sleeps where. What the house has written down, and who has signed it. One place, kept by the house.

What it doesThe operating record of a private household.

Every household runs on six things: today, the inbox, the calendar, the people it serves, the people who work in it, and the schedule. Tidemere makes those six real and keeps them in one place. Around them it adds the rooms your house needs, and nothing else.

How it worksOne house. A different door for every seat.

The director runs it from a desk. Staff use it on their own phones as an installed web app, nothing from an app store. The family opens it when they want to see their house. Each person sees exactly their share. It runs on an instance that is yours alone.

Who it is forHouseholds with staff, from one house to an estate.

It is built around the estate director. It fits a director who runs the whole operation herself, and it fits a family office with a VP, department heads and a security team, because it is shaped to the operation rather than the other way around.

A Tuesday, in a two-house operation

Los Angeles. Miami. One desk, and nothing falls between them.

An operation drawn from a real brief: an estate director, a housekeeper at each house, the grounds by a vendor, two principals who work in technology. Sample names. Real screens.

7:00
The Laurel House · Los Angeles

The director opens Today.

Both houses at once: who is on shift, what the family said overnight, three open matters on the maintenance desk, one in hand, a vendor on Friday. Miami is already three hours into its morning.

Morgan, Estate Director
8:00
The Laurel House

The housekeeper opens her phone.

Her shift, her four tasks from the morning build, the opening checklist with the two lines she has already ticked, and the one policy she signed last week. Nothing of the other house. Nothing of the family's calendar.

Inez, Housekeeper
8:30
Palmetto Point · Miami

The pool deck is hosed, the cushions set, the photo taken.

The checklist asked for a photo. It was taken inside the app and lives on the record, never on a personal phone. The guest house was aired for the weekend after next.

Yesenia, Housekeeper
9:10
From a principal's phone

"The gate camera drops offline most nights."

Sent from the family's own door. It lands on the director's desk as a ticket with a trail, priority high, and the principal can see it is in hand without asking twice.

Mateo, Principal
11:00
The room board · Miami

Friends for the weekend after next.

The director puts them on the Stay, gives the Quists the guest suite, and the board says one head still has no bed. The rooming list goes to the principal to agree. Housekeeping's list for that Friday will say "prepare the guest suite" by itself.

Morgan, with Noelle agreeing
4:00
Both houses

Shift ends. Phones go quiet.

Hourly staff are notified only on shift, by that property's own clock. Off the clock, everything waits in the Inbox. The one exception is an emergency notice, which reaches everyone.

The house's rule, enforced by the system

What the director sees

Two houses, read at a glance. Then the record behind every line.

These are product screens set in type, not illustrations. Every line on them is live in the working model, and every one carries who did it and when.

The Laurel House, todaySorrell Household
Desk3 open on maintenance, 1 in handneeds you
In residenceThe Sorrell familyfamily
7:00 AMNoelle · engagedprivate
9:00 AMMorning refresh · primary suite and the great roomhousekeeping
FridayGreenline Landscape, crew of three, side gatevendor
Gate camera drops offline overnightTicket · The Laurel House
OpenedBy Mateo Sorrell, from the family's doorprincipal
PriorityHighopen
TrailEvery step added, never rewritten. A reply reaches him where he asked.record
The room boardPalmetto Point · Miami
Strip1 head without a bed · Tamsin, 3 nights from Fri 23waits
Guest SuiteDevin and Lara, Fri to Mongiven
ListBeing built. Sends to the organizer and the operation to agree.rooming list

The shape of it

Six rooms every household runs on. Then only the modules your house needs.

I

Today

The whole day at a glance for the seat that opens it. The director's is both houses. A housekeeper's is her own shift.

II

Inbox

One person, one thing. Messages travel the chain of command so an ask lands on the right desk and nowhere else.

III

Calendar

The family's calendar, and the house's. What the family keeps private reads as a plain label to everyone running the day.

IV

The Registry

The people the house serves: family, friends who visit, the guests of a Stay. Preferences, dietary notes, sizes, history.

V

The Roster

The people who work in it, and the vendors who come. Seats, devices, departments, who may see what.

VI

Schedule

Shifts, time off, availability. Hourly staff are reached on shift only, by the property's own clock.

Modules, switched on in conversation

Maintenance deskDocuments and sign-offsChecklistsStays and the room boardPurchases and receiptsThe Property RegisterThe kitchenChildcareGuest tabletsSecurity operationsFinance deskGuest chefs

Dark means on for a two-house operation of this shape. The rest wait quietly until the house needs them, and switch on without a rebuild.

Nothing out of a box

Built to your house. Every time.

Tidemere is one application made of rooms, and the rooms are shaped to the operation that lives in them. The same software runs a three-person house and a thirty-person estate because neither is a preset. This is what that means in practice.

Your properties, named once.

Every building, room, space and service area goes into the Property Register, exactly as your team calls it. After that, nobody types a room name again. The maintenance desk, the room board, the checklists and the calendar all pick from the same list.

Your org chart, however many boxes it has.

Three boxes or thirty. A department with no head rolls its desk up to the director on its own. When the hire lands, the desk moves to them, and nothing else changes.

Your rules, enforced by the screens.

Who sees whom. Which phone is a company device. Who approves spending, time off, a new phone. What the family keeps private. Each is a setting the house holds, not a request we file.

Your manuals, for your screens.

An operations manual and training booklets for staff, heads, leadership and the family, written for the house that receives them, every button named as it appears. Updated in the same build as the software, never after.

Your working model before any contract.

A one-page worksheet on the shape of the operation, with stand-in names. We build your house on it. You walk through it as yourself, on your own phone, before anyone signs anything.

Where we hold the line

What we refuse to do.

01

Share your database with anyone.

Each household runs on its own instance with its own database. No path exists between one house and another.

02

Let a third party onto your screens.

No analytics, no trackers, no advertising, no scripts from anyone else. Even the typefaces are served from your instance.

03

Keep a key to your records.

Support access exists only when your administrator grants it, for a set number of hours, written into your audit record. Withdraw it any time.

04

Put a picture of your house on a staff phone.

Every camera in the app is the app's own. A photo for a ticket or a checklist goes to the record and never to a camera roll.

05

Ring a housekeeper at ten at night.

Hourly staff are reached on shift, at that property, by its own clock. The one exception is an emergency notice.

06

Track anyone.

Presence comes from the season and the calendar; on-shift status from the published schedule. Never from following a phone.

07

Sell, mine, or train on your records.

Not now, and not as a future line of business. The records exist to run the house, for no other purpose.

08

Call it end to end encrypted.

Deliberately. The house must be able to read its own record, audit it, and hand it to the next director. The keys are the house's, and that is the point.

The questions advisors ask

Security and infrastructure, in writing.

These are the answers we give in the room. Nothing here describes a plan; each line is built and written into the manuals a house receives. The full page is at tidemere.com/security.

The recordA sample, fictional household
7:40 AMInez Caldera signed "Phones, photographs, and the house", version 1
8:12 AMMorgan Whitaker approved a new phone for Yesenia Ocampo
9:10 AMMateo Sorrell opened "Gate camera drops offline overnight"
11:30 AMMorgan Whitaker sent the Quists' rooming list for agreement
4:30 PMMorgan Whitaker granted Tidemere support access, read only, 24 hours
Where does our data live, and with whom?Yours alone
On your own instance: one service per household on a dedicated server in the region you choose, with its own database, an encrypted disk, and encrypted nightly backups you can take with you. No household shares a record store with another.
How does it travel?Encrypted, always
Every connection is HTTPS with strict transport security; a phone that has visited once will not speak to Tidemere any other way. The pages refuse to load from, or talk to, anything outside your instance: a locked-down content security policy the browser enforces on every screen. A request from another website is refused and written down.
What if a copy of the database were taken?It cannot sign in
Passwords are one-way hashes. Session and device tokens are stored hashed. Authenticator secrets are sealed under a data key kept apart from the database. A copy of the database cannot be replayed as a session.
Who can open a door?The house decides
Sign-up is by invitation only. Every phone waits for the house's approval before it opens, whoever holds it, unless the house marks it a company device. Leadership confirms sign-in with a six-digit code. A sign-in brake pauses the door after a few failed attempts. An administrator sees who is signed in and can end any session at once.
Can Tidemere read our records?Not without a grant
There is no standing key and no quiet way in. Support access is granted by your own administrator, limited to a set number of hours, written into your audit record with the name of the person who granted it, and withdrawable at any moment.
Is it end-to-end encrypted?Deliberately, no
A household must be able to read its own records: for an audit, for the handover when a director leaves, for the register of who acknowledged what. End-to-end encryption would put the house's history behind one person's phone. Encryption in transit, encryption at rest on your own instance, and the house holding the keys is the right shape.
What is it built on?Conventional, on purpose
A Python server application with a relational database per household, behind a reverse proxy that holds the TLS certificates. No framework front end, no third-party script, no build pipeline between a fix and your screens. Phones install it as a web app from the browser; updates arrive server side. Integrations attach at the edges, never in the middle: a one-way calendar feed or a true two-way calendar account on an iPhone, email and chat transports when a house wants them, and your own export, as one dated archive readable without us.
Do you hold a security certification?Deliberately, not yet
Certification is the last step, not the first. First the safeguards, each built and written into the manuals a house receives. Then the conversation, where every answer goes on paper. Then the outside assessment, which follows and will be published when it is done.

Before any demo

See your own house in it. Then decide.

A one-page worksheet on the shape of your operation, with stand-in names. We build your house on it, and you walk through it as yourself, on your own phone. Every answer you want in writing goes in writing. The founder ran houses before he wrote software for them; ask him anything your advisors would.

No pricing grid, no plan with checkboxes. Configured in conversation, to the scale of the house.