The short version
We store your email address, the reminders you send, and the technical state your device needs to work. We do not sell any of it, we do not advertise against it, and reminder text is deleted about thirty days after it is finished with. There is no third-party tracker on this site beyond anonymous page counts.
Who we are
OHryte is a small hardware project based in Quebec, Canada. For anything in this policy, write to privacy@ohryte.com.
What we collect, and why
If you join the waitlist
We store your email address, which page the form was on, and the address of the page that referred you. That is all. The email address is used once, to tell you when the first batch is ready, and to send the confirmation you receive immediately after signing up.
To stop the form being flooded, we also keep a short-lived record that a submission happened. That record holds a one-way cryptographic hash of your IP address combined with a secret value — not the address itself — so it can be counted but not read back. These records are only meaningful for an hour.
We use Cloudflare Turnstile on the form to tell people from scripts. Cloudflare processes your IP address and browser characteristics for that check under its own privacy policy.
If you have an account
- Your email address and password. The password is stored by our authentication provider as a cryptographic hash. Nobody here can read it, including us.
- Your display name and time zone, if you set them.
- Your reminders. The text, when you sent it, and what happened to it.
- Your device’s state. Its name, when it last checked in, and its software version.
Reminder text specifically
Reminders can be personal — a medication, an appointment, a document. We treat the text accordingly. It is never written into our logs, never used to improve anything, never analysed, and never shared. It exists so that it can be delivered to your device, and it is deleted about thirty days after it is acknowledged, cancelled or expired.
The honest limit of that promise: the text sits in a hosted database, so the people who operate that database could technically read it. We do not, and the protections against it are short retention and no secondary use rather than a claim of technical impossibility that would not be true.
What the device knows about your home
One thing: whether one door is open or closed. There is no camera and no microphone in the hardware, so there is nothing to switch on. Your Wi-Fi password is stored on the device itself and is never sent to us.
Analytics
We count page views to know which pages people read. The tool we use does not set advertising cookies and does not build a profile of you across other sites. We do not use Google Analytics, advertising pixels, or any social network tracker.
Who else sees your data
- Supabase — database, accounts, and the service the device talks to. Hosted in Canada.
- Vercel — hosts this website.
- Cloudflare — domain, and the spam check on the waitlist form.
- Resend — sends the confirmation and announcement emails.
- Stripe — will process payments when ordering opens. Card details go directly to Stripe and never touch our servers.
Nobody else. We do not sell, rent, or trade personal information, and there is no arrangement under which we would.
How long we keep things
- Reminder text: about thirty days after it is finished with.
- Waitlist entries: until the first batch ships and you have been told, or until you ask us to remove you — whichever comes first.
- Spam-protection records: hours.
- Account and device data: for as long as you have an account.
- Order records: as long as Canadian tax law requires them to be kept, and no longer.
Deleting your account or your data
Email privacy@ohryte.com from the address on the account and we will delete it, along with your reminders, and unlink any device from it. We aim to do this within seven days and will confirm when it is done.
To be straightforward about it: this is currently a manual process handled by a person, not a button in your account settings. The self-service version is being built. If you only want off the waitlist, the unsubscribe link in any email we send does that on its own.
Your rights
Under Canadian federal law and Quebec’s privacy legislation you can ask what we hold about you, ask for a copy, ask for corrections, and ask for deletion. Write to privacy@ohryte.com. If you are unhappy with the answer you can complain to the Office of the Privacy Commissioner of Canada, or to the Commission d’accès à l’information du Québec.
Security
Everything travels over encrypted connections, including between the device and our servers. Each device holds its own revocable credential rather than a shared one, so a single lost device cannot be used to reach anything else. Access to your data is enforced by the database itself rather than only by application code.
Children
This is not a product for children and accounts are not knowingly created for anyone under 14. If you believe a child has an account, write to us and we will remove it.
Changes
If this policy changes in a way that affects what we do with your data, we will say so on this page and, if you have an account or are on the waitlist, by email.