What we collect, in plain words.
This is a summary of our intent while both products are in development. A full policy ships with the first public build, and we'll publish it before asking anyone for data.
The waitlist
Nothing. The sign-up form was removed because it asked for an address and then discarded it. When sign-up opens, this section will say exactly what is stored and for how long.
Readinity data
There is no Readinity app yet. What it will store, where, and for how long will be on this page before anyone can use it. Your household details will not be a dataset we mine.
Cyberinity data
There is no Cyberinity app yet. When there is, the identifiers you ask it to look for will be stored in your account, in the EU, and this page will describe how they are used before anyone can sign up.
What your browser stores
Four small entries, all of them yours: the language you picked, the country or region you picked it for in the language menu, your answer about analytics, and whether you waved away the offer to read this site in another language. They stay in your browser, they are not sent anywhere, and clearing your site data removes them.
Analytics on this site, only if you accept
This site asks before using Google Analytics. If you accept, Google sets cookies and receives the pages you view, the site you came from, your approximate location and your device type. Advertising features and Google signals are off, and the data is kept for two months. If you decline, nothing from Google loads; Cookie settings in the footer changes your choice. The apps are not built yet; we do not plan analytics or advertising SDKs in either, and each app’s own privacy policy will say what it contains before it ships.
The contact form
What you type goes to a mailbox we read, and this site keeps no copy of it: there is no database behind the form. The handover is done by SendGrid (Twilio) in the United States, from our server rather than from your browser, so nothing is sent anywhere until you press the button. The address you give is used to answer you, and to send you one short confirmation that a person has your message — at most one a day, repeating nothing you wrote, and never anything else. The message is deleted once the exchange is closed. The legal ground is our legitimate interest in answering people who write to us.
The whole data dictionary.
That is the complete list. No advertising identifiers, no device fingerprint and no mailing list. The one email we send — the confirmation after you write to us — is plain text, so there is nothing to put a tracking pixel in.
Every processor, named.
No advertising network, no CDN that can read your traffic, and Google only sees visitors who accept analytics.