DRAFT: the facts below are accurate to the service as built. The legal wording, the legal entity and the governing law need writing before launch.

Privacy

This page says what telemotely keeps, why, and for how long. telemotely is operated by Rymnex (ABN 61 104 882 899), Australia.

What we keep about you

• Your account: your email address and a hash of your password, never the password itself.
• Where you're signed in: a name for each phone or computer you sign in on (such as "Pixel 7"), its platform, the app's version, and when it was last used, so you can see and end them. To recognise the same phone signing in twice, the app sends a value derived from the device that can't be traced across accounts.
• Notifications: a delivery token for each device that should receive alerts.

What we keep about your devices

• Each device's name, its ID, what it runs, the app's version, and when it was last online.
• Its readings, sent every thirty seconds while it's running: processor, memory, disk, network, and graphics and temperatures where the hardware reports them. We keep the recent history for the dashboard.
• The rules you set for alerts, and the alerts that were sent.

What we keep about sessions

• Who connected to which device, when, and for how long. A device's owner sees the email address of whoever connected.
• A recording of the device's readings during the session, so you can look back at what it was doing.

We don't keep what was on the screen. The picture, keyboard and mouse travel between the two devices, encrypted in transit, and through a relay only when a direct connection isn't possible. Neither we nor the relay store them.

How long

Session history and its recordings are currently kept until you delete them. You can remove visits from your own history at any time. The device's owner keeps their own record of who connected, because that record is theirs. We intend to delete session records automatically after a set period, and this page will say when that starts. [Retention period to be decided]

Who else handles it

• Cloudflare relays connections that can't go direct, and serves this website.
• Google Firebase Cloud Messaging delivers alerts to Android phones.
• Resend sends the emails for confirming your address and resetting your password.

This website sets no tracking cookies, and loads no analytics or advertising.

Your choices

You can delete your session history from the app. To delete your account and everything attached to it, write to support@telemotely.com. [Legal rights and complaints wording, by jurisdiction]