What we hold
Calls are never recorded and never saved.
A visitor’s camera and microphone are never sent anywhere unless you answer.
What we do keep, and for how long
Your name, your email, and the Telegram chat we alert. If you switch on alerts in the Android app, that installation's identifier and push-notification token, and a short-lived record (under a minute) linking each alert to a ring. When you ask for a sign-in code, a counter of the attempt, kept against a scrambled marker of your email and address for about a day. A list of when your doorbell rang, kept for 30 days. If you take a paid plan, a record of what you paid, never your card, which goes to Paystack and never reaches us. Messages sent to you through a contact QR, kept for 60 days unless you delete them sooner, and if you put a logo on a contact form, that logo, shown to anyone who scans the code. And a daily tally of how many people visited this website, which is a number and nothing else.
If you switch on take a photo, one still picture of whoever is at your door is taken the moment they press the bell, and kept for 7 days. If you switch on leave a message, a visitor who gets no answer can type a note or record a short voice note, kept for 30 days. Both are off unless you turn them on, and both delete themselves automatically.
You can delete your account and everything in it from your dashboard, at any time. The full version.