Privacy

The short version

We cannot see your sessions. Not as a policy commitment we are asking you to take on faith, but because sessions are encrypted end to end with keys the relay never holds. Everything below is the detail behind that sentence.

What we hold

• Your account. An account name and a password stored only as a salted, deliberately slow one-way hash. We cannot recover your password because we do not have it.
• Your paired devices. The public half of each device’s keypair, and a name for it so you can tell them apart.
• Connection metadata. That two of your endpoints were connected, approximately how much data passed, and when. This is what makes usage metering and abuse handling possible, and it is the maximum the relay is capable of learning.

What we do not hold

• The contents of any session: no frames, no keystrokes, no clipboard, no files.
• Session keys. They are agreed between your two endpoints and never sent to us.
• Your weekly activity record. It is computed and stored on your device.
• Advertising identifiers, behavioural profiles, or data sold or shared with third parties. There are none, and there is no arrangement under which there could be.

Your week stays on your device

The minutes-worked record that powers “Your week” is written to local storage on the phone or tablet that measured it. It is not uploaded, not synced between your own devices, and not readable by us. Deleting the app deletes it.

Notifications

The weekly summary and the dormancy reminders are generated and scheduled on your device. Their content is composed locally from data that never left it, so no server is involved in deciding what they say.

Where data lives

Account records are held on our infrastructure in Europe. Relay nodes run in Europe and North America; a relay forwards ciphertext and stores no session content. Your device chooses between regions by measured latency, so which relay carries a given session depends on where you are at the time.

Retention and deletion

You can delete your account from Settings in the app. Doing so removes the account record and unpairs its devices. Connection metadata is retained only as long as it is needed to operate and meter the service.

Children

TETHERÆ is not directed at children under 13, and we do not knowingly create accounts for them.

Changes

If this document changes in a way that affects what we collect, the change will be described here rather than absorbed silently into a new revision date.

Contact

Privacy questions and deletion requests: hello@tetherae.com.