Privacy Policy

1 · Who is responsible

Sydcup OÜ, a private limited company registered in Estonia, publishes this app and is the controller for the limited data described below.

2 · What we hold

Nothing that identifies you. There is no proprietary account, no registration, and no backend of ours for data to sit on. You are anonymous to us.

3 · Your Shelly credentials

Your password is typed only into Shelly’s own page inside Apple’s browser sheet. The OAuth token that comes back is stored in the iOS Keychain on this device and sent only to Shelly Cloud. It is never sent to us, to Firebase or to RevenueCat.

4 · Device data

Device names, status and the results of any request you run are processed on this device and sent only to Shelly Cloud, at your request. Nothing about your devices is sent to us. Device identifiers and names are never included in analytics or crash reports.

5 · Processors

Firebase (Google) provides crash reporting, anonymous usage analytics, push announcements and remote configuration. RevenueCat processes subscription purchases and receives an anonymous app-generated identifier so your purchase is recognised on this device. Both operate under their own privacy policies. Analytics can be switched off in Settings and honours that switch immediately. Push announcements are off until you turn them on.

6 · No tracking

We do not track you across apps or websites, do not use the advertising identifier, and do not sell or share data for advertising.

7 · Retention

Crash reports and usage analytics are held by Firebase for up to 90 days for event data and up to 14 months in aggregate form. Purchase records are held by RevenueCat and Apple for as long as needed to honour your subscription. Everything else stays on your device.

8 · Deleting data

Settings → Delete local data wipes the Keychain entries, cached device data, recipes and request history on this device. Deleting the app removes the rest. Data held by Shelly Cloud is managed in your Shelly account.

9 · Your rights

Under the GDPR you may ask what data we hold about you, request its deletion or object to processing. Because we hold nothing that identifies you, most requests are satisfied by the deletion steps above. You can also complain to the Estonian Data Protection Inspectorate or the supervisory authority in your country.

10 · Not affiliated

This is an independent third-party application, not affiliated with, endorsed by or connected to Allterco Robotics EOOD or the Shelly brand.