What we keep, why, and who can see it.

Last updated: September 4, 2026

1. Who this covers

This policy explains how the business that operates the shadeOS service under that name ("shadeOS", "we") handles personal information in the shadeOS homeowner app (at app.shadeos.io and installer-branded addresses such as rowland.shadeos.io), the shadeOS cloud, the shadeOS Hub, the installer console at pro.shadeos.io, and this website. It is part of our Terms of Service.

Your installer is a separate business. Where your installer collects information from you directly, for example when they sell and install your screens, their own practices apply.

2. What we collect

Account. Your name, email address, and sign-in credentials (a password, stored hashed, or one-time sign-in links sent to your email). Which installer and site your account belongs to, and your role.

Site. A name for your home, its city, region, postal code and country, its latitude and longitude, and its time zone. These are entered by your installer when they set up your site and are shown read-only in the app.

Shades, groups and hub. The names and configuration of your shades and groups, favourites and preferences, the commands sent to them and when, estimated positions, and an activity log of what moved and why (a tap, a remote, an automation). Hub health: online or offline, firmware version, boot and update reports, Wi-Fi signal and similar diagnostics. If position or wind sensor tags are installed, their readings (distance, motion, battery, temperature) and link status.

Automations. The Protections, Timers and Schedules you set up, and a record of each time one ran and what it did.

Weather. Forecasts and observations for your site's coordinates, which we fetch from a third-party weather provider and keep for a limited time so automations and the app can use them.

Notifications. If you turn on push notifications, the push subscription your browser gives us (an endpoint address and encryption keys), the browser and device type, and your notification preferences.

Support. Whatever you send us or your installer when you ask for help.

This website. shadeos.io is a static site. It sets no cookies and runs no advertising trackers. If we enable analytics it will be cookieless, aggregate page-view measurement that does not identify you. If you email us to book a demo, we receive what you send and use it to reply.

We do not collect payment details during early access. If Premium becomes paid, payments will be handled by a payment processor and we will update this policy first.

3. How we use it

• To run the Service: sending your commands to your hub, showing you what your shades are doing, and running the automations you set up.
• To fetch weather for your site and work out sunrise and sunset.
• To send notifications you asked for, such as a hub going offline or a Protection running.
• To let your installer support you and keep your system healthy.
• To keep the Service secure, prevent misuse, and diagnose problems.
• To improve the Service, including in aggregated or de-identified form.
• To tell you about changes to the Service, these terms or Premium.
• To meet legal obligations.

We do not use your information for advertising, and we do not sell it or share it for others' marketing.

4. Who can see it

Your household. Anyone you give access to your site sees the same shades, activity and automations you do.

Your installer. Your installer can see your site's status in their console, including shade inventory, hub health, activity, automation runs, diagnostics and alerts, so they can support you. They can also see your name and contact details as the customer of record.

Our service providers. Companies that host and run the Service on our behalf, under contracts that limit what they may do with the data:

• Supabase (database, authentication and server functions)
• Cloudflare (hosting the app and this website, and network security)
• Fly.io (background services that run automations and receive hub messages)
• Pirate Weather (weather data; receives your site's coordinates only)
• Resend (sending sign-in and account emails)
• Apple, Google and Mozilla push services (delivering push notifications to your browser)
• GitHub (distributing hub firmware updates; your hub contacts it to download them)

Legal and safety. We may disclose information if required by law or legal process, or to protect the rights, property or safety of shadeOS, our users or others.

Business transfers. If shadeOS is sold or merges with another company, your information may transfer with it. We will tell you if that happens.

5. Where it is processed

Our providers store and process data in the United States. If you use the Service from elsewhere, your information will be transferred to and processed in those locations.

6. How long we keep it

• Shade activity and sensor readings: about 30 days, then deleted.
• Automation run history: about 13 months, so your installer can see seasonal patterns.
• Daily summaries (counts of moves, hours online, and similar): kept while your site exists.
• Weather data: a rolling recent window.
• Account and site details, shade configuration and automations: until your account or site is deleted.
• Notification subscriptions: until you turn notifications off, or they stop working.
• Backups: our database provider keeps short-term backups that age out on their own schedule.

7. Security

Connections between the app, the cloud and your hub are encrypted. Each site's data is separated from every other site's by access rules enforced in the database. Hub credentials are issued per hub. We use reputable providers and keep access to production systems restricted. No system is completely secure, and we cannot promise that your information will never be accessed without authorisation. Our liability for security incidents is limited as described in the Terms of Service.

8. If something goes wrong

If we learn of a security incident that affects your personal information, we will investigate, take reasonable steps to contain it, and notify you and any authorities as the law requires.

9. Your choices and rights

• Notifications: turn them on or off, and choose which kinds, in Settings › Notifications.
• Automations: turn Protections, Timers and Schedules on or off at any time.
• Site details: your address and coordinates are set by your installer. Ask them to correct them.
• Access, correction and deletion: email us and we will show you what we hold, correct it, or delete your account and your site's data, subject to anything we must keep by law. Your installer can also remove your site.
• US state privacy rights: depending on where you live you may have rights to know, access, correct, delete, or port your information, and to not be discriminated against for exercising them. We do not sell or share personal information for targeted advertising, and we do not use it for profiling with legal effects. To exercise a right, email us; we may need to verify that the request comes from you.

10. Children

The Service is for adults. It is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

11. Data on your hub

Your shadeOS Hub stores your shade configuration and recent activity locally and serves a local web page on your home network. That data lives in your home, under your control, and keeps working if the cloud Service is unavailable. Anyone on your home network can reach the hub's local page; secure your network accordingly.

12. Changes to this policy

We may update this policy. We will post the new version here and update the date at the top. If a change is material, we will tell you in the app or by email before it takes effect.

13. Contact

Questions, access or deletion requests: alex@shadeos.io.