Last updated: 17 October 2026
This policy covers Hearthlight and the applications published by Cherishvale. It does not cover this website's host or any third-party site we link to.
Our apps have no accounts, no analytics, no advertising and no trackers. We do not collect personal information and we do not sell or share it. What the apps do happens on your device.
Hearthlight does not record audio. It captures sound, processes it in memory on the device, and discards it. No audio is stored, and none is attached to an alert. It has no camera.
Hearthlight is a wall-mounted acoustic device rather than an app, so it works differently from the rest of this catalogue — but the principle is the same: the processing happens on the device, not in a cloud service.
Audio is not recorded. The node captures sound in order to analyse it. The audio is held only in memory long enough to run detection on it, then discarded. There is no rolling buffer, no retained clip, no “keep the last ten seconds for debugging” feature, and no audio upload path. This is absent from the design rather than switched off by default.
Alerts are metadata only. When the node determines that gunfire has occurred, it sends roughly 200 bytes of JSON: the node identifier, room, UTC timestamp, confidence score, number of shots, and a direction bearing where the microphone array can resolve one. The alert contains no audio, no image, and no identifier of any person.
There is no camera. The device contains no lens and no image sensor.
Direction is room-level. Where a bearing is reported, it is a coarse direction such as “north corridor.” The device is not designed to track individuals or reconstruct movement through a building.
Connections are outbound only. The node accepts no inbound connection. It makes an outbound request to a single alert destination configured by the installing organisation, and to no one else. It holds no accounts and runs no analytics.
Who receives an alert. Alerts go only to the destination the installing organisation configures — for example its own mass-notification platform. That organisation's handling of alerts is governed by its own policies, not ours. We do not operate a central service that receives or stores them, and we have no ability to retrieve audio, because none is retained to retrieve.
We will provide a one-page written attestation covering the above to any organisation's counsel before a pilot begins.
Planetary Explorer collects, transmits and shares no personal data. It has no user accounts, no analytics, no advertising, no trackers and no in-app purchases. All imagery and feature data are bundled inside the app and load from your device; it does not require an internet connection and does not contact our servers or anyone else's. It requests no sensitive permissions and does not access your location, contacts, camera, microphone, photos or files.
Purepage is a document scanner. It collects, transmits and shares no personal data. It has no user accounts, no analytics, no advertising and no trackers.
Documents you scan are written only to local storage on your device. They are never uploaded to us or to anyone else, and we have no ability to access them. Deleting a scan removes it from your device; no server copy exists.
The editing tools — cropping, page reordering, annotations, signatures, redaction, PDF compression and password protection — all run on your device, and recognised text together with its search index is stored locally alongside your scans. None of it is transmitted.
The optional app lock uses your device's own fingerprint, face or PIN; Purepage stores no biometric data. Library backups are files written only where you choose to save them.
Purepage requests these permissions:
| Permission | Why |
|---|---|
| Camera | To capture images of the documents you choose to scan. Images are processed on your device and saved locally. |
| Network access | Used only by Google Play to process an optional one-time purchase. No document content or personal data is transmitted. |
Purepage offers an optional one-time purchase. Payment is handled by Google Play. We never receive or store your payment details.
PattyBug is an offline scientific calculator. It collects, transmits and shares no personal data. It has no user accounts, no analytics, no advertising, no trackers and no in-app purchases.
Expressions, results, history and your chosen theme are stored only on your device. They are never uploaded to us or to anyone else. Deleting the app removes them.
PattyBug requests no permissions at all, including no network access. Because it has no way to connect to the internet, it cannot send your data anywhere.
Kronological is a live calendar wallpaper. It collects, transmits and shares no personal data, has no user accounts, no analytics, no advertising and no trackers.
With your permission it reads appointments from your phone's own calendar so it can mark them on the month grid and name the next one. Reading is all it does: it never creates, edits or deletes an event, and it keeps no copy of your calendar. The background photo or video you choose is stored on your device and is never uploaded.
The app has no network permission, so it cannot send anything anywhere. If you turn calendar access off — or deny it in the first place — the calendar still renders and simply shows dates. Uninstalling the app removes everything it stored.
Resera removes passwords from PDF files on your computer. It collects, transmits and shares no personal data and makes no network requests of any kind. The files you open and the passwords you type stay on your device.
Our Android apps are distributed through Google Play. Google may process information related to your download or purchase under Google's own privacy policy. That processing is Google's, not ours; we only receive confirmation of whether a purchase was completed.
Our apps collect no personal information from anyone, and therefore none from children.
This website may be served by a third-party host that logs standard technical request data, such as an IP address, for its own operational purposes.
If this policy changes, we will update the date above and post the revised version on this page.
Questions: privacy@cherishvale.com