Privacy Policy

Senlo is a home monitoring and care app. It works with small sensors in a home and tells the people who look after that home how the home, and the people living in it, are doing. This policy explains what personal data we process, why, who helps us, and what choices you have.

Senlo is operated by RebelCode (Poland), the controller of the personal data described here. Questions: support@senlo.pl.

1. What we collect

• Account: your phone number (you sign in with a code sent by SMS), your display name, your language and your role in each home (admin, caregiver or member).
• Home data: readings from the sensors in a home (motion and presence, doors and windows, temperature, humidity, power use), the state of switches and devices, and when these things happened. From these readings Senlo works out daily routines, such as waking up, meals or going out, and unusual situations that need an alert.
• What you tell us: answers you give in the app, for example confirming or correcting what Senlo noticed, and how alerts were handled ("I'm on it").
• Cameras (optional): if a home has cameras connected, recordings stay on the hub in that home. Live images and clips pass through our servers only to people the home's admin allowed to see them. We do not keep camera recordings on our servers.
• Notifications: your device's push token and an installation identifier, used only to deliver notifications.
• Diagnostics: crash reports and technical logs from the app, without your name or phone number, and standard server logs (IP address, time of request).

2. How we use it

To run Senlo for you: signing you in, showing the state of a home, learning its usual rhythm, noticing unusual situations, sending alerts and daily summaries, and letting the people allowed to do so control devices. We also use it to keep the service secure and to fix problems. We do not show ads, we do not sell data and we do not build marketing profiles.

3. Legal basis

• Providing the service you asked for (GDPR Art. 6(1)(b)): your account and the home's data.
• Our legitimate interest in security and fixing errors (Art. 6(1)(f)): logs and crash reports.
• Consent (Art. 9(2)(a)): daily routines of a person being looked after can say something about their wellbeing. The person living in the home, or their legal representative, gives this consent before Senlo is used for care, and can withdraw it at any time.

4. The people living in the home

Senlo records activity in a home, including the activity of people who do not use the app themselves. The admin who sets up a home must tell everyone living there about Senlo and make sure they agree. Anyone living in a monitored home can ask us at any time to stop the monitoring and delete the home's data.

5. Who helps us

• OVH (European Union): the servers that run Senlo and store its data.
• SMSAPI (Poland): sending sign-in codes by SMS.
• Apple and Google: delivering push notifications to iPhone and Android.
• OpenAI: writing the daily summaries in plain language, and the conversation feature that is currently being tested. We send the day's events of a home, without phone numbers; first names as used in the home may be included. OpenAI does not use data sent through its API to train its models.
• Sentry (Functional Software, Inc.): crash reports from the app, without personal details.

6. Where data is stored

Senlo's servers and data are in the European Union. OpenAI and Sentry may process data in the United States; those transfers are covered by the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

7. How long we keep it

• Account data: until your account is deleted.
• Home data: as long as the home uses Senlo. It is deleted when the home is removed or when someone entitled to it asks us.
• Server logs and backups: up to 30 days, then deleted automatically.

8. Your rights

You can ask us to access, correct or delete your data, to restrict or object to its processing, and to export it. Where we rely on consent, you can withdraw it at any time. Write to support@senlo.pl; we answer within 30 days. You can also complain to a data protection authority; in Poland that is the President of the Personal Data Protection Office (UODO).

9. Deleting your account

How to delete your account, and what happens to your data, is described on the Delete account page.

10. Security

All traffic between the app and our servers is encrypted (TLS). Access to each home is limited to the people its admin invited, according to their role. Data is not end-to-end encrypted: our staff can technically access it, and do so only to run the service or to solve an incident.

11. Children

Children can use Senlo only with an account a parent set up for them through an invitation to the family's home.

12. Changes

If this policy changes, we publish the new version here with a new date. We tell you in the app about important changes.

13. Contact

support@senlo.pl