Privacy Policy

Who we are

Geldome makes AI-guided pest deterrent devices. The Geldome app sets up your devices and opens their control dashboards. This policy explains what information the app and our servers handle, why, and what control you have over it.

What the app stores on your phone

The app keeps a small amount of data in its private storage, which other apps cannot read:

• Your device list — each device's name, its network address, the date it was added, and (if you paired it over Bluetooth) the Bluetooth identifier your phone uses for it.
• Pairing keys — one per Geldome device, used to encrypt the Bluetooth connection to that device. A key is either delivered to the app with your invite or entered by you.
• Access tokens — one per device, issued when you open an invite. They let the app open that device's control and review dashboards.

Invites

Your Geldome contact can send you an invite by email from info@geldome.com. When you open it, the app sends the invite code to our server, which returns the access tokens, pairing keys and network addresses for the devices you were given access to. Each invite works once and expires after a few days.

If the app isn't installed yet, the invite link sends you to Google Play with the invite code attached. After installation, the app reads that code from Google Play once, on first launch, so you don't have to open the email again. No other installation information is used.

Wi‑Fi details

When you set up a device's Wi‑Fi, the network name and password go directly from your phone to the device over an encrypted Bluetooth connection. The device saves them in its own network settings so it can connect. They are not kept by the app afterwards, and they are never sent to our servers.

What our servers hold

• Client accounts — for client portal users: name, email address, username and a hashed password (never the password itself).
• Sites and devices — the sites your devices are installed at (name, address and map position, as entered by Geldome) and which devices belong to them.
• Invites and access tokens — so we can check that a request to a device's dashboard is allowed, and revoke access when asked.
• Device pairing keys — each Geldome device reports its own key to our server so it can be included in your invite.
• Your recording choice — for each device.
• Server logs — your IP address, the app or browser type, the address requested and the time, kept for 14 days for security and troubleshooting.

Movies and your recording choice

A Geldome device can record short movies when it fires at a bird, so you can watch them in the app. Recording is your choice, and it is off until you choose it. The app asks you when a device is first added, and you can change your answer at any time from the app or from the device's Movies page. A choice applies to the whole device, for everyone with access to it.

If you choose not to record, the device saves no movies and sends none to us. It also stops saving the pictures it otherwise keeps on the device for improving its detection. If you turn recording off later, the device stops within about a minute. Movies already stored stay until you delete them.

If you choose to record, each movie and a small picture from it are stored in a private folder for that device, on Amazon Web Services servers in Israel, encrypted while stored and while sent. Only people given access to that device can watch them through the app or dashboard.

Sharing. While recording is on, someone with access to the device can press Share to send a copy of a movie file to any person or app they choose, such as WhatsApp. That copy is then out of our control: we can't recall it or delete it, and whoever receives it can watch it and pass it on.

Deleting. Delete All Movies on the Movies page permanently removes that device's movies from our storage and, once it next connects, from the device. We keep movies until you delete them. Copies that may exist in our backups are not removed by this.

Our access. Geldome administrators manage the systems that hold these movies and can technically reach them and the devices' dashboards.

Things that happen whichever you choose. When someone opens a device's dashboard remotely, its live video passes through our server and Tailscale's private network without being stored. The device also keeps some reference pictures of its surroundings on itself for detection.

If nothing may leave your organisation, choose not to record and tell your Geldome contact before installation. A device that isn't connected to the internet sends nothing to us.

The geldome.com website

To show prices in your currency, the website uses your approximate country, which our content delivery network (Amazon CloudFront) determines from your connection. It is used only for that page view and is not stored. If you pick a currency yourself, your browser remembers that choice locally; it is never sent to us. The website loads no analytics or advertising tools.

Cookies

The client portal uses a sign-in cookie. Device dashboards use a cookie holding that device's access token, so the dashboard keeps working as you move around it. We use no advertising or tracking cookies.

Permissions the app asks for

• Bluetooth (scan / connect) — to find and pair with your Geldome device.
• Location — some Android versions require it for any Bluetooth scan. The app never reads or sends your location.
• Internet / network state — to open invites and reach device dashboards.
• Vibration — brief feedback when you send Wi‑Fi details.

Who processes data for us

We do not sell your data, and we do not use analytics or advertising tools. We rely on these providers to run the service, and they process data only on our behalf:

• Amazon Web Services — hosts our servers and website, and stores movies if you choose to record.
• Google — Google Workspace sends invite and account emails; Google Play distributes the Android app.
• Tailscale — the private network that connects our server to Geldome devices, which dashboard traffic travels over.

Security

All connections to our servers use HTTPS. Bluetooth communication with each device is encrypted with that device's own key. Access tokens are specific to one device and can be revoked at any time.

How long we keep data

Invites expire after a few days. Access tokens and account data are kept while you use the service and deleted when access is revoked or the account is closed. Server logs are deleted after 14 days.

Your choices and data deletion

Uninstalling the app removes everything it stored on your phone. To revoke a device's access, close your client account, or ask what we hold about you, email us at the address below; we respond within 30 days.

Children

The Geldome app and portal are business tools and are not directed at children under 16.

Changes to this policy

If we change how we handle data, we will update this page and the date at the top.

Contact

Questions about this policy: info@geldome.com