texty
Plain words on what Texty does in your home and what it keeps. The legal version is the privacy policy.
It joins your WiFi and only calls out, over encrypted HTTPS, to the Texty server (plus a time server to know what time it is). It checks the server's certificate, so it can't be tricked into talking to someone else.
It opens no ports at home: no web page, no remote login, nothing your other devices or the internet can connect to. It talks to the little printer over Bluetooth.
During setup, Texty opens its own WiFi called Texty-XXXX. Its password is printed on the slip that comes out of the printer, so only someone standing next to it can join. Once your WiFi works, the hotspot is gone.
If your WiFi disappears for more than 5 minutes (router off, moved house), the hotspot comes back, password-protected, so you can pick a new network. Texty keeps trying your old WiFi in the meantime.
Texty updates itself. Every update is digitally signed by the person who runs Texty, and the device refuses anything that isn't signed with that key, or that is older than what it already runs. Even someone who broke into the web server couldn't push their own software onto your Texty.
Stored: your name (whatever you typed), your friends and groups, the notes you send and receive (the text and the printed picture), your Texty's name, settings and printer status, and a fingerprint of your login cookie. Note pictures are deleted 90 days after printing. Secret notes never show up in the app, and their picture is deleted the moment it's printed.
Not stored: no email address, no password, no phone number, no location (except the town you pick for the weather on the morning slip).
On the Texty itself: your WiFi name and password, and its own device key.
Notes travel encrypted. On the server they are stored like in any messaging service, so whoever runs Texty could technically see them.
Only your friends. In Settings you can limit it to some friends or groups, block people, and set quiet hours. Group links make everyone who joins friends with every member, so only share them with people you'd invite one by one.
In Settings, open your Texty and choose Remove this Texty. It is disconnected from your account immediately (also if it was lost or stolen), notes waiting for it are deleted, and it prints a fresh setup code.
To wipe the device itself (WiFi password, key), hold its heart button for 10 seconds. “Download my data” and “Delete my account” are in Settings too.
If you reserve something in the shop, we store the product, quantity, your name, your email and your optional message, only to email you when it's available. Nothing is shared or used for anything else. Your confirmation page has a private link to delete it yourself, any time.