Privacy Policy

1. Our Privacy Commitment

Shkouun uses account and visit information to operate your digital doorbell. The data categories and services used are described below.

2. Information We Collect

• Business Owners: Name, email address and account identifier supplied through Google or magic-link sign-in, a session managed by Better Auth, your business name and doorbell configuration.
• Arriving Visitors: Visitor name, answers to fields configured by the business, messages, visit status, timestamps and a browser tracking identifier. To prevent abuse, the service also compares protected fingerprints of that identifier and network address; the original values are not stored in the operational database. Dismissing a visit hides it from the board; it does not immediately delete it.
• Local Preferences: Audio, language, theme and visit tracking are stored in your browser. Session cookies maintain business owner sign-in.
• Device Alerts: If you enable alerts, Shkouun stores the delivery endpoint and subscription keys supplied by your browser to encrypt and send arrivals to that device. Disabling alerts, signing out, or deleting the account revokes the subscription; expired endpoints are removed after the push service rejects them.

3. Sub-processors & Security

The following services support Shkouun:

• Cloudflare : Application hosting, API and operational data storage.
• Google, Cloudflare & Better Auth : Google provides OAuth sign-in, Cloudflare delivers email magic links and hosts the service, and Better Auth manages accounts and sessions on our backend.
• RevenueCat & Stripe : When subscriptions are available, these providers handle checkout and subscription entitlements. Card information is entered through their checkout interface.

4. Retention and daily purge

Operational visit records are purged daily on a UTC schedule. Fingerprints used to protect reception and their associated blocks expire after 24 hours, then are removed during the next maintenance run. A visit can disappear from tracking during this purge even if it was still waiting. This purge does not delete owner accounts, sessions, business settings or billing records.

Technical logs and records retained by service providers may follow separate retention schedules. Operational purging does not guarantee immediate removal of every copy or technical trace.

5. Abuse prevention

For one business, the service recognizes a browser for 24 hours and keeps the first name used. After more than two first-name changes, new visits from that browser are temporarily blocked. A network address alone is never enough to trigger this name-change block. If a block seems incorrect, ask the business staff for help.

6. Data Access and Erasure Requests

In settings, you can download your account data and record an erasure request. A reference confirms that the request was recorded for review, not that data was immediately erased. The request does not cancel your subscription; manage cancellation separately in the billing portal.

7. Manage Your Data

Sign in with the relevant owner account to access the download and erasure request controls.

Data privacy questions: privacy@shkouun.com