Skip to content
A single shaft of daylight crossing a dark room

05Chapter Five

We built it sowe couldn't look.

Every company promises not to look at your video. We removed the possibility instead. Footage is read on the Hub, inside the house, and is never uploaded. What reaches the cloud is already sealed with keys we do not hold.

  1. 01

    Local by architecture.

    Streams are processed on the Hub. Frames stay in memory, are turned into a short sentence, and are discarded. There is no upload pipe for video because we never built one.

  2. 02

    The cloud is a mailbox, not an archive.

    Guardian Cloud stores sealed envelopes and routes them to your family's phones. It can see that an envelope exists and where it should go. It cannot open one. Neither can we, under any request.

  3. 03

    Only your family holds the keys.

    Keys are generated on the Hub and shared directly with family devices. Losing every server we own would not expose a single photograph. It would only mean the post stopped moving.

  4. 04

    Deletion is real.

    Snapshots expire on a schedule your family sets — twenty-four hours by default. Expired means gone from the mailbox and gone from the devices, not flagged as hidden in a table somewhere.

Read the technical note. We would rather be checked than believed.