01 Introduction
OpenSesame ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we handle your information when you use the OpenSesame mobile application.
02 Information We Collect
OpenSesame is designed to be a private, local-first application. We do not collect personal information that identifies you directly. However, the app requires and stores certain technical data to function:
- Configuration data — to connect to your garage door opener, the app stores the hostname or IP address of your device and the Bluetooth MAC address of the opener.
- Sensitive credentials — the API key used to authenticate with your garage door opener is stored separately and securely (see Section 5).
- Device identifiers — the app may retrieve the firmware version of your garage door hardware to check for compatibility and updates.
- Status information — the app retrieves the current state of your garage door (e.g. open, closed, locked) to display it to you.
03 Permissions Used
The app requests the following permissions for the reasons stated:
- Internet access — to communicate with your garage door opener over your local WiFi network.
- Bluetooth & location — to discover and connect to your garage door opener via Bluetooth Low Energy (BLE). On certain Android versions, "Fine Location" is required by the system to perform Bluetooth scanning. We do not use or store your actual geographic location.
04 How Data is Shared
- No third-party sharing — we do not sell, trade, or share your data with third parties.
- Direct communication — most data stays on your device. The app communicates directly with the IP address or hostname you configure for your garage door opener.
- Update checks — the app periodically checks for firmware updates by contacting
git.thedietrichfamily.ca. This request may involve standard web server logging (such as your IP address) on that server, but no personal information from the app is transmitted.
05 Data Security & Secure Storage
We prioritize the security of your information.
- Encryption — sensitive data, such as your API key, is stored using Android's
EncryptedSharedPreferences, which utilizes hardware-backed encryption via the Android Keystore system. This ensures your credentials are encrypted at rest and protected from unauthorized access by other apps on your device. - Local-first — all configuration data is stored locally on your device. We do not sync your settings or credentials to any cloud service.
06 Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date above.
07 Contact Us
If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us.