Effective 8 November 2026 · Last updated 8 November 2026 · Applies to: Sight, in the United States · What changed: Sight no longer keeps video. Each clip is read and then discarded, and only stills can be kept, if your household turns keeping on. This page now names every company that receives data from your cameras or your home's notes, what each one receives, and why.

Privacy at Sight

Sight is built on one promise: read by a machine, never watched by a person. This page explains exactly what that means — what we collect, what we keep and for how long, what we deliberately throw away, who else is involved, and where the limits of our promise are. Sight is provided by DashSoft LLC (“Sight”, “we”, “us”).

Jump to: What we collect · What we don't keep · Recognising people · Limits of this promise · Where it lives · How long · Your rights · Deleting & unlinking · Who else touches it · Selling · This website · Children · Changes · Contact

What Sight collects

To turn your camera events into a plain-language story, Sight collects a small, specific set of things, each for the reason given:

• Ring event signals. When Ring detects something at one of your cameras, it sends Sight a short signal — that motion was detected, that a doorbell was pressed, which device it was, and when. Sight also receives administrative signals from Ring, like a device going online or offline, and whether your Ring subscription is active. These are the events Sight turns into notes.
• Your Ring account's ID and email address, when you link. Ring passes these to Sight at linking, so the right Ring account is connected to the right Sight account and Sight's sign-in page can fill in your email for you.
• The clip of each event — read, then discarded. To describe what happened, Sight fetches the event from Ring. Sight's own software looks at a still from it, and if your household has agreed to AI processing, the clip is read by an AI model (see who else touches your data), which writes the description. Then the clip is discarded. Sight keeps no video.
• Moments and the things built from them. The short text notes Sight writes about what happened, and the daily briefs, activity rhythms, answers, and alert rules built from those notes. Each note is a sentence or two of plain text.
• Your account. The email address you sign up with and your password, which Sight stores only in scrambled (hashed) form, plus basic account records: your name if you add one, your home, the people you invite into your family circle, your cameras' names and places, your notification settings and the devices you get notifications on, your answers on the AI-processing and face-recognition screens, and your login sessions.
• Where to look — not what was there. So a moment opens on the part worth seeing, Sight keeps two small things beside the note: the exact instant of the event, and a rectangle marking where in the picture someone was. That is a timestamp, four numbers for the rectangle, a word for what Sight found there (a face, a person, or just the frame), and how sure it was. It is not an image and it cannot be turned back into a picture. It records where a face was, never whose — that is a different record, made only if your household uses visitor recognition.
• Stills — only if your household asks us to keep them. Sight's software has to read the event to tell you a parcel arrived; that reading happens whatever you choose. What you choose is whether stills from it are written down afterwards, so your timeline can still show the moment weeks later without depending on Ring's servers. The default is to keep none. If an owner turns keeping on, we keep the event's snapshot, the frame that shows it best, and a close-up of each face found in it — encrypted, on a 7-, 30- or 365-day clock. Never video. See how long we keep it.
• A face signature — only if your household uses visitor recognition. This is off, and stays off, unless an owner of your home reads and accepts a separate screen. With it on, each face in an event becomes a face signature — a list of numbers that lets Sight tell you that Tuesday's visitor came back on Friday. That list is biometric data. The full explanation is here — please read it before anyone in your home switches it on.
• The event exactly as Ring sent it. When Ring tells Sight something happened, we write that signal down verbatim before we interpret it, so a Ring outage or a change on their side can't quietly cost you a piece of your home's history. It is the same short administrative signal described above — never media.
• What you send us. Messages you send through our support form, and the email address you leave on this website, so we can reply.

What Sight deliberately does not keep

This is the part most camera services get wrong. Sight's answer is not that the sensitive thing never exists — it does, because reading the event is how Sight knows a parcel arrived. Our answer is that nobody at Sight watches it, the video is discarded once it has been read, and any picture kept is locked to your home and does not outlive a clock you set.

Software reads it. Nobody at Sight watches it. When one of your cameras records an event, Sight fetches it from Ring. Sight's own software looks at a still from it — is there a person, a vehicle, a parcel, a face worth opening the moment on — and, if your household has agreed to AI processing, the clip goes to an AI model at Google or, for some homes, Pulses, which writes the description (see who else touches your data). That reading is done by machines, in seconds. Once it is done, the clip is discarded: Sight keeps no video. What can be kept afterwards is your household's choice: nothing, or the stills. When you open a moment, the app can show you its still either way: from your home's own encrypted store if you keep pictures, or, if you don't, fetched from Ring for that one view and passed to your app without being stored.

Your home has its own key. If your household turns picture-keeping on, each still is encrypted before it is written down, with a key belonging to your home and no other. That key is itself locked away, the encryption is tied to your home so a file can't be quietly moved to someone else's, and the picture is never written to a disk inside the machines that read it. It lands in storage that allows no public access, which only Sight's own services are permitted to open — not an employee, not an admin console, not a support tool. When you open a moment in the app, the picture is decrypted for that request, for you, because you are a member of that home. There is no link we can hand out that would let anyone else fetch it, and no address that keeps working after you delete.

The original stays yours, at Ring. The picture Sight reads comes from Ring and carries Ring's own visible watermark. Our copy of a still exists so your timeline doesn't go blank when Ring's service has a bad day — it is a convenience, not a replacement. Your recordings stay in your Ring account under Ring's retention and Ring's policy, which we don't control, and you watch them in the Ring app. Deleting from Sight does not delete from Ring.

By default, Sight sees that someone is there and never works out who. To open a moment on the part worth seeing, Sight looks for a person in the picture — and for a face, because that is usually the split-second you would actually want. Finding a face and knowing whose it is are two different things, and unless your household uses visitor recognition, Sight only does the first: it notes that a face was there, and keeps nothing that could tell you Tuesday's visitor was also Friday's. What it writes down about a person is a moment in time, a rectangle, a word, and a confidence score. It writes “someone was at the door,” not who. If recognition is switched on, that changes in one specific way, and the next section is entirely about it. A stored picture is still a picture either way, which is exactly why the key is per-home, the clock always runs out, and “keep none” is a real setting rather than a gesture.

No one watches your cameras. There is no screen, support tool, or debug page at Sight that plays your camera back to an employee, and no admin gallery of homes. In the app, access to a picture is decided by one question — are you a member of this home. Nobody at Sight watches your cameras. Emergency “break-glass” access exists, because pretending otherwise would be a lie: it is a separate, normally disabled path, it requires two-person approval, it is logged, and we commit to telling the affected home.

Recognising a returning visitor

This is the one feature on this page that creates biometric data about the people at your door. It is optional, and it is off. Where Sight offers it, it stays off unless an owner of your home opens a screen written for this alone, reads it, and accepts it. Setup shows that screen once, on its own, with “Not now” beside the yes; it is never folded into another permission, and nothing else switches it on.

What it does. Sight already works out where a face is in a picture, so a moment can open on the part worth seeing. With recognition on — and only in a home that keeps pictures — each event's clip goes to Pulses (pulses.ai), a separate company, instead of Google. Pulses describes the clip and makes a face signature for each face it can: a list of numbers. Two signatures made from the same person come out close together, so Sight can tell you that Tuesday's visitor came back on Friday, and gather a stranger's four visits into one person on your timeline, named or not. That is the entire purpose: again, not who. If your home keeps no pictures, no face signature is made: the clip goes to Google for a description only.

What it is not. Sight does not know anyone's name and cannot work one out. There is no directory of faces, nothing is checked against any outside database, and your home's face signatures are compared only with faces seen at your home — never with another home's. Beyond Pulses, which makes and holds them for your home, none of it is shared with Ring, with law enforcement, or with anyone else. If you want a group on your timeline called “the dog walker”, you type that in yourself — Sight will never guess it.

It is biometric data, and we treat it as such. A face signature is exactly what the Illinois, Texas and Washington biometric laws are about, and we are not going to argue that a list of numbers isn't a face. That is why the consent is a real screen with real words rather than a checkbox, why we record which version of that text the owner accepted and when, and why the default is off.

How long it lasts. Each face signature expires on the window your home has set for keeping pictures — 7, 30 or 365 days after the moment it came from. Someone who keeps coming back stays recognisable, because each visit makes a new signature; someone who stops visiting is forgotten once that window has passed since their last visit. Sight's own copy is locked to your home's key. For Pulses' copy, Sight checks your home's set every hour and asks Pulses to delete any face signature that Sight no longer keeps, and if your household sets Keep pictures to Off, Sight asks Pulses to erase your home's set. That has a consequence worth saying plainly: Sight's copy dies with your key. When your home's data is deleted we destroy that key first, and every face signature Sight stores for your home becomes unreadable in our live systems immediately, in the same operation and by the same mechanism as your pictures; Sight then asks Pulses to erase your home's set. Please read the limits of this promise for what that does and does not mean about our backups.

What outlives the signatures: the group itself. Grouping faces together also creates a short summary of each person Sight has gathered — a name if you typed one, how many visits, and the first and last time they were seen. That summary holds no face signature and no picture. But we should say plainly that it works differently from everything else on this page: it has no expiry of its own, so once the signatures behind it reach the end of your clock and are swept away, the summary can outlive them. “Seen 14 times, first in March, last on Tuesday” is a durable line about a real person, and we would rather you weigh that now than discover it later. It is removed when the feature is switched off, when that person is deleted, and when your home's data is deleted, in the same operation as everything else your home owns.

Turning it off. An owner can switch it off at any time in Settings → Account & data → Turn off face recognition. Doing that deletes every face signature and every grouping Sight holds for your home — not “stops making new ones”, deletes the ones that exist — and asks Pulses to delete the set it holds for your home. Sight goes back to noting that a face was there without ever joining two visits together, and you do not have to delete your account to undo this. To remove one person instead, use People Sight recognises: deleting a person there deletes their face data at Sight and asks Pulses to delete theirs.

The people at your door didn't agree to this. We are not going to pretend otherwise. Your visitors, your neighbours, and anyone walking past your camera never saw our consent screen, and in some states the law puts the responsibility for that on you — the person who chose to switch it on. We give you the switch, the plain explanation, and an off that genuinely deletes. The judgement about the people on your doorstep is yours to make, and it is a real one.

The limits of this promise

Every privacy page tells you what a company protects. Here is what ours does not cover. We would rather you read these from us than discover them somewhere else.

Where your data lives

Sight stores your data in the United States, on Microsoft Azure (Central US region), and Sight's own systems run there. Text notes, briefs and account records are protected by access controls and encryption. Anything you have asked us to keep — a still, or Sight's copy of a face signature — gets a second lock on top of that: it is encrypted with your home's own key before it is written, into storage that allows no public access and that only Sight's own services are permitted to open. That is what limits the blast radius of a breach — not the absence of pictures, but the fact that a picture is useless without a key that is scoped to one home and destroyed when that home is. The AI companies named below process what Sight sends them on their own systems.

How long we keep it

The words. We keep your home's story for as long as you want it — that's the point of Sight. Your moments, briefs, and rhythms stay until the home's data is deleted, by an owner or together with the account of its only owner; nothing expires on its own.

The pictures, and any face signatures. These are the opposite: they always expire, and your household chooses when. Off is the default and it means nothing is written down in the first place — not written and swept up later. 7 days, 30 days and 365 days are the other three choices, and 365 days is the longest we offer. There is no “keep forever”, and that isn't an oversight: nothing can be written to storage at all unless it already carries an expiry date, so a file with no end date is not something Sight is able to create. The moment that date passes, Sight stops serving the file. Shortening the window doesn't wait for anything to age out; it deletes what is already older, straight away, and choosing Off deletes every stored picture. An owner can change this at any time in Settings → Account & data → Keep pictures, and can delete all of the home's data without waiting for any clock. Video is never part of this: Sight keeps none.

The one exception, stated plainly. If your household uses visitor recognition, the groups it builds — a person's name if you typed one, their visit count, and when they were first and last seen — have no expiry of their own. Those few lines of text hold no face signature and no picture, but unlike everything else in this section they can outlive the signatures they were built from once your clock runs out on those. They are removed when the feature is switched off, when that person is deleted, and when your home's data is deleted. We are calling this out rather than letting “everything expires” stand as a tidier sentence than the truth. More about that here.

Your Ring sign-in. The access Ring granted when you linked is deleted as soon as you remove Sight in the Ring app, and when the home's data is deleted.

Our service logs record what happened in Sight's systems — requests, processing steps and errors — and are kept for 30 days.

When a home's data is deleted, we remove it from our live systems immediately, in a single operation that takes everything the home owns with it — and we destroy the home's picture key first, before anything else, so that even if deleting the files themselves were to fail, what is left cannot be read. Encrypted database backups still hold a copy for a short while — up to 14 days — until they roll out of our backup window; please read the limits of this promise for exactly what that means for pictures.

Your rights and choices

We give everyone the same rights, whether or not you live in California. Under California law (the CCPA/CPRA) you have the right to:

• Know and access what we hold about you, and get a copy of it in a portable format. An owner of a home can export its story in the app (Settings → Account & data → Export your story); anyone can ask us. The export contains your notes, briefs, rhythms, settings and account records, plus a line for every stored picture saying when it was taken and when it expires. It does not contain the picture files themselves, and it does not contain face signatures — a signature is a lock-in of someone's face and we will not hand one out over email, and we would rather say so plainly than let “export everything” imply more than it delivers.
• Delete your data (see deleting your data).
• Correct information that's wrong.
• Withdraw your consent at any time: to AI processing, in Settings → Account & data → AI processing; to visitor recognition, which an owner can turn off; and to keeping pictures, which an owner can set to Off. Sight keeps working either way.
• Opt out of sale or sharing — there's nothing to opt out of, because we don't sell or share your data for advertising (see “We don't sell your data”).
• Not be treated differently for exercising any of these rights.

To exercise any of these, use the app where shown above, or write to privacy@getsight.app. We verify that a request really comes from the account owner before we act on it — that check protects you, too.

Deleting your data & unlinking Ring

A complete “delete my data” has two halves, and Sight does both:

• Delete your Sight account — anyone can. In the app: Settings → Account & data → Delete account. Before you confirm, the app shows exactly what will go. Your sign-in, settings, registered devices and messages to support are deleted. A home you are the only owner of is deleted with it, for everyone in it, as described next. A home with another owner stays and you are removed from it; if face recognition there was turned on under your account, it stops and the home's face data is deleted.
• Delete a home's data — owners can. In the app: Settings → Account & data → Delete all my data. This deletes the home for everyone in it, in one operation: moments, briefs, rhythms, feedback, notifications, alert rules and their history, evidence packs, devices, stored pictures, any face signatures and the groupings built from them, the Ring event records behind them, and circle memberships. The home's key is destroyed first. Sight then asks Pulses to erase the home's face signatures and its own event pipeline to drop the stored Ring sign-in, and returns a receipt of what was removed. Everyone else in the circle keeps their own account and loses access to the home; your account stays too, and you can delete it separately.
• Unlink Sight from Ring. Remove Sight in the Ring app at any time. Sight receives the signal from Ring, deletes the Ring sign-in it holds for you, and switches the home's cameras off, so Sight can no longer reach them. Your history stays until it is deleted as above. Deleting in Sight does not remove Sight from your Ring account — only you can do that, in the Ring app, and Sight reminds you when that step is left.

The live deletion is immediate; encrypted database backups roll out within 14 days, as described above — and for pictures specifically, please read the limits of this promise. If you cannot use the app, write to privacy@getsight.app and we will do it for you once we have confirmed the request is yours.

Who else touches your data

To run Sight we rely on a small number of other companies. Each receives what is described here, for the job described here:

• Ring (Amazon) is the source of your camera events and the home of your video. You link Sight from the Ring app, through the Ring Appstore, and Sight connects through Ring's official partner API with your permission — Sight never sees your Ring password. When you link, Ring tells Sight your Ring account's ID and email address, and Sight tells Ring which Sight account the link belongs to, as a masked email address (for example, j***e@example.com).
• Microsoft Azure hosts Sight's systems and the data they store, in the United States.
• Google reads each event's clip with its Gemini AI model and returns the description that becomes your note. It receives the clip with the sound removed and Ring's on-screen labels covered, so the device details Ring prints on the picture don't travel with it, plus the camera's place name (“Front door”) and the time — no name, no email, no account details.
• Pulses (pulses.ai), a separate company, reads the clip instead of Google, but only for a home that has visitor recognition on and keeps pictures. It receives the same silent, masked clip, the camera's place name, the time and the kind of event, plus a code that keeps your home's faces apart from every other home's — no name, no email, no account details. It writes the description and makes the face signatures described in recognising a returning visitor, compared only with faces seen at your home. A clip Pulses reads is not sent to Google.
• Anthropic writes the wording of your daily brief and answers your questions in Ask, using its Claude AI models. It receives text only — your home's notes and descriptions, times, places, any names your household typed, and the questions you type into Ask. Never a picture, a frame, or a clip.
• Expo and Apple deliver notifications to your phone. They receive the notification's words and your device's notification token — never a picture.

Nothing goes to Google, Pulses or Anthropic until your household agrees. The app asks on its AI-processing screen, which names each company and what it receives. “Not now”, or withdrawing later in Settings → Account & data → AI processing, stops it. A home's events and brief follow its owners' answers, and one owner's agreement is enough; a question you type into Ask is sent only if you have agreed too. Without AI processing, Sight keeps working: each event gets Sight's own short note, the brief uses simpler wording, and Ask answers from Sight's own search.

Apart from these companies, no analytics service, image host, thumbnail service, advertising network or content-delivery network receives your pictures or clips. Sight itself trains no AI model on your data. What these companies do with what they receive on their own systems is governed by their terms with Sight — see the limits of this promise.

We don't sell your data

We don't sell your data, and we don't share it with advertisers or data brokers. Sight has no advertising business and no incentive to spy on you: it is meant to be paid for by the people who use it, so that it works for them. That's the whole model.

This website

This site loads no third-party trackers, no analytics scripts, no advertising pixels, and no external fonts or content. Nothing you do here is reported to another company. The site sends something to Sight only when you submit one of its forms: the sign-up form sends the email address you type — and, if you arrived from one of our ads, which ad, so we can tell which message resonated — and the support form sends your email address and your message, so we can reply.

Children

Sight is for adults setting up their own homes. It is not directed at children under 13, and we don't knowingly collect their personal information. If you believe a child has given us information, contact us and we'll delete it.

Changes to this policy

When we make a meaningful change to this policy, we update the date at the top and say what changed, and for significant changes we tell you directly, in the app or by email.

Contact