RealityNest ← Back to site
PRIVACY · COOKIES · LEGAL

Knowing more shouldn’t mean saying more. That applies to us too.

RealityNest is built around the idea that information has boundaries. This page explains, in plain language, what this website collects, what the node in your home collects, who is responsible for each, and how to exercise your rights under the GDPR and Spanish data-protection law.

Privacy policy · this website

This policy is issued under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD). The data controller is the owner identified in the legal notice above.

What we collect, and why

CONTACT FORMWhat you type: your first name, your last name, your email address, your message, which option you picked for what interests you, whether you already use AI agents, and which agents you ticked. Purpose: to reply to you about RealityNest and, if you ask, to consider you for a group of early users. We do not use it for anything else and we do not add you to a mailing list. Basis: your consent (Art. 6(1)(a)) and pre-contractual steps at your request (Art. 6(1)(b)). Stored: in our own database, on our own server, until the conversation ends and at most 24 months after your last message.
SENT WITH ITA submission also carries technical data, and we keep it: the IP address you sent the form from, the approximate country that IP resolves to, the date and time, your browser’s user-agent string, the page you submitted from and the page that referred you to us. Purpose: to separate real enquiries from automated spam, to enforce a rate limit on the form, and to know which page an enquiry came from. Basis: legitimate interest (Art. 6(1)(f)). Kept: alongside the submission, and deleted with it. An IP address is personal data under the GDPR, which is why it is named here rather than left as “technical information”. It is never shown back to you on the site.
TELEGRAM ALERTWhen a form arrives, our server sends a notification to the owner of RealityNest over Telegram so that a person, not an unread inbox, sees it. That notification contains what you submitted, so it passes through Telegram’s servers (Telegram Messenger Inc.); the copy of record stays in our own database. If you would rather not have your message travel that way, write to [email protected] instead of using the form.
SERVER LOGSIP address, browser type, pages requested, timestamps — the technical minimum any web server records. Purpose: security and keeping the site running. Basis: legitimate interest (Art. 6(1)(f)). Kept: 30 days.
FONTSTypefaces are loaded from Google Fonts. Your browser sends your IP address to Google to fetch them. Google’s privacy policy applies to that request. We intend to self-host fonts in a future release to remove this transfer.
ANALYTICSUmami, self-hosted by us at stats.realitynest.world. Its script is loaded only if you choose “Accept all” in the cookie banner; decline or ignore the banner and nothing is loaded and nothing is measured. It counts visits to pages and where they came from. It is not an advertising tool and the figures are not shared with anyone. Basis: your consent (Art. 6(1)(a)), which you can withdraw at any time from the “Cookies” link in the footer.

Who sees it

Only the RealityNest team and the providers that carry it: the host of this website and of the server that stores form submissions, our email provider, and Telegram, which delivers the notification described above. We do not sell, rent or trade personal data. If a provider is outside the European Economic Area, we rely on European Commission standard contractual clauses or an adequacy decision. We will name our hosting and email providers here once the production infrastructure is fixed.

Minors

This site is not directed at people under 14 (the age of digital consent in Spain under Art. 7 LOPDGDD). We do not knowingly collect their data.

Cookie policy

Under Article 22.2 LSSI-CE and the Spanish Data Protection Agency (AEPD) cookie guidelines, we need your consent for any cookie or local storage that is not strictly necessary. Here is the complete list. It is short.

rn_consentStrictly necessary. Local storage, first party. Remembers the choice you made in the cookie banner so we do not ask again. Kept 12 months. No consent needed for this one — it is how we remember your consent.
ANALYTICSLoaded only if you accept. Choosing “Accept all” loads Umami from stats.realitynest.world, a server we run ourselves. Nothing is loaded if you decline or close the banner. There are no advertising cookies and no third-party tracking on this site.

You can change your choice at any time from the “Cookies” link in the footer, or by clearing this site’s storage in your browser. Refusing everything except the necessary items does not limit the site in any way.

Your node and other people’s data

A RealityNest node answers phone calls, reads SMS and receives events from a home. That means it processes personal data of third parties — callers, family members, couriers, the service centre. This section explains who is responsible for what, so there are no surprises.

WHERE DATA LIVESRecordings, transcripts, contacts, call logs, the message feed and home events are stored on the node itself, in your home. Backups go to a server you choose. RealityNest, the company, does not receive or hold this data and cannot access your node.
WHO IS RESPONSIBLEThe owner of the node is the data controller for what it records. In a purely private household setting the GDPR’s household exemption (Art. 2(2)(c)) may apply; if you use the node for a business, or in secretary mode for a business line, you are a controller in the ordinary sense and must inform callers.
RECORDINGSRecording and transcription are configurable and off by default for strangers. Spanish law allows a participant to record a call they take part in, but using recordings for a business requires informing the caller at the start of the call. The node can play a short notice; we recommend enabling it.
AI VOICETo speak, the node streams call audio to a real-time voice model provider (currently OpenAI) and receives audio back. Audio is processed to generate the response; the node does not send your contact book or logs to the model. Refer to the provider’s data-processing terms for retention; enterprise API traffic is not used for training under the provider’s current terms. This is the only part of the node that requires internet.
BY DESIGNThe node never tells an unknown caller the address, entry codes or who is home. Every refusal is logged with its reason. Every outbound action goes through policy, and can require your approval. These are product behaviours, documented in the release notes, not promises about the law.

Your rights

For data this website collects, you may at any time ask us for access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent without affecting what happened before. Write to [email protected]. We answer within one month. If you are not satisfied, you may complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos, aepd.es, C/ Jorge Juan 6, 28001 Madrid.

For data recorded by a node in someone’s home, please address the owner of that node; we cannot access it. If you believe a node is being misused, you can still write to us and we will help you reach the right person.

This page will be revised as the product and our infrastructure change. Material changes will be dated here and, for anyone who has written to us, announced by email.