Trust
How Charyl Treats Your Home
Six plain claims, a short list of what she won't do, and a table of what runs where.
She proposes. You approve.
Charyl never changes your home on her own. Every record she drafts and every device action she takes waits for your explicit tap, runs through the same validation a manual change would, and lands in an audit trail you can read.
Your home doesn't depend on her.
The platform underneath Charyl is deterministic: devices, sensors, rules, and notifications keep running even if the AI is offline.
She lives in your home.
Charyl runs on hardware in your house — a small box we set up, or a server you already run. On the self-host path, conversations can stay on your own machine.
Private means private — per record.
Records you mark private are ones Charyl can see exist but cannot read, unless you decide otherwise for that document. Charyl’s own pushes say only "Open the app to review".
Backups we cannot read.
Home backups are encrypted before they leave your house, with keys only you hold. Singer Intelligent Homes' servers store ciphertext.
Honest about the cloud.
Some of Charyl’s thinking uses a cloud AI provider. When it does, your request passes through us to a provider we name in our privacy policy, one that is contractually bound not to train on it. The provider sees the question, never the customer — a prompt, not a person. We don’t store your prompts; the provider may hold that de-identified request briefly under its own policy — measured in weeks, not forever. Where we can’t make a claim in cryptography, we make it in writing, and we say which is which.
What She Deliberately Doesn’t Do
- No locks, no doors, no garage — comfort is hers to help with, security stays in your hands.
- No acting without your approval.
What runs where
In plain terms — no cryptography claims beyond backups, said honestly either way.
| On your box | Through Charyl Cloud | On your phone | |
|---|---|---|---|
| The record (assets, warranties, manuals) | Kept here | Backed up, encrypted | Captured and reviewed here |
| Device control | Runs here, works offline | Relayed when you’re away | Tap to control, from anywhere |
| Conversations | Can stay here (self-host, capable hardware) | Default path for chat | Same conversation, on the go |
| Backups | Encrypted before they leave | Stored as ciphertext only | — |
| Remote access | — | Through the relay, part of the subscription | Primary way you’ll use it |