Privacy Policy
Last updated 28 August 2026 · Version 1.0This covers the website rhyse.tech and the beta waitlist. Rhyse Messenger itself will have its own notice when it launches.
In short. No cookies unless you say yes. We store your email address only if you ask to join the beta and confirm it. We never sell or share your data.
1. Who we are
Hyperion Artificial Intelligence GmbH, Steinerstrasse 34, 6430 Schwyz, Switzerland (CHE-407.328.716). Write to privacy@rhyse.tech about anything on this page.
2. What we collect, and why
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| IP address, time, page, browser | Serving the site and blocking attacks | Art. 6(1)(f) — legitimate interest | Days |
| Email address, timestamps, consent version, salted hash of your IP | Telling you when the beta opens, and proving you opted in | Art. 6(1)(a) — consent | Until you withdraw, or the beta ends |
| Usage data, truncated IP, analytics cookies | Seeing how the page is used | Art. 6(1)(a) — consent | Up to 14 months |
The waitlist uses a double opt-in: nothing is stored until you click the link we email you, and unconfirmed requests are deleted after seven days. Your IP is kept only as a one-way hash that cannot be reversed. Giving us any of this is optional — without an email address we simply cannot tell you when the beta opens. We do not profile anyone and make no automated decisions.
3. Cookies
One is strictly necessary and needs no consent: rhyse.consent, in local storage, which remembers whether you accepted analytics. If you accept, Google Analytics also sets _ga and _ga_<id>, both lasting two years.
Nothing else — no advertising cookies, no social pixels, no cross-site tracking. Change your mind at any time with Cookie settings in the footer.
4. Who else sees it
Vercel hosts the site, Upstash stores the waitlist, Resend sends the confirmation email, and Google provides analytics if you accept. Each acts as a processor on our instructions under Art. 28 GDPR. We do not sell your data or share it for anyone else's advertising.
Some are US companies; those transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses. Switzerland, where we are based, holds a European Commission adequacy decision of 15 January 2024, so transfers from the EEA to us need no extra safeguards.
5. Your rights
You can ask for access, correction, erasure, restriction or portability, and object to processing. Where we rely on consent, you can withdraw it at any time. Write to privacy@rhyse.tech, or use the unsubscribe link in any email. You can also complain to the Swiss FDPIC or to the data protection authority where you live in the EEA.
6. Children
This site is written for parents and guardians — please don't enter a child's details here. Accounts in the app itself will be created by a parent or guardian, under a separate notice written for children to read.