Hotfire by Tycho Systems

Privacy

Last updated 31 October 2026

Draft for review by our attorney before launch.

Tycho Systems makes Hotfire. This page explains what we collect on this website, in the Hotfire web app and in the Hotfire iPad and Mac apps. The short version: only what's needed to run the service, and we never sell it.

This website

  • No cookies, no analytics and no advertising trackers.
  • Fonts and images are served from this site, so your visit isn't shared with other companies.
  • Our hosting provider keeps standard server logs (such as IP address and page requested) for security, for a limited time.
  • If you email us, we use your message and address only to reply and, if you become a customer, to run your account.

The Hotfire web app (app.hotfiresystems.com)

  • Records your organization creates in the browser (procedures, runs, signatures, photos, files and the audit trail) are stored on Hotfire's servers, hosted on Amazon Web Services in the United States.
  • For each person who signs in we keep their name, email address and role. Passwords and PINs are stored only as one-way hashes, never as readable text.
  • Your organization's admins decide who has an account. We access your organization's records only to run and secure the service, and to provide support when you ask.
  • Cookies: one sign-in cookie keeps you signed in (it ends after at most 12 hours). If your company signs in through its own sign-on provider, a second short-lived cookie is used during that sign-in. Both are needed for the app to work; neither is used for advertising or shared with anyone.
  • The web app contains no analytics or advertising code.

The Hotfire iPad and Mac apps

  • Your procedures, runs, signatures, photos and audit trail are stored on your devices, encrypted. They aren't sent to us unless your organization connects its devices to a Hotfire server.
  • Devices on your team sync directly with each other over your local network, encrypted with your team code.
  • If your organization connects its devices to a Hotfire server (ours, or one on your own premises), records are stored on that server for backup and sharing between sites. We access records on our server only to run and secure the service, and to provide support when you ask.
  • Your license key contains your organization's name, plan, number of devices and dates. The app checks it on the device without contacting us.
  • The apps contain no analytics or advertising code.
  • The Mac version checks hotfiresystems.com once a day for a new version. That check is a normal web request containing only the app version; you can turn it off in Settings › Updates. The iPad version doesn't do this.

Customers

For organizations that buy a license, we keep billing contacts, invoices and license records as required for accounting and US export-control screening.

Do Not Track

We don't track people over time or across other websites, and we don't allow anyone else to. So there is nothing for a browser's Do Not Track setting to turn off, and we treat every visit the same whether or not it is on.

Changes to this page

When this page changes, we update the date at the top. If a change affects how we handle customers' data, we also tell customers by email before it takes effect.

Your choices

To ask what we hold about you, or to have it deleted, email privacy@hotfiresystems.com.