Privacy Policy
Application Name: HomeHub | Last Updated: August 16, 2026
Welcome to HomeHub ("we", "our", or "the Service"), accessible at https://homehub.tapya.xyz. We are dedicated to protecting your personal information and your privacy. This Privacy Policy outlines how we collect, process, store, and safeguard your data when you use our home management platform, smart home integrations, and third-party services including Google Calendar and Home Assistant.
HomeHub is a private, user-managed smart home dashboard. We do NOT sell, rent, monetize, or share your personal data with any third-party advertisers, data brokers, or marketing platforms under any circumstances. All data synchronization with external services (such as Google Calendar or Home Assistant) occurs solely to deliver the requested home management and automation functionality directly to you.
1. Purpose of the Application & Information We Collect
HomeHub is designed to provide homeowners and authorized family members with a single, private dashboard for managing daily household activities, scheduling, and smart IoT device automations.
We collect and process the following information only to fulfill your requests:
- Account Information: Display name, email address, and securely hashed passwords used for user authentication and session management.
- Household Management Data: User-created to-dos, local calendar entries, family meal plans, expense tracking, and inventory counts.
- Smart Home Configurations: Local connection preferences for Home Assistant (HAOS) entities and Tuya smart devices (lighting, switches, thermostats).
2. Google Calendar Integration & Google API Services User Data
When you optionally link your Google Account to HomeHub, our application requests access through Google OAuth 2.0.
Why Google Calendar Permissions Are Requested:
The purpose of integrating Google Calendar is to display your real-time calendar agenda alongside your daily home tasks, weather forecast, and smart home schedules, and allow you to create or update events directly from your dashboard.
OAuth Scopes Requested:
https://www.googleapis.com/auth/calendar.readonly— Read calendar event schedules and metadata to display in your home calendar view.https://www.googleapis.com/auth/calendar.events— Create, edit, and sync calendar events between HomeHub and your Google Calendar.
Data Handling & Storage:
- OAuth tokens (access and refresh tokens) are securely stored in our PostgreSQL database and associated solely with your user account.
- We do not store your calendar event contents permanently on third-party servers; events are fetched in real-time on demand.
- Your Google user data is NEVER used for advertising, behavioral profiling, or machine learning model training.
Google API Limited Use Disclosure:
HomeHub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3. Home Assistant (HAOS) & Tuya Integrations
HomeHub connects with your personal Home Assistant instance and Tuya Cloud API to toggle switches, adjust lights, and read sensor values. Communication occurs directly between your authorized instance and the platform. No private surveillance or video streams are recorded.
4. User Rights & How to Revoke Access
You have full autonomy over your data:
- Disconnect Google Calendar: You can disconnect Google Calendar at any time with one click from the Calendar page. This immediately revokes OAuth tokens with Google and deletes all stored credentials from our database.
- Revoke via Google Account: You can also revoke access anytime through the Google Security Permissions Page.
- Account Deletion: You may request complete account deletion at any time by emailing us.
5. Data Security
We use HTTPS encryption for all web and API traffic, parameterized SQL queries against SQL injection, bcrypt password hashing, and secure HTTP-only cookies.
6. Contact & Privacy Officer
For questions, concerns, or requests regarding this Privacy Policy or your data, please contact: