Privacy

Version 2 · in force from 22 August 2026

What the app keeps, and where

To be of any use the app has to remember your arrangement. All of it is written to the phone's own storage, inside the app's private area, and none of it is copied anywhere:

• The rooms you created and the names you gave them.
• Each set you added: the name and model it reported, which room you put it in, and the address and port it answers on.
• The moment each set last answered, so a room can show what is reachable.
• Your scenes, their steps, and the order the steps run in.
• Three preferences, and only three: which appearance you picked, whether the haptic tap is switched on, and a note that the opening screen has already been seen.

That list is exhaustive. Settings carries a Reset all data item: it asks you to confirm, then erases the rooms, the sets and the scenes you made, forgets those three preferences, and puts the example scenes back, so the app ends up as it was on the day it was installed. Deleting the app clears the same things. Neither action tells us anything, because there is nobody listening.

The local network permission

iOS asks once whether the app may see other equipment on the network you are joined to. The app needs that answer to find a set, and to send it anything at all. Before iOS asks, a screen of ours explains in plain words what the permission is for and what happens if you decline it.

Everything that permission enables happens between two machines you own: the phone reaches your equipment directly, over your own router, and the reply comes straight back. No command, no name, no address and no scan result is written down anywhere but your phone, and none of it passes through any equipment of ours — there is none to pass through.

Declining is not a dead end. The app carries on: your rooms and scenes are untouched, the screen that follows offers the address-entry path rather than a blank wall, and you can grant the permission later from iOS settings if you change your mind.

The two links that leave the app

Settings offers two links to this site: this page, and the help page. Tapping one hands the address to your browser — the app itself opens no connection to us, before or after. From that moment it is an ordinary visit to a web page, and our web server notes it down the way every web server does: address, time, page requested, browser string, in a log that rotates daily and is kept a fortnight. No page on this site sets a cookie, runs a script, or fetches anything from anybody else, so that log line is the whole of what a visit produces.

Measurement, advertising, crash reporting

None of the three exists in this app. There is no analytics package, no attribution or advertising library, and no crash reporter. The app never asks for the advertising identifier and would have nothing to do with one. No third-party code of any kind is bundled with it, so nothing can be collected by a component we did not write.

There is deliberately no switch to turn any of this on, because there is nothing behind such a switch. Anything Apple shows you about a diagnostic report is a choice you make with Apple, under Apple's terms, and reaches us only as an aggregate report with no way back to a person.

Apple's categories, answered

The declaration lodged with Apple for this app reads Data Not Collected. The privacy manifest shipped inside the app agrees with it line by line: tracking is set to false, the list of tracking domains is empty, the list of collected data types is empty, and the single interface it declares a reason for is the preference store — declared under the reason code for data that only this app can read. Should the declaration, the manifest and this page ever fall out of step, the mistake is ours to correct, and the following release corrects it.

If you write to us

Support is a mailbox, not a feature of the app. If you send a message to henry.seo@calviona.link, we obviously receive whatever you chose to put in it, including the address you sent it from. We read it, we answer it, and that is the end of its usefulness to us. Correspondence is not fed into any list, not passed to anyone else, not used to advertise anything, and is discarded once the matter is closed. Ask us to erase a thread earlier and we will.

Please leave anything private out of such a message. Nothing personal is needed to work out why a set will not answer.

Children

The app is a household tool rather than something aimed at children, and since it gathers nothing about anybody it holds nothing about a child either. No age is asked for and none could be inferred.

Your rights

Rules such as the GDPR and the CCPA give you rights over information a company holds about you. We hold none, so there is nothing here to hand over, correct, port or erase, and no sale or sharing to opt out of — we have never sold or shared anything, and there is nothing to sell. If you have written to us, that thread is the only file with your name on it, and one message removes it. The web-server log described above is the only other trace, and it expires on its own.

When this page changes

A version number and a date sit under the heading at the top. If a future release ever needs to send something off the phone, this page will say so, in plain words and before that release ships, and the version number will move. Nothing of the sort is planned.

Who to ask

Anything at all about this page, including a request to erase a thread: henry.seo@calviona.link — a person reads it.