Summary
No accounts · No tracking · No ads
Todo for Home Assistant (“the app”) is a client for your own Home Assistant instance. The app does not operate any servers of its own, does not collect analytics, and does not show ads or share data with third parties. All of your data stays between your device and the Home Assistant server you configure.
What the app stores, and where
- Home Assistant connection settings (host, port, SSL toggle) and your authentication tokens are stored only on your device — tokens in the operating system’s encrypted secure storage (Android Keystore-backed).
- A local cache of your lists and items, and a queue of pending changes made while offline, are stored only on your device so the app works without a connection. This cache is removed when you sign out or uninstall the app.
The app never transmits any of this information to the developer or to any third party.
Data sent over the network
The app communicates only with the Home Assistant instance
you configure, in order to read and modify your to-do lists. That traffic
goes to your server. If your Home Assistant is reachable
only over http:// on your local network, the app uses cleartext
for that local connection; no data is sent anywhere else.
Authentication
Sign-in uses Home Assistant’s own OAuth flow in a secure in-app browser window. Your password is entered on your Home Assistant server’s login page and is never seen or stored by the app; the app only receives and stores the resulting access token on your device.
Children
The app is a utility for managing to-do lists and is not directed at children.
Your choices
You can clear all stored data at any time by signing out or uninstalling the app.
Contact
Questions about this policy: anton@adamsen.io