HomeDash.

Privacy Policy for HomeDash

Last updated: 2026-09-08

1. Introduction

HomeDash is an Android application published by Jonas Borggren ("we", "our", or "us") that turns a phone or tablet into a smart home dashboard showing electricity spot prices, local weather, your calendar and tasks, and controls for your smart home devices. This Privacy Policy explains exactly what data the app accesses, why it accesses it, and what happens to it.

The short version: HomeDash is a client application that runs entirely on your device. We do not operate a backend server for HomeDash, we have no user accounts, and we never receive, store, or transmit your personal data to ourselves or to any third party for our own purposes.

2. Google Account Data (Google Tasks)

If you choose to enable the Tasks card, HomeDash asks you to sign in with Google and requests a single OAuth scope:

• https://www.googleapis.com/auth/tasks — read and manage your Google Tasks.

What we access: your Google Tasks lists and the tasks within them (title, due date, and completion status).

Why: solely to display your open tasks on the dashboard and to let you mark them complete from the dashboard. This is a user-facing feature you explicitly turn on.

Where it goes: task data is requested directly from the Google Tasks API by your device and is held in memory to render the dashboard. It is not sent to any server operated by us, and it is not shared with any third party.

Signing in is always initiated by you through Google's standard OAuth consent screen, where you see the requested permission before granting it. HomeDash never sees or asks for your Google password. The OAuth access token is stored by Google Play services on your device and is never transmitted to us.

3. Google API Services Limited Use Disclosure

HomeDash's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Google user data is used only to provide and improve the user-facing features of HomeDash that are visible in the app.
• Google user data is not transferred to others, except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with user notice and consent.
• Google user data is never used for advertising, ad targeting, or the creation of user profiles.
• Google user data is never sold.
• No human reads Google user data, except with your explicit consent for specific messages, where necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymised.

4. Smart Home Devices (Google Home)

HomeDash can display and control the smart home devices in your Google Home structure using the Google Home APIs on Android. You grant this access in Google's own permission flow and you choose which devices are shared with the app.

What we access: the names, types, room assignments, and current states of the devices you share (for example, whether a light is on and at what brightness), plus the scenes you have defined.

Why: to show live device status on the dashboard and to carry out the commands you tap, such as turning a light on or activating a "Home" or "Away" scene.

Where it goes: device data flows between Google Play services on your device and the app. It is not sent to us and is not stored beyond what the app needs while it is running.

5. Calendar

If you enable the calendar card, HomeDash asks for the Android calendar permission and reads events from the calendars you select on the device. This uses the operating system's local calendar provider, not a Google API. Event titles and times are read on your device to draw the agenda view and are never uploaded anywhere.

6. Location and Weather

If you enable the weather card and grant location permission, HomeDash reads your device's coordinates and sends the latitude and longitude to Open-Meteo to retrieve a local forecast. The request contains only coordinates — no account identifier, device identifier, or other personal information. You can instead set a location manually, or leave the weather card off entirely. Your coordinates are not stored by us.

7. Electricity Prices and Energy Meters

Electricity spot prices are fetched from public, unauthenticated pricing APIs for the region you choose (for example elprisetjustnu.se for Sweden, hvakosterstrommen.no for Norway, Energi Data Service for Denmark, porssisahko.net for Finland, EnergyZero for the Netherlands, and Energy-Charts for other European markets). These requests contain only the price area and date — no personal data.

If you connect a HomeWizard energy meter, HomeDash talks to it directly over your local network. Your meter readings stay on your local network and your device; they are never sent to us or to any third party.

8. Data We Do Not Collect

HomeDash contains no analytics SDK, no crash reporting SDK, no advertising SDK, and no tracking of any kind. We do not collect device identifiers, usage statistics, or diagnostics. We have no server that receives data from the app, so there is no account for us to profile and nothing for us to sell.

9. Data Storage and Retention

All of your settings and any cached content (your chosen price area, enabled cards, calendar selection, and recently fetched prices, weather, tasks, and device states) are stored locally on your device in the app's private storage. Because we do not receive this data, we do not retain it. Cached content is refreshed routinely and is discarded when it is no longer needed.

10. Deleting Your Data and Revoking Access

You are in control of every connection the app makes:

• Google Tasks: sign out from within HomeDash's settings, or revoke HomeDash's access at any time at myaccount.google.com/permissions. Revoking immediately ends the app's ability to read your tasks.
• Google Home: remove HomeDash's device access from the Google Home app.
• Calendar and location: withdraw the permissions in Android Settings › Apps › HomeDash › Permissions.
• Everything else: uninstalling HomeDash, or clearing its storage in Android Settings, permanently removes all locally stored data.

11. Purchases

HomeDash offers an optional paid upgrade processed by Google Play Billing. Payment details are handled entirely by Google Play; we never see or store your payment information. See Google's Privacy Policy for how Google handles that transaction.

12. Security

All network requests made by the app use encrypted transport (HTTPS/TLS), except for direct communication with an energy meter on your own local network. OAuth credentials are managed by Google Play services in the device's protected storage. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security.

13. Children's Privacy

HomeDash is not directed to children under the age of 13, and we do not knowingly collect any information from them.

14. Your Rights

Depending on where you live, you may have rights under laws such as the GDPR or the CCPA to access, correct, export, or delete personal data held about you. Because HomeDash stores your data only on your own device and we hold no copy of it, you can exercise these rights directly using the controls described in section 10. If you have a question about this, contact us using the details below.

15. Changes To This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date.

16. Contact Us

If you have any questions about this Privacy Policy or about how HomeDash handles your data, contact Jonas Borggren at jonasborggren [at] gmail [dot] com.