Privacy policy

1. Who is responsible

HomePad is developed by Federico Cardinali. For privacy questions or requests concerning information held by the developer, contact [email protected]. This policy covers HomePad and its product website. Apple, connected music services and websites you visit have their own privacy practices.

2. Information used on your iPad

HomePad uses the permissions you grant to display your Apple Home accessories, scenes and cameras, calendars, reminders, contacts, music library and photos. These features use information available through your device and configured accounts. HomePad does not upload this content to a developer-operated server as part of these features.

Photo subject segmentation uses Apple Vision on the device. Preferences, selected photos, browser bookmarks and recent pages may be stored locally. Apple and your configured account providers may synchronize their own data according to your system settings. Opening another app, such as FaceTime, Messages or Podcasts, makes that app’s own privacy practices applicable.

3. Connected services and information sent

Online features connect to external services. Those services receive network information such as your IP address, as well as the information needed for the feature.

• Weather and location. HomePad sends selected coordinates to Open-Meteo for forecasts and air quality, and city-search text to its geocoding service. If you allow current-location access, coordinates are sent as returned by the device, without rounding by HomePad. This can include precise location. Apple reverse geocoding may be used to determine a city name. Open-Meteo describes troubleshooting and abuse-prevention logs that can contain IP addresses and requested coordinates, retained for 90 days. See Open-Meteo’s privacy terms.
• Spotify, if connected. HomePad uses authorization to access music-library and playback information and control playback. Requests are associated with your Spotify account. Spotify’s playback integration also processes device identifiers, playback interactions, performance information such as buffering and latency, and diagnostic information such as playback errors. Spotify describes use of account and technical information for providing, analyzing and personalizing its service, including general location derived from IP information. Its handling of this information is governed by Spotify’s privacy policy.
• Lyrics. When lyrics are requested, HomePad sends the song title, artist, and, when available, album and duration to LRCLIB. HomePad does not send your Spotify account identifier with that lyrics request. LRCLIB also receives network information including your IP address. Its server retention period is not specified in this policy.
• Web browsing and search. Pages opened in HomePad connect directly to the sites you choose. Search text that is not a web address is sent to Google. Those sites and services may use cookies and process information under their own policies. HomePad stores up to 40 recent pages and your bookmarks locally. See Google’s privacy policy.

4. Support messages

If you email support, the developer receives your email address, message and any attachments you provide. Messages are routed through Cloudflare Email Routing to the developer’s Gmail inbox and used to answer questions and investigate reported issues. Do not include passwords, authorization tokens, private camera images or personal information that is unnecessary for your request. See Cloudflare’s privacy policy and Google’s privacy policy.

5. Storage, retention and deletion

Local preferences and content remain on the device unless changed or removed. Spotify authorization tokens are stored in the iPad Keychain. Cached music-library metadata is restored only when it is less than 30 days old. Disconnecting Spotify removes its credentials and cached library metadata; cached artwork may remain until cache maintenance or iPadOS removes it.

Deleting HomePad removes its app container, but iPadOS may retain Keychain entries and your backups may retain copies. Disconnect Spotify before removing the app, or revoke its access in your Spotify account. Removing HomePad does not delete your Apple Home, calendar, photo or music accounts.

Support messages are held in the developer’s mailbox for handling support and related follow-up. There is no fixed retention period stated for those messages; you can request deletion using the contact below, subject to applicable obligations. External providers retain their own records under their policies. HomePad does not control those retention periods or delete provider-held records on your behalf.

6. Your choices and privacy requests

• Change HomePad’s permissions in iPad Settings. Denying or withdrawing a permission may limit the related feature.
• Choose a city manually instead of allowing current-location access.
• Limit access to selected photos, or change photo permissions in iPad Settings.
• Disconnect Spotify in HomePad and revoke HomePad’s access from your Spotify account.
• Use the controls supplied by Apple, your music provider and websites to manage their data.

To ask about, access, correct or request deletion of personal information held by the developer, email [email protected]. Explain your request without sending unnecessary sensitive information. Available rights depend on applicable law; requests about information held by another provider should also be directed to that provider. Where applicable, you may contact your local data-protection authority.

7. Website and analytics

gethomepad.com is hosted on Cloudflare Pages and uses Cloudflare Web Analytics. Cloudflare processes request information to deliver and protect the website and provide aggregated website statistics. This website measurement is separate from the iPad app. HomePad does not include a developer-operated analytics service or advertising in the app. Connected services and websites process their own information as described above. See Cloudflare’s privacy policy.

8. Changes to this policy

This policy will be updated when HomePad’s data practices change. The date at the top identifies the latest update. You can always find the current policy at gethomepad.com/privacy.