Privacy policy

This is a translation for your convenience. The German version is legally binding.

This policy covers two completely separate offerings, each processing its own, different data:

• Part 1, the apps Home Dashboard (Apple TV) and Dashboard Setup (iPhone), which you install from the App Store.
• Part 2, this website, which you are viewing in your browser right now (including the “Support” and “Feature requests” pages). The website is technically independent of the apps and does not run on your iPhone or Apple TV.

Both are provided by Rico Weigand. Which part applies to you depends on whether you are using one of the apps or visiting this website.

Part 1: The Home Dashboard and Dashboard Setup apps

Applies only to the two apps, not to this website.

What data is processed

• Calendar data (titles, times, location, notes, attendees): read from your iPhone via EventKit with your permission and mirrored only into your own private iCloud database (CloudKit) to show it on your Apple TV.
• Location for the weather: the place you choose in Dashboard Setup is sent to your Apple TV through your private iCloud account and is used there only to fetch the weather forecast.
• Design settings (background, widget arrangement and size, visible tiles): synced between iPhone and Apple TV through your private iCloud account.
• Apple Home data (rooms, accessories, accessory states): read and controlled directly on Apple TV through Apple’s HomeKit framework, if you allow the app to access your home. This data never leaves your HomeKit home in our direction.
• Health and fitness data: the Move, Exercise and Stand activity rings; your recent workouts with type, date, duration, active and total calories and intensity; for individual workouts also the heart rate over time, the average heart rate and the time spent in each heart rate zone; and daily values (trends) such as steps, distance, active calories, exercise minutes, stand hours and cardio fitness (VO₂ max). This data is read on your iPhone via HealthKit only with your explicit consent and mirrored only into your own private iCloud database (CloudKit) to show it on your Apple TV. The fitness feature is off by default and must be turned on by you in Dashboard Setup. This data is never used for advertising, never shared with third parties and never sent to us as the developer.
• Workout route (location data): if you recorded a workout with location (for example an outdoor run), the app also reads that workout’s route via HealthKit with your consent. Like other health data, it is mirrored only into your private iCloud database to show it on a map on Apple TV. To draw the map, the app loads map tiles from Apple’s map service (MapKit). Apple learns which map area is requested; Apple’s privacy policy applies. To give a workout a place name (for example the neighborhood), the iPhone app also sends the workout’s starting point to Apple’s map service once; Apple’s privacy policy applies here too.
• Spotify and Sonos credentials: only relevant for accounts with the music feature enabled. Access tokens are stored in the iCloud Keychain of your own Apple Account and used only to show and control what is currently playing.
• iCloud identifier for feature access: to decide which features an account may use (for example the music integration), the app sends an anonymous, device-side iCloud identifier to a server we operate (Cloudflare). It only stores whether, and on which platform (iPhone or Apple TV), this identifier has been used before, never calendar, location, health or other content data.
• Anonymous usage statistics: to understand which features are used and where setup gets stuck, the apps send short usage events to a server we operate (Cloudflare), for example “weather page opened”, “calendar connected: yes/no”, session length, app and OS version and your chosen widget layout. Users are counted via a randomly generated identifier that is replaced every month and is not linked to your iCloud identifier, your name or your IP address. Calendar, location or health content and error message texts are never sent. You can turn the statistics off at any time in “Dashboard Setup” under “Anonyme Nutzungsstatistik”; the setting then also applies to your Apple TV.

How this data is used

All of the content above (calendar, weather location, design, Apple Home, health data including workout routes) is used only to provide the app’s features and is synced between your own devices through your private iCloud account. When connecting to Sonos, a server-side Cloudflare component only relays the sign-in exchange, without storing or reading the credentials it passes on.

The apps do no tracking, no advertising analysis and no sharing with third parties, except with the technically necessary services Apple (iCloud, Apple Maps), Spotify and Sonos, each only with your explicit authorization.

Where data is stored

Calendar, weather, design, Apple Home and health data (including workout routes) stay only in your own iCloud account and on your own devices. We as the developer have no access to this content.

Your rights

You can stop syncing at any time by revoking the apps’ iCloud or calendar access in iOS and tvOS settings. You can manage or delete data that has already been synced directly in your iCloud account.

You can turn off the anonymous usage statistics at any time in “Dashboard Setup”. After that, neither iPhone nor Apple TV sends any further usage events, and events not yet sent are deleted immediately.

For health data, in addition: you can revoke access at any time in the iPhone Health app under Data Access & Devices → Dashboard Setup, also separately for individual data types such as heart rate or workout routes. If you turn syncing off in Dashboard Setup itself instead, your already synced health data is also deleted from your iCloud account.

Part 2: This website

Applies only to this website (rw-apps.de), opened in your browser, not to the apps. The website has no access to calendar, location, design, Apple Home or health data and does not exchange data with the apps.

Home page and this privacy page

If you only read the home page, the legal notice or this privacy policy without using a form, we do not process any personal data about you. This does not apply to the Support page: simply opening it loads a Cloudflare Turnstile check that processes your IP address, whether or not you use the ticket form. See “Support ticket” below. The “Feature requests” page is also an exception, see “Feature requests”.

Light or dark design: if you choose a light or dark design with the switch in the navigation, your browser stores this choice locally in its localStorage so it is kept for your next visit. It is not sent to us. You can delete it at any time in your browser settings.

Feature requests

On the “Feature requests” page you can vote for ideas or submit your own without signing in. To make this work and prevent abuse, some additional data is involved:

• IP address (short-term): stored for up to 24 hours to prevent automated abuse of voting or submitting (rate limiting). It is deleted automatically afterwards.
• IP address sent to Cloudflare Turnstile: when you vote or submit, a short check by Cloudflare Turnstile runs in the background, invisible to you, to make sure a human and not a bot is active. Your IP address is sent to Cloudflare for this. The widget loads when you open the page, whether or not you vote or submit anything.
• Submitted ideas: the title and description you enter are stored as an issue in our GitHub repository (provider: GitHub Inc., USA) and managed there until the idea is shipped or declined.
• Random identifier: on your first visit, your browser stores a randomly generated identifier in its localStorage and sends it to our server on later visits. When you vote, we store this identifier permanently together with the request number to prevent repeated votes for the same request. The identifier contains no personal details (no email, no name) and is not combined with other data. You can delete it at any time in your browser settings; your browser then simply creates a new one on your next visit.

This data is used only to run the feature request board (abuse prevention and managing ideas), not to analyse your behaviour or for advertising. That is why no cookie banner is needed.

Support ticket

On the “Support” page you can send us a ticket through a form. The following data is involved:

• IP address sent to Cloudflare Turnstile: the Support page loads Turnstile when you open it, whether or not you use the ticket form. Your IP address is sent to Cloudflare (see also “Feature requests”).
• IP address (short-term): stored for up to 24 hours when you send a ticket, to prevent automated abuse of the form (rate limiting). It is deleted automatically afterwards.
• Name, email address, subject and message: the details you enter are stored permanently so we can handle your request and reply to you.
• Sharing with Resend: to send the confirmation email and all further replies to your ticket, we use the email service Resend (Resend, Inc., USA), which receives your email address and the content of each message.

Further communication about your ticket then happens by email as usual. If you reply to our confirmation or reply email, your answer is added to your ticket and stored there.

Where data is stored and your rights

Submitted ideas are stored at GitHub Inc. (USA), support tickets and their email history at Cloudflare (database) and, for sending, at Resend, Inc. (USA); all other website data at Cloudflare. If you would like a submitted idea or a ticket deleted or changed, or have questions about the data processed on this website, write to us at the address below.

Contact

For questions about this privacy policy, whether about the apps or this website, contact us at rico.weigand7@gmail.com.