Privacy Policy — peek-it
Provisional document (v1) — pending legal review. Targeted compliance: Regulation (EU) 2016/679 (GDPR) and Google Play program requirements. Last updated: 2026-05-31.
1. In short
peek-it collects no personal data and sends nothing to JOLABS40. The app runs entirely on your local network and only communicates with your own Home Assistant instance. There is no account, no advertising, no tracker, and no third-party server.
2. Data controller
peek-it is published by JOLABS40.
Contact: contact@jolabs40.net
3. Data processed and stored on the device
peek-it stores the following items locally on your Android TV device. This data is never transmitted to JOLABS40:
| Data | Purpose | Storage |
|---|---|---|
| Home Assistant access token and webhook secret | Communicate with your Home Assistant | Encrypted (AES-256-GCM via Android Keystore) |
| Home Assistant IP address | Reach your server on the local network | Encrypted (Keystore) |
| Device list, notification templates, sounds, images | Customize the display | App internal storage |
| Preferences (language, port, display options) | App settings | App internal storage |
| Technical logs | Local diagnostics | Local file; optionally sent to your Home Assistant |
4. Android permissions and their use
| Permission | Why |
|---|---|
| Display over other apps (overlay) | Draw notifications as an overlay |
| Accessibility service | Detect a double-press of the remote “Menu” key to open peek-it. No screen content is read, stored or transmitted. |
| Microphone | Voice assistant only: audio is sent to the “Assist” pipeline of your Home Assistant. peek-it neither stores nor sends this audio to JOLABS40. |
| Network / Internet | Exchange data with your Home Assistant on the local network |
| Start at boot, foreground service | Restart the display service when the TV reboots |
5. No collection by JOLABS40
peek-it uses none of the following:
- no analytics service (Google Analytics, Firebase Analytics, etc.);
- no advertising network or third-party tracker;
- no user account or advertising identifier;
- no in-app payment collecting data.
In line with the Google Play “Data safety” section, peek-it declares that it collects and shares no user data.
6. Data sharing
The only data that flows does so between your device and your own Home Assistant server, on your local network, at your initiative. JOLABS40 has no access to it and receives nothing.
7. Your rights
Since JOLABS40 holds no personal data about you through peek-it, there is nothing on our side to access, rectify or erase. You can delete all local data at any time by uninstalling the app or via Android settings (“Clear data”). For any question: contact@jolabs40.net.
8. Security
Secrets (Home Assistant token and webhook secret, IP) are encrypted at rest via the Android Keystore (AES-256-GCM). peek-it’s local HTTP server is protected by an API key and is intended for private-network use only.
9. Children
peek-it is a home-automation utility for a general audience; it is not designed for children and knowingly collects no data about them.
10. Changes
This policy may evolve with the app. The version in force is dated above. Any substantial change will be published on this page.
11. Contact
JOLABS40 — contact@jolabs40.net