RPZ HA Lab privacy policy
Last updated: November 14, 2026
What this app is
RPZ HA Lab is a personal, non-commercial home-automation setup that runs on a server inside the owner's home. It uses Home Assistant to connect to the household's own Google Nest thermostat.
Information we access
When a household member signs in with Google and grants access, the app receives, through the Google Smart Device Management API, information about the Nest devices in that member's own home:
- Device names and room names
- Thermostat readings: indoor temperature, humidity, mode, set points, and heating/cooling status
- Whether the device is online
It also receives the basic Google profile information needed to sign in. It does not access email, contacts, files, location history, or any other Google data.
How the information is used
- To show the thermostat's status on the household's own screens (Home Assistant, phones, and TV dashboard)
- To send the household alerts, such as a temperature that is too low or a thermostat that has gone offline
- To log heating and cooling running time and estimate the household's energy cost
- To change the thermostat when a household member asks it to
Where it is stored and who can see it
All data is stored only on the household's own server at home. It is not sold, rented, shared with third parties, used for advertising, or used to train AI or machine-learning models. Only members of the household can see it.
Google API Services User Data Policy
RPZ HA Lab's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How long it is kept, and how to remove it
Thermostat history is kept for as long as it is useful to the household and can be deleted at any time from Home Assistant. You can withdraw the app's access at any time at nestservices.google.com/partnerconnections or in your Google Account under Third-party connections. After access is removed, the app can no longer read or change your devices.
Security
The server is not exposed to the public internet. Remote access is only through an encrypted private network, and access tokens are stored only on the home server.
Contact
Questions about this policy: privacy@rpzway.cloud