Privacy Policy — HA Automotive

Effective date: 4 August 2026

HA Automotive is an Android Automotive OS app that shows the devices of a Home Assistant server on a car’s built-in screen.

(Versione italiana più sotto.)

The short version

The app has no server. Nothing you do in it is sent to the developer, and there is no analytics, tracking, advertising or crash-reporting service in it. The app talks to one place only: the Home Assistant server whose address you type in yourself.

What stays on the device

The app stores the following on the car, and nowhere else:

• the address of the Home Assistant server you entered;
• the access and refresh tokens issued by that server when you sign in, encrypted with a key held in the Android KeyStore;
• which devices you chose to show on the driving screen, and in what order;
• your appearance preferences (theme, accent colour, layout, grouping);
• a cache of the last known state of your devices, so the screen can be drawn immediately at start-up.

This data is excluded from Android cloud backup and from device-to-device transfer (data_extraction_rules.xml). It is deleted when you sign out or uninstall the app.

What the app sends, and where

Only to your own Home Assistant server: the sign-in request, the authenticated WebSocket and REST calls that read device states, and the commands you trigger (turning a light on, running a scene, and so on).

The developer operates no backend and receives none of this. The connection can be a local address, your own domain or Nabu Casa — whichever you entered; the app does not route anything through any other service.

Your Home Assistant password is never seen by the app: sign-in happens on the login page served by your own instance, and the app only receives the resulting token.

Purchases

The optional one-time “Pro” unlock is sold through Google Play Billing. The purchase is handled entirely by Google; the developer receives only the aggregate, anonymous sales reports that Google Play provides to every developer, and never your payment details. Google’s handling of that transaction is covered by the Google Privacy Policy.

Permissions

Permission	Why
INTERNET	to reach your Home Assistant server
ACCESS_NETWORK_STATE	to know whether the car has a connection before retrying
com.android.vending.BILLING	for the optional Pro purchase

The app requests no location, contacts, microphone, camera or storage permission.

Children

The app is not directed at children and is not intended for anyone under 18.

Third parties

The app contains no advertising SDK, no analytics SDK and no social SDK. The only Google component in it is Google Play Billing, used solely for the Pro purchase.

Deleting your data

Use Disconnect in the app’s settings, or uninstall the app. Disconnecting revokes the token with your Home Assistant server and removes it from the car; uninstalling removes the token, the device selection, the preferences and the state cache. Nothing about you exists anywhere else to delete.

Changes

If this policy changes, the new version is published at this same address with a new effective date.

Contact

robyrocker89@gmail.com

Not an official Home Assistant app

HA Automotive is not affiliated with, endorsed by or sponsored by the Home Assistant project, Nabu Casa, or any car manufacturer.