Homelake privacy policy
Effective: October 12, 2026
Apps: Homelake for iPhone and Homelake for Android (com.taylab.homelake), Homelake Nightly HRV for Wear OS watches, and Homelake Web
Contact: support@homelake.app
Who this policy is for
Homelake is self-hosted: each household runs its own Homelake server on its own computer, and the apps send to that server and nowhere else. This policy covers the iPhone app, the Android app, the Wear OS watch app and the web app a household's server serves to its browsers. An app works only after it has joined a household's server with a one-time invite or code from a device the household already trusts. There is no public sign-up, no advertising, no analytics and no crash reporting, and no third-party code inside the apps.
What the apps read, and what leaves the device
Nothing is read until you switch a stream on, and every stream starts off. A switch is per person; each phone collects only the streams switched on there. The phone asks the system for a permission (Apple Health, Health Connect, location, calendars, photos and the rest) only when you tap to allow it, after an explanation of what is read and what is sent. For each stream that is on, the app turns what it reads into counts and summaries on the device and sends only those to your household's server:
| Stream | Read on the device | Sent to the household server |
|---|---|---|
| Activity, Heart, Sleep, Workouts, Body | iPhone: Apple Health (HealthKit) records of those types. Android: Health Connect records of those types. Read only; neither app ever writes to Apple Health or Health Connect | hourly activity totals; a daily heart and body summary (including heart-rate recovery and sleeping wrist or skin temperature where the device records them); one row per workout or night. On iPhone also: per day, how many irregular-rhythm and high or low heart-rate notifications you had, AFib History, and how many ECGs by result (never the ECG itself); per night, breathing disturbances and sleep apnea notifications; per workout, its effort rating, power, speed, elevation gained and running form |
| Mindful minutes and hearing | Apple Health mindful sessions, headphone and environmental sound levels and loud-sound notifications; Health Connect mindfulness sessions | minutes per day; average sound levels and the number of loud-sound notifications per day |
| Daylight, State of mind (iPhone) | Apple Health time in daylight, and the moods you log in Apple Health | minutes in daylight per day; each mood entry's time, how pleasant it was, and Apple's own labels and areas of life. Never a note |
| Water, caffeine, food energy, alcohol | Apple Health or Health Connect nutrition records, and what you log in the app or the web app | the amount per entry (millilitres, milligrams, kilocalories, drinks). Never a food's name |
| Protein, carbs, fat, fiber, sugar, sodium | Apple Health or Health Connect nutrition records | the amount per entry (grams; sodium in milligrams). Never a food's name |
| Vitals | Apple Health or Health Connect body and basal body temperature and blood glucose; on iPhone also lung function (FEV1 and peak flow) and inhaler uses | per day: the latest temperatures; the mean, lowest and highest glucose; on iPhone the day's best FEV1 and peak flow and the number of inhaler uses. Never a note |
| Mobility | iPhone: Apple Health walking speed, step length, double support time, walking asymmetry, stair speeds, six-minute walk distance, walking steadiness and falls. Android: the speed during walks you record | per day: the averages, the latest six-minute walk, Apple's walking steadiness level (OK, low or very low) and the number of falls; on Android the average walking speed. Never a route or a place |
| Cycle tracking | Apple Health or Health Connect menstruation, spotting, ovulation test and cervical mucus records | for each day you log something: the flow, whether a period started, spotting, the test result and the mucus appearance. Never a note or sexual activity, and never a cycle day or phase (the household server works those out). Shown only to you: never shared with the household, in a widget or in a notification |
| Mental health assessments (iPhone) | the GAD-7 (anxiety) and PHQ-9 (depression) questionnaires you take in Apple Health | each questionnaire's time, which one, its score and Apple's risk level. Never your answers. Shown only to you: never shared with the household, in a widget or in a notification |
| Symptoms (iPhone) | the symptoms you log in Apple Health | each symptom's time, which symptom, and how severe. Never a note. Shown only to you: never shared with the household, in a widget or in a notification |
| Medications (iPhone, iOS 26 or later) | the dose log of the medications you choose to share in Apple Health's own prompt | per day: how many doses were scheduled, taken and skipped, and how many as-needed doses you took. Never a medication's name, dose or note. Shown only to you: never shared with the household, in a widget or in a notification |
| Places | your location, in the background, while Places is on (on iPhone, the visits iOS reports) | "home" arrivals and departures, and other stops as a category and an area of about 1 km. Never coordinates |
| Travel | iPhone: Motion & Fitness activity. Android: your car's Bluetooth connecting and disconnecting | each period's start, end and mode (driving, cycling, walking, running, still). Never a route, a place, a distance or the car's name |
| Screen time, Pickups (Android) | Android's usage events | minutes per app per hour with the app's category; unlocks per hour |
| Messages and calls (Android, direct download only; not in the Google Play build) | the message and call logs | per hour: messages in and out, calls in, out and missed, and call minutes. Never a number, a name, a contact or any content |
| Music (iPhone) | what you recently played in Apple Music | the kind, genre and length of what played. Never a title or an artist |
| Calendar counts | event times in the calendars you tick | per day: number of events, hours booked, first start, last end. Never titles, attendees, places or notes |
| Photo counts | the date and folder of items in your camera roll or camera and screenshot folders | per day: number of photos, videos and screenshots. Never an image, a file name, a place or a face |
| Check-ins, Log | what you enter, on a phone or in the web app | mood and energy and a tag; the kind and amount of what you log. Never a note |
| Nightly HRV (Wear OS watch) | your watch's heart sensor's beat-to-beat intervals while you sleep, on the watch | one number per night (heart-rate variability) with how many beats it used. Never the raw intervals |
Raw readings (coordinates, Health samples, heart beats, photos, calendar entries, logs) stay on the device. Every record carries the person it belongs to, so the server knows whose data it is. The web app sends only what you type into it and the switches you change; it keeps a session cookie that a phone of yours approved, and a copy of your own views in the browser, which is wiped when you sign out. It uses no other cookies and no tracking.
Where it goes
Only to your household's Homelake server, over an encrypted connection (HTTPS through the household's own Cloudflare tunnel, or the household's private Tailscale network). It is never sent to the people who make Homelake, nor to any third party; it is not sold, shared with advertisers, or used for anything but showing you, and the household members you choose with the "Share with household" switch, your own trends. Data from Apple Health and Health Connect is used only for that, never for advertising or to decide anything about you.
Keeping and deleting it
Your household's server keeps what it receives until it is deleted there. Switching a stream off stops it on the device at once, drops anything waiting to be sent, and pauses it on the server. The household's administrator can delete everything a person sent (homelake forget). Uninstalling an app deletes everything it kept on the device; signing out of the web app deletes what the browser kept. To ask for deletion, or with any question, write to the contact above, or to your household's administrator.
Security
Every connection to the household server is encrypted. Each phone and watch holds its own key, stored in the iPhone Keychain or Android's hardware-backed keystore and never shown, and the phone apps can be locked with Face ID, a fingerprint or your face.
Children
Homelake is not directed at children under 13.
Changes
A change to this policy is posted at this address with a new effective date.