Ctrlable Pro Privacy Policy

Effective Date: April 18, 2026

Wavesquare LLC ("Ctrlable," "we," "us," or "our") operates the Ctrlable Pro mobile application (the "App"). This Privacy Policy explains how we handle information in connection with your use of the App.

Ctrlable Pro is a professional building and home automation companion app designed for use by authorized clients of Ctrlable integrators. By using the App, you agree to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

When you set up and use Ctrlable Pro, the App may process the following:

• Home Assistant server URL and connection credentials (stored locally on your device)
• App preferences and configuration settings
• Notification preferences

1.2 Information Collected Automatically

The App may automatically collect the following to support its core functionality:

• Device identifiers — used solely to enable push notifications and App functionality
• Crash reports and diagnostic data — used to identify and fix technical issues
• App usage patterns — used to improve performance and user experience
• Precise location data — collected in the foreground and background when Location Tracking is enabled, used exclusively for zone-based home automation (geofencing)
• Health and activity data — collected only if you grant Health permissions, used exclusively to trigger health-based home automations on your connected Home Assistant server

1.3 Information We Do NOT Collect

Ctrlable Pro does not collect:

• Your name, email address, or any personal contact information
• Payment or financial information
• Any data from your home automation devices beyond what is necessary to display it within the App

2. How We Use Information

We use the limited information collected solely to:

• Provide and maintain the core functionality of the App
• Deliver push notifications from your authorized Home Assistant server
• Diagnose and fix crashes or technical issues
• Improve App performance and stability
• Trigger zone-based home automations using your device location (e.g. arming security system on departure, unlocking door on arrival)
• Trigger health-based home automations using Health and activity data (e.g. adjusting lighting or temperature based on sleep or activity state)

Location and Health data are processed locally between your device and your Home Assistant server. They are never routed through Ctrlable servers, sold, or shared with third parties. You may disable Location or Health access at any time in your device's Settings, though doing so will disable the corresponding automation features.

2.1 Location Data

Ctrlable Pro requests access to your device's precise location, including background location, to enable presence-based home automations. Location is used to detect when you enter or leave geographic zones defined in your Home Assistant server (geofences). Background location is required so automations trigger reliably even when the app is not open. Location data is transmitted directly to your Home Assistant server and is never stored on or transmitted to Ctrlable servers.

2.2 Health Data

Ctrlable Pro may request access to Health and activity data (including activity, fitness, and sleep data) to enable health-aware home automations. Health data is used solely to trigger automations on your Home Assistant server and is never stored externally, sold, or shared with any third party.

3. Data Storage & Security

Ctrlable Pro is designed with privacy by default:

• All automation data (devices, scenes, sensors) is processed locally on your device or communicated directly with your Home Assistant server. It is never routed through Ctrlable servers.
• Server credentials and configuration are stored locally on your device using iOS secure storage (Keychain) and Android's encrypted SharedPreferences.
• Location and Health data are transmitted directly to your Home Assistant server only and are never stored on Ctrlable servers.
• We implement industry-standard security measures to protect any limited diagnostic data we receive.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties, except in the following limited circumstances:

• Service providers — We may share minimal diagnostic data with trusted service providers (such as crash reporting tools) who assist in operating and improving the App. These providers are bound by confidentiality obligations.
• Legal requirements — We may disclose information if required by law, court order, or governmental authority.
• Business transfers — In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of that transaction.

We never sell location data, health data, or any personal information to advertisers or data brokers.

5. Push Notifications

Ctrlable Pro supports push notifications sent from your Home Assistant server to your device. These notifications are delivered through Apple's Push Notification service (APNs) on iOS and Firebase Cloud Messaging (FCM) on Android. Notification content is determined entirely by your Home Assistant server configuration and is not stored or processed by Ctrlable.

You can disable notifications at any time through your device's Settings app.

6. Local Network Access

The App communicates directly with your Home Assistant server on your local network or via secure remote connection. This communication occurs between your device and your server only. Ctrlable does not have access to your local network or the data exchanged during this communication.

7. Location Permissions

Ctrlable Pro requests the following location permissions:

• Precise Location (Foreground) — to display your current zone and allow manual location-based actions
• Precise Location (Background) — to trigger automations when you enter or leave a geofence zone, even when the app is not open
• Coarse Location — as a fallback when precise location is unavailable

You may grant or revoke location permissions at any time in your device's Settings. Revoking background location will disable zone-based automations. The App will always request your permission before accessing location data and will display a clear explanation of why location access is needed.

8. Health Permissions

Ctrlable Pro may request access to the following Health data categories if you choose to enable health-based automations:

• Activity and fitness data
• Sleep data
• Other health metrics supported by your Home Assistant configuration

Health data is read from your device's Health platform (Apple Health on iOS, Google Fit / Health Connect on Android) solely to trigger automations. It is never uploaded to Ctrlable servers, shared with third parties, or used for any purpose other than local automation triggers.

9. Children's Privacy

Ctrlable Pro is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

10. Your Rights & Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction or deletion of your personal information
• Object to or restrict our processing of your information
• Data portability
• Opt out of the sale of personal information (we do not sell personal information)

To exercise any of these rights, please contact us at the address below. We will respond within 30 days.

11. Third-Party Services

The App integrates with Apple services including Apple Push Notification service (APNs), Apple Health, Apple Watch, and CarPlay. Your use of these services is subject to Apple's Privacy Policy, available at https://www.apple.com/privacy/.

On Android, the App integrates with Firebase Cloud Messaging (FCM) and Google Health Connect. Your use of these services is subject to Google's Privacy Policy, available at https://policies.google.com/privacy.

The App does not include third-party advertising SDKs or analytics platforms that track users across apps or websites.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this document. We encourage you to review this Privacy Policy periodically. Continued use of the App after any changes constitutes your acceptance of the updated Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Wavesquare LLC / Ctrlable 95 NE 73rd Street Miami, FL 33138 United States

Email: support@ctrlable.com Website: https://ctrlable.com Phone: +1 (786) 581-0008

© 2026 Wavesquare LLC. All rights reserved.