Privacy policy
HA2ATV is an app for Apple TV that shows your own Home Assistant dashboard on your television. This page explains what the app does with information.
In short
- There is no account to create.
- The app has no advertising and no tracking. From version 1.2 it can send an anonymous daily usage summary, only if you turn that on.
- Nomi Digital does not collect or keep any personal information from the app.
- The refresh token Home Assistant issues to the app stays in the Keychain on your Apple TV.
Who the app talks to
The app talks to your own Home Assistant and to Apple, and to Nomi Digital only if you turn on anonymous usage sharing. From version 1.1, signing in stays on your home network and involves no website; version 1.0 used a page on nomi-digital.com.au, our own site, described under Signing in below. Unless you turn on anonymous usage sharing, the app sends nothing about you or your home to Nomi Digital. It has no weather, news, markets, music or advertising service of its own and contacts no other website: your weather, calendars, lists and media all come from your Home Assistant.
- Your Home Assistant. The app connects to the address you give it, on your own network or over the internet, to read your dashboard and your devices and to send the commands you press. Pictures on your dashboard, such as backgrounds, floor plans, album covers, camera pictures and photos of people, are loaded only from your own Home Assistant server. The app does not fetch them from any other site. A picture whose address points at another website is not loaded.
- Apple. The App Store handles the purchase, and the app asks Apple whether it has been made. If your dashboard has a map card, the app also asks Apple Maps for the picture of the map. That request describes the area the card shows. Apple handles it under Apple’s own privacy policy, and Nomi Digital does not see it.
- Your home network. The app looks for Home Assistant there, as described below.
- Nomi Digital, only if you choose. With Share Anonymous Usage turned on, the app sends one anonymous summary a day to a server we run, as described under Anonymous usage sharing below.
Signing in
You sign in on your phone, on your own Home Assistant sign-in page, using Home Assistant’s standard authorization flow. Home Assistant identifies the app by its client ID, your Apple TV’s address on your home network (for example 192.168.1.30:8765). When you approve, Home Assistant redirects your phone’s browser straight back to your Apple TV with a one-time authorization code. The redirect also carries the OAuth state value the Apple TV generated for this sign-in, which holds your Home Assistant URL (for example 192.168.1.20:8123, or an https URL if you reach it that way), your Apple TV’s address (for example 192.168.1.30) and a random nonce. None of it passes through any website, and nothing is sent to Nomi Digital. The Apple TV exchanges the code with your Home Assistant for a refresh token and discards the code.
Version 1.0 of HA2ATV passed the same code through a page on nomi-digital.com.au, which handed it straight back to your Apple TV and kept nothing. That page stays online for copies of 1.0 that have not been updated. It contains no analytics, sets no cookies and loads nothing from other sites. Like most web servers, the one that hosts it may keep standard technical request logs. Nomi Digital does not use the page to collect, read or keep the information it passes along.
What stays on your Apple TV
The refresh token is stored in the Keychain on your Apple TV, on that device only. It is not sent to iCloud. The app also keeps your settings, the dashboard you chose and the pictures it has loaded on your Apple TV. Disconnecting in Settings revokes the refresh token in Home Assistant, then removes the token, your chosen dashboard and the cached images from the Apple TV. Your layout and display settings are kept, and so is the date your trial began, so signing in again does not start a new trial. Your purchase is held by Apple. Signing in again does the same, except that it keeps the dashboard you chose and your layout. If Home Assistant cannot be reached at that moment, the token is still removed from the Apple TV, and you can delete it under Security in your Home Assistant profile.
Local network access
Apple TV asks you to allow local network access. The app needs it to find your Home Assistant, to talk to it, and so that your phone can reach the short-lived sign-in page your Apple TV serves over your home network. To find Home Assistant, the app first browses for its Bonjour (mDNS) service, _home-assistant._tcp. If that finds nothing within a few seconds, it tries port 8123 on the other addresses in the Apple TV’s own /24 subnet, and only on a private network (10.0.0.0/8, 172.16.0.0/12 or 192.168.0.0/16). It asks each address only whether Home Assistant is there. The app uses local network access for nothing else.
Anonymous usage sharing
From version 1.2 the app can send Nomi Digital an anonymous summary of how it is used. It shows us which Home Assistant cards to support next and where the app struggles. Sharing is off until you choose Share when the app asks, or turn on Settings › About › Share Anonymous Usage. See What’s Sent, in the same place, shows what the summary contains, built the same way as the one that is sent. Turning sharing off stops it at once and deletes anything waiting to be sent.
The app sends at most one summary a day. It contains only fixed values from a list built into the app:
- The app version, the tvOS version and the generation of Apple TV.
- Whether the app’s trial has not started, is running or has ended, or the app is unlocked; and whether the unlock screen was shown, a purchase made or a purchase restored.
- The Home Assistant version, as year and month only (for example 2026.10).
- Rough counts of the dashboards offered and the views on the dashboard shown (1, 2–3, 4–9, or 10 or more), and whether the built-in sample home is on screen.
- The card types on the dashboard shown (for example tile, entities or thermostat), which of them came across in a simpler form or were left out, and the reason a card was left out. A custom card is named only when the app has built-in support for it; any other is sent as custom.other.
- Which of the app’s own settings differ from their defaults, by name only, never their values.
- The furthest setup step reached, during the first 14 days only.
- How many times the app stopped responding for two seconds or more (0, 1–2, 3–9, or 10 or more).
A summary never contains entity IDs, names, areas, devices, dashboard or view titles, addresses, anything you type, the time of day, or any number that identifies your Apple TV or you. Our server adds each summary to daily totals and then discards it. It does not log or store the internet address a summary came from.
Purchases
Apple handles the purchase, and Apple’s own privacy policy applies to it. Nomi Digital does not see your payment details or your Apple Account. The app asks Apple whether the purchase has been made, so that it can unlock.
The trial is the app’s own and involves no purchase. The date it began, and the latest date the app has seen, are kept in the Keychain on your Apple TV, with a copy in the app’s settings. They are not sent anywhere, and they are not part of anything the app shares.
Apart from the optional summary described above, the app sends no crash reports or usage figures of its own. If you have chosen to share analytics with app developers on your Apple TV, Apple may pass Nomi Digital anonymous crash and usage reports.
This website
ha2atv.info is a set of plain pages. It sets no cookies and runs no analytics or advertising. Our web server keeps standard request logs (the address that asked, the page and the time); the sign-in page is never logged.
Changes
If this policy changes, the new version will be published on this page with a new effective date.
Contact
Questions about privacy: info@nomi-digital.com.au.