Privacy Policy

1. Who is responsible

Home Systems is developed and operated by Valerii Tsoi / Tsoy.eu in Spain. The app package and bundle identifier is eu.tsoy.mobile.

Privacy contact: valeriy.i.tsoy@gmail.com.

2. Information handled by Home Systems

Home Systems handles only the information needed to authenticate you, maintain a secure session, display the requested dashboards, protect the service, and operate the website components shown inside the app.

• Account credentials. Your username and password are sent over HTTPS when you sign in. The application code does not store your plaintext password. The server verifies it against a one-way password hash.
• Session and device information. The service stores your username, a random app-specific device identifier, platform (for example Android or iOS), app version, and session timestamps. The identifier is generated by Home Systems and is not a hardware serial number, advertising ID, IMEI, or other manufacturer identifier.
• Authentication token. A random access token is stored on the device using operating-system protected secure storage. The server stores only a SHA-256 digest of that token.
• Biometric preference. If you enable Face ID or fingerprint unlock, Home Systems stores only your enable/disable preference in protected device storage. Biometric templates and biometric matching remain under the control of iOS or Android; Home Systems does not receive or store your face or fingerprint data.
• Home telemetry. The app displays smart-home, energy, temperature, heat-pump, solar and related telemetry supplied by the connected Home Systems backend. This telemetry is not collected from the phone's sensors by the mobile app.
• Network and security information. Network infrastructure may process IP address and request metadata to deliver the service and protect it from abuse. Home Systems also uses the client IP transiently for login rate limiting; the Home Systems session database does not store that IP address.

3. First-party website analytics

The Tsoy.eu pages displayed in the app may record privacy-focused first-party analytics such as a random browser-session identifier, page path, language, referring site or campaign information, device type, browser/operating-system category, and approximate country/region/city supplied by the network edge. The analytics database does not store visitor IP addresses.

Raw analytics session and page-view records are normally retained for up to 90 days under the current configuration. Aggregated daily statistics may be retained longer. Global Privacy Control and Do Not Track signals are respected by the first-party analytics code.

4. How information is used

• Authenticate users and keep authorized sessions active.
• Display Home Systems and smart-home information requested by the user.
• Maintain security, rate-limit abusive login attempts, diagnose failures and protect the service.
• Understand basic usage of Tsoy.eu pages and improve reliability and usability.

Home Systems does not sell personal information and does not use personal information for advertising or advertising profiling.

5. Service providers and external services

Information may be processed by infrastructure providers that are necessary to operate the service, including Amazon Web Services for hosting and Cloudflare for network delivery/security services.

When you select the Solar section, the app opens the configured SolarAssistant service in an embedded browser. To avoid requiring a second manual sign-in, Home Systems may request dedicated SolarAssistant integration credentials from the Home Systems backend after your Home Systems session has been authenticated. Those integration credentials are stored server-side as encrypted secrets, are sent over HTTPS only when the SolarAssistant sign-in form is detected, are kept only transiently in app process memory long enough to submit that form, and are not written to Home Systems app storage, analytics, or application logs.

Your connection is then made to SolarAssistant and that service may process its own account, session, cookie, IP-address, approximate-location and solar-system information according to its own privacy policy. See SolarAssistant Privacy Policy.

Weather information shown by the smart-home dashboard may be obtained server-to-server from a weather provider using the home location configured on the backend. The mobile app does not request your phone's GPS location for this purpose.

6. Storage, retention and deletion

• Active mobile sessions normally expire after the configured session period (currently 30 days). Expired or revoked session records may remain for approximately 30 additional days before routine cleanup.
• Home telemetry is retained as needed to provide the smart-home service and historical views, unless it is deleted or no longer required.
• Raw first-party analytics records are normally retained for up to 90 days; aggregated statistics may be retained longer.
• Operational backups and infrastructure logs may remain for a limited additional period according to normal security and backup cycles.

Home Systems does not provide public self-service account registration. If you want access corrected, revoked, or server-side information associated with your Home Systems account deleted, contact valeriy.i.tsoy@gmail.com. Requests will be handled subject to applicable legal and security requirements.

Signing out removes the active access token from the app and revokes the corresponding server session. Uninstall behaviour for locally protected storage is controlled by the mobile operating system.

7. Security

Home Systems uses HTTPS/TLS for network transport, OS-protected secure storage for mobile authentication data and preferences, operating-system biometric authentication when enabled, one-way hashing for server-side password verification, hashed server-side session tokens, access controls, and login rate limiting. No method of storage or transmission can be guaranteed to be completely secure, but reasonable technical safeguards are used to reduce risk.

8. Children

Home Systems is a household systems-management application and is not directed to children. It is not designed to knowingly collect personal information from children.

9. Your privacy rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction or objection regarding personal information associated with you. To make a privacy request, contact valeriy.i.tsoy@gmail.com.

10. Changes to this policy

This policy may be updated when Home Systems features, service providers or data practices change. The effective date at the top of this page will be updated when material changes are published.