ENVO-App Privacy Policy
Last updated: September 4, 2026
The Short Version
Your home data stays under your control. ENVO Studios does not run a cloud that receives your home data, does not track your activity, and does not sell your data.
1. Where Your Data Goes
ENVO-App is a client for the ENVO-Home server you own or control. The app sends account, home, media, file, camera, automation, and preference requests to that server so it can provide the features you choose to use.
ENVO Studios does not operate a central account database, home-data cloud, advertising service, or analytics endpoint for ENVO-App. Your ENVO-Home administrator controls the server, its accounts, its connected services, and the data stored there.
2. Permissions Used
ENVO-App requests the following device permissions, each for a specific purpose:
Camera
Used when you scan a setup code, take a photo, or choose a camera image as a home wallpaper. The camera opens only after you choose a feature that needs it.
Local Network
Used to discover and communicate with your ENVO-Home server on your local home network.
Location
Used only when you set your home's location for local weather. The chosen location is sent to your ENVO-Home server. ENVO Studios does not receive it.
Microphone and Speech Recognition
Used for voice control after you activate it. On-device recognition is requested where the device supports it. If you choose ENVO server voice, the selected audio is sent to your ENVO-Home server for processing.
Photos
Used only for photos and videos you choose to back up, share, or use as a wallpaper. Selected content goes to your ENVO-Home server or a service configured by your home administrator, not to ENVO Studios.
Face ID / Touch ID
Used for optional biometric app lock. Biometric data is handled entirely by Apple's Secure Enclave on your device. ENVO-App never accesses, stores, or transmits biometric data. This feature is entirely optional.
Notifications
Used for home alerts, automation results, access requests, and TV sign-in approvals. On Apple devices, your app-specific device token and notification payload are routed through Apple Push Notification service. Android uses the equivalent platform service.
EnvoTunnel VPN — Phone and Tablet Only
Used for optional encrypted remote access to your home server. VPN configuration and keys are stored on your device and home infrastructure. The Apple TV app does not include VPN setup or controls.
3. Services Used to Deliver Features
ENVO-App does not include advertising trackers or developer-operated analytics. It uses Apple Push Notification service on Apple devices, and the equivalent platform notification service on Android, only to deliver notifications you enable.
Your home administrator may connect services such as Jellyfin, Immich, Nextcloud, Home Assistant, Frigate, or other endpoints. Those services are controlled by you and governed by their own terms and privacy practices. ENVO Studios does not operate or access them on your behalf.
4. Analytics and Tracking
ENVO-App does not send developer analytics, advertising data, usage telemetry, or crash reports to ENVO Studios. Platform providers may process limited technical information when you use their operating-system services, such as notification delivery.
- No crash reporting SDKs
- No usage analytics
- No advertising identifiers
- No fingerprinting or device profiling
5. Data Storage
ENVO-App keeps local settings and credentials on your device. Your home content and account records remain on the ENVO-Home server and services controlled by your home administrator.
- Preferences — Stored in local app storage on your device
- Credentials — Stored in the iOS Keychain / Android Keystore via expo-secure-store, protected by hardware encryption
- VPN Configuration — On supported phones and tablets, tunnel keys and settings are stored on-device and on your home infrastructure, never on ENVO Studios servers
6. Data Sharing
ENVO Studios does not receive, sell, rent, or share your home content or account activity. Data leaves the device only when needed for a feature you request: to your ENVO-Home server, to a service configured by your home administrator, or through the operating-system service needed to deliver that feature, such as push notifications.
7. Children's Privacy
ENVO Studios does not knowingly receive personal information from children under 13 through ENVO-App. Household administrators are responsible for the accounts and content on their ENVO-Home server, including any child profiles they create.
8. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. We will keep the policy aligned with the app's actual behavior.
9. Contact
If you have questions about this privacy policy, contact us at privacy@envostudios.com.
ENVO Studios
envostudios.com