Privacy Policy
Last updated 2026-10-16
1. Who we are
Ienoa (the "app") is developed by the Ienoa team ("we"). Contact: support@ienoa.com.
2. Data stored on your iPhone
- Setup information — device addresses on your home network, your energy gateway's password, your intercom registration, and the secret shared with your HomeBox. Stored encrypted in the iOS Keychain on this iPhone only; not synced to iCloud and not transferred to other devices by backups.
- Cached device status and energy figures — kept in the app's own storage, protected by iOS file encryption.
- Diagnostics — non-sensitive technical records (for example, whether a connection succeeded). They stay on the iPhone and are never sent anywhere automatically.
You can erase all of this in the app (Settings → Erase settings on this iPhone) or by deleting the app.
3. Camera, microphone and photos
- Camera — only to scan the registration QR code shown on your intercom. Recognition happens on the iPhone; images are not saved or sent.
- Microphone — only during an intercom call or camera talk, to send your voice to your own intercom or camera. Nothing is recorded.
- Photos — to read a registration QR code from one photo you pick (through the iOS photo picker, which shows the app only that photo), and to save camera snapshots or recordings to your library when you tap save/record.
- Intercom video and call audio are shown and played live only and are not recorded.
4. Network connections
| Connection | What is sent | Who can see what |
|---|---|---|
| At home: iPhone ↔ your devices | Commands and status, using each device's own protocol on your home network | Stays inside your home network. Some device protocols are unencrypted by their design, so please protect your Wi-Fi with a strong password. |
| iPhone ↔ your HomeBox | Remote requests, camera and intercom audio/video, notification settings, push token | HomeBox runs on your household's own computer, not on our servers. Traffic is encrypted (HTTPS with a pinned certificate; away from home additionally end-to-end encrypted with keys from pairing). |
| Signalling service (run by us on Cloudflare Workers) | A few KB of encrypted connection details exchanged once before each remote connection | The service sees: your HomeBox's ID (a one-way hash), the time, the size of the encrypted messages, and the IP addresses of your iPhone and HomeBox. It cannot read the content and stores nothing; messages are forwarded and discarded. Cloudflare, as the hosting provider, processes this traffic under its own privacy policy. |
| Push relay (run by us on Cloudflare Workers; optional, off by default) | An encrypted notification from your HomeBox, with your phone's push token | The relay sees only ciphertext, the time and its size; it cannot read the content. It does not store push tokens or notifications and keeps no access logs. To prevent abuse it keeps one irreversible record (a keyed hash of the push token → your HomeBox's ID). |
| Public STUN servers (Cloudflare, Google) | A standard request asking "what is my public address?" | These servers see only your IP address. |
| Your TV and printer | Remote-control commands; printer status queries | Stays inside your home network. |
5. Push notifications
Push notifications are optional and off by default. Without them, Ienoa is used at home only: it talks to your HomeBox directly and nothing is sent through us. To get doorbell and alarm notifications away from home, turn on "Receive notifications via push relay" in Settings → Notifications & alarms; the app shows this privacy summary and the disclaimer below and turns it on only if you agree. You can turn it off at any time; your push token is then unbound from the relay right away.
When someone rings your intercom or your intercom reports an alert, your HomeBox encrypts the notification (who, which entrance, what time) with a key derived from your pairing. It is passed through our push relay to the Apple Push Notification service (APNs) and decrypted only on your iPhone. The relay and Apple see only ciphertext and a generic placeholder text; if a notification can't be decrypted, only the placeholder is shown. Your iPhone gives its push token to your own HomeBox, which hands it to the relay only when binding (after you turn the relay on) and at the moment of sending. Apple processes notifications under its own privacy policy.
Push relay disclaimer. The push relay is provided free of charge on a best-effort basis, with no guarantee of delivery, timeliness or continued availability; notifications may be delayed or lost because of network problems, Apple's push service or maintenance. Doorbell and alarm notifications are not a substitute for a security system or emergency services. To the extent permitted by law, we are not liable for any loss caused by delayed or undelivered notifications.
6. This website and invite requests
ienoa.com uses no cookies, analytics, advertising or third-party fonts. The one exception is the invite request: once you start filling in the form, the page loads Cloudflare Turnstile, a bot check that stops people using our site to send email to addresses that aren't theirs; Cloudflare processes it under its own privacy policy. To confirm the address is yours, we send you a code through the email provider Resend, which handles only the recipient address and message for delivery. We keep the code only as an irreversible hash and delete it within a day. Once you confirm, we store the email address you enter, the page language and the time, in a database we run on Cloudflare. We use them only to reply about your invite, never share or sell them, and delete them when you ask us to (write to support@ienoa.com) or at the latest 12 months after your request. Cloudflare, as the hosting provider, processes website traffic under its own privacy policy.
7. What we do not do
- No account or sign-in.
- No analytics, advertising, crash-reporting or other third-party SDKs; no tracking across apps or websites.
- We do not sell or share data. Apart from invite requests sent through this website, we do not receive any.
- No server-side switches that change what the app does.
8. Retention and deletion
Apart from invite requests (section 6) and, only if you turn on the push relay, the irreversible token hash described in section 4 (deleted when you turn the relay off), we keep no data about you. Data on your iPhone is deleted when you erase it in the app or delete the app. Data on your HomeBox (list of paired phones, push tokens, notification preferences, logs) is on your own computer; unpair a phone on HomeBox or delete HomeBox's data folder to remove it.
9. Children
The app is not directed to children and collects no data from anyone.
10. Changes
If this policy changes, we will update this page and its effective date.
11. Trademarks
Ienoa is an independent app. It is not affiliated with, authorized or endorsed by Panasonic or any other manufacturer. Product names such as AiSEG and ECHONET Lite are trademarks of their respective owners and are used only to describe compatibility.