Talo Privacy Policy

Effective date: August 29, 2026

Talo has no servers of its own. The only address it connects to is the Home Assistant you enter; the only other place anything goes is your own iCloud account. We receive nothing, because there is no we to receive it.

• No data collection — the app has no analytics, no tracking, no advertising, and no third-party SDKs.
• Your server, and nothing else — your commands go only to the address you configure. No traffic passes through us.
• Your token, in the keychain — the access token lives in the iOS keychain and is sent only to your own server, to authenticate. With iCloud Keychain on, it reaches your other devices the way your saved passwords do — end-to-end encrypted, readable by neither Apple nor us.
• No accounts — there is nothing to sign up for. The only credentials involved are the ones your Home Assistant already issued to you.
• Where you are stays on your device — if you restrict a thing to your house, Talo asks iOS whether you are inside that circle. What it keeps is the answer — a yes or a no — not a position. Nothing asks for your location until you turn a restriction on.
• Your setup follows you — the server address and the things you pick are kept on your device and copied to your other devices through your own iCloud account, so a house set up on the iPhone is already set up on the iPad and the Apple Watch. That storage is yours, not ours. Deleting the app removes the local copy.

What Talo sends, and where

Two destinations, both yours:

• Your Home Assistant server. Talo sends your access token to authenticate, reads the state of the things you added, and sends the commands you tap — turn this light on, open that gate, arm the alarm. The address is the one you typed. Talo does not know or care who operates it.
• Your iCloud account. The server address, and the things you picked with the names and icons you gave them, are copied through Apple’s iCloud key-value storage so your other devices show the same house. This is storage in your name, under your Apple Account, governed by Apple’s privacy policy. Turning off iCloud for Talo in Settings stops it; the app keeps working on each device on its own.

There is no third destination. Talo contacts no analytics service, no crash reporter, no advertising network, and no server belonging to the developer — there is no such server.

Location

Talo asks for location only if you restrict a thing to an area — so that a gate cannot be opened from the other side of the country by a phone in a pocket. It uses it in one way and one way only: iOS is asked to watch a circle around your house and to say when you cross its edge, and Talo stores that yes-or-no on the device where every control can read it.

No coordinate is stored, and none is transmitted. Your position is not sent to your Home Assistant, is not placed in iCloud, and does not reach the developer, who has no server to receive it. The circle’s centre comes from your own Home Assistant configuration, not from the device.

The permission is Always, because the crossing that matters happens with Talo closed and the phone in a pocket; a permission granted only while the app is open would mean a Lock Screen control that could never tell where you were. If you never restrict a thing, Talo never asks. Revoking the permission later does not unlock anything — a restricted thing refuses when it cannot tell where you are.

What we receive

Nothing. We have no access to your Home Assistant, no access to your iCloud, no copy of your token, and no record that you installed the app beyond the anonymous, aggregate sales figures Apple shows every developer. We cannot see which things you added, what your house is doing, or that your house exists.

Children

Talo is rated 4+ and collects nothing from anyone, of any age.

Changes

If this policy ever changes, the new version replaces this page and the effective date above changes with it. The version inside the app, under About › Privacy Policy, says the same thing in the same words.

Contact

Questions about this policy: offline@dresende.pt