Draft, review before publishing. This text has not been reviewed by a lawyer. Confirm the company details, contact address and retention periods before it goes live.
Legal
Privacy policy
Kiosky is built to keep your home on your network. This policy explains the little we do collect, and why.
Effective date: to be set at publication. Applies to the Kiosky Android app (com.enraio.kiosky), Kiosky Pro and this website.
Who we are
Kiosky is made by Enraio (“we”, “us”). Contact: support@enraio.com. [Add legal entity name and registered address.]
The short version
- The app has no analytics, no advertising, no tracking and no crash reporting service.
- Your dashboard, sensor readings, camera images and audio are processed on the tablet or on your local network. We never receive them.
- If you buy Pro, our licensing server stores your account email, the public keys of your activated devices and your purchase records. Nothing else.
- Payments are handled by Google Play or Paddle. We never see your card details.
- This website sets no cookies and runs no analytics.
The app
Data that stays on your device
Settings, your admin PIN (stored only as a salted hash), access tokens and passwords (stored encrypted using Android Keystore), logs (with secrets removed) and cached web content are stored on the tablet. They are not sent to us.
Connections you configure
The app connects only to the services you set up, such as your Home Assistant server, your MQTT broker, a dashboard URL, an Immich server or a webhook. What it sends to them, for example sensor values to your MQTT broker, is under your control and goes directly from the tablet to those services. Their own privacy policies apply.
Camera and microphone
The camera and microphone are off until you turn on a feature that uses them, and a visible indicator shows when they are active.
- Motion, presence and tamper detection run on the tablet. Frames are analysed in memory and discarded; only the result (for example “motion detected”) is reported, and only to services you configured.
- Wake word detection runs on the tablet. Audio is sent only after the wake word is heard, and only to the Home Assistant Assist pipeline you configured.
- Snapshots and the MJPEG stream are opt-in. They are served on your local network, protected by your API token, and sent only to systems you configure.
Face presence uses Google ML Kit on the device where Google Play services are available. It processes images on the device and does not send them to Google or to us.
Local server
The optional REST API and web admin page listen on your local network only, are off until you set a token, and do not send data to us.
Kiosky Pro and your Kiosky account
To sell and activate Pro on tablets that often have no Google account, we run a licensing server. It stores:
- Account email, to sign you in with an emailed link and to send receipts and essential service messages.
- Device public keys and a device identifier for each activated tablet, with its activation date and last licence check, to enforce the 3-device limit and to stop copied licences. A hashed device identifier is also used to prevent repeated free trials.
- Purchase records: product, status, dates and the purchase reference from Google Play or Paddle.
Once a day an activated tablet asks the server to refresh its licence. That request contains the device public key and the current licence token. It contains nothing about your home, dashboard or sensors. Like any web server, ours briefly processes IP addresses to deliver responses and stop abuse; we do not use them to profile you. [Confirm log retention, for example 30 days.]
Legal basis (for EEA and UK users): performance of our contract with you, and our legitimate interest in preventing fraud.
Payments
Purchases in the app are processed by Google Play under Google's terms and privacy policy. Purchases on this website are processed by Paddle.com, who act as merchant of record and reseller, under Paddle's terms and privacy policy. We receive confirmation of the purchase, the product and the country for tax purposes; we never receive full card details.
This website
kiosky.enraio.com is a static site. It sets no cookies, loads no third-party scripts or fonts, and runs no analytics. A theme preference you choose is kept in your browser's local storage and never sent to us. Our hosting provider (Cloudflare) processes request data such as IP addresses to deliver the site and protect it from attacks.
Sharing
We do not sell or share personal data for advertising. We share data only with the processors needed to run the service (hosting, email delivery, Google Play, Paddle), or when the law requires it.
Retention
Account and device records are kept while your account is active. Purchase records are kept as long as tax law requires. Delete your account and we remove your email and device keys within 30 days, keeping only the purchase records we are legally required to keep.
Your rights
You can ask to see, correct, export or delete your data, or object to how we use it, by emailing support@enraio.com. You can also complain to your local data protection authority.
Children
Kiosky is not directed at children under 13, and we do not knowingly collect their data. Kiosky Pro accounts are for adults.
Changes
If we change this policy, we will update the date above and, for significant changes, tell account holders by email.