Dashwall: privacy policy | Weekend Bunnies

This policy is about Dashwall, the Android app made by Weekend Bunnies, and only about the app. It explains what the app does with information on your tablet, what leaves your tablet and when, and what your rights are. It does not cover this website, which has its own privacy notice, and it does not cover Home Assistant or the Dashwall integration for Home Assistant, which run on your own server.

The short version

Everything the app keeps stays on your tablet: your dashboard address, your settings and, if you enter them, your Home Assistant user name and password, which are stored encrypted.
The app talks to your own Home Assistant, usually on your local network. We never see anything from that.
The app sends something to us only when you send us a message with Contact us or use Request a refund, and then only what that screen says it sends. You never create an account.
There is no advertising, no analytics, no crash reporting and no tracking.
Purchases go through Google Play.

Who we are

Dashwall is made by Weekend Bunnies, a business based in the Netherlands. We are the controller of the personal data described in this policy, under the General Data Protection Regulation (GDPR, in Dutch: AVG) and Dutch law. For anything about this policy or your data, email us at office@weekendbunnies.com or use Contact us in the app.

We hold information about you from the app only if you send us a message with Contact us or a refund request, as described under "Contact us and refund requests". If you email us directly instead, we use your message and your email address only to answer you, keep them only as long as we need them to deal with your question, and never add your address to a mailing list or share it.

What the app keeps on your tablet

Your dashboard: the address of your Home Assistant dashboard, the tablet's name on your network, the page zoom and your other settings, such as kiosk mode, the corner that opens the settings and the power options.
Your Home Assistant login (only if you enter it, for the automatic login): the user name and password, and the address they were entered for.
The settings PIN (only if you set one).
Paired Home Assistant servers: for each server you paired, a fingerprint (a SHA-256 hash) of the key the tablet and that server agreed during pairing. The key itself is not kept.
An installation id: a random code made when the app is first started, by which Home Assistant knows this tablet.
A short event log: the last 300 or so events, such as "Network lost", a reload and its reason, a command from Home Assistant or a pairing. It can include your Home Assistant user name (when the app logs in) and the network address of a Home Assistant that paired. It is shown in the settings so problems can be found without a cable.
The dashboard's own storage: the dashboard is a web page from your Home Assistant, shown in Android's WebView. The WebView keeps what that page stores, as any browser does: Home Assistant's login, so you stay logged in, its cookies and cached files.
Your purchase (only if you bought premium): the purchase record Google Play last handed over (the order number, the purchase token, the product, the purchase time, its status and Google's signature) and when Google Play last confirmed it. The record is kept after a refund, so the Request a refund page can still show what happened to your request.

Your settings, your Home Assistant login, the PIN and the server fingerprints are stored with Android's encrypted storage, with a key that is kept in the tablet's Android keystore and never leaves it. All of it is in the app's private storage, which other apps cannot read.

How long it is kept

The event log: about the newest 300 events; older ones are deleted as new ones come in.
Everything else on your tablet: until you change it, delete it or uninstall the app. "Log out of the dashboard" deletes the dashboard's login, cookies and stored data, and "Forget paired Home Assistant servers" deletes the server fingerprints.

What we keep on our server, if you sent us something:

Messages sent with Contact us, with your email address: 1 year after your question has been dealt with, after which they are deleted. A message about an invoice or a payment is kept for 7 years after the end of the financial year it belongs to, as Dutch tax law requires.
Refund requests and purchase records: 7 years after the end of the financial year they belong to, the period for which Dutch tax law requires a business to keep its records (the fiscale bewaarplicht). A declined request is kept at least 3 years, so it is still there if you ask us about it.
Play Integrity tokens: deleted after use, and after 14 days at most.
Our server's logs: 14 days, without IP addresses.
The refund flag kept by Google: up to 3 years after the app was last used on the device.

Permissions and why the app needs them

Internet. To load your Home Assistant dashboard and to run the local connection Home Assistant uses to reach the tablet. It is also used to reach our server when you send a message or use Request a refund, and it comes with Google Play Billing and Google Play Integrity, the libraries from Google that handle purchases and confirm that a request to us came from this app.
Network state. To notice when Wi-Fi comes back, so the app can reload the dashboard and announce itself on the network again. It also comes with Google Play Billing.
Keep awake. To turn the screen on when Home Assistant asks, and, if "Keep the CPU awake" or "Wi-Fi full power" is on, to keep the tablet ready for Home Assistant's commands while the screen is off.
Turn the screen on. Android 14 and newer need this for the app to wake the screen when Home Assistant asks.
Foreground service (special use). Keeps the local connection for Home Assistant running while the screen is off, so a wake request is never missed. Android shows a notification while it runs.
Run at startup. To start the dashboard and the local connection again after the tablet restarts, and after an update of the app.
Notifications. For that one notification, which shows whether Home Assistant is connected.
Google Play billing. To buy premium and to check whether it was bought.

The app asks for no location, camera, microphone, contacts, files or photos. If the dashboard page asks for the camera or the microphone, the app refuses.

What leaves your tablet

To your own Home Assistant

Dashwall is made to work with the Home Assistant you run yourself, usually on your local network. What it exchanges with it goes to your server, not to us, and we never see it:

The dashboard. The app loads the dashboard address you set, like a browser. The page and anything it loads come from your Home Assistant, and from wherever your dashboard itself fetches things, such as a map or a camera image; that is up to how your dashboard is set up. Links to other sites are not followed.
Your login, if you entered one. When automatic login is on and Home Assistant shows its login page, the app sends the user name and password to Home Assistant's own login, and only to the address they were entered for. A user name and password that Home Assistant refused are not sent again.
Pairing. When you add the tablet in Home Assistant, the tablet sends a new key once, through its logged in dashboard, to that same Home Assistant, together with its installation id. Every later request from Home Assistant is signed with it.
The tablet's state, to paired servers only. The tablet's name, installation id and model, the app's version, whether the screen is on, whether the dashboard is connected, how often and why it reloaded, the newest line of the event log, the battery level, charging, the charger type, battery health, temperature, power and remaining charge time, whether battery use is unrestricted and Dashwall is the Home app, whether premium is active, how long the tablet has been running, the dashboard address and the settings Home Assistant can change. This is sent when something changes and every minute while Home Assistant is connected.
The announcement on your network. So Home Assistant finds the tablet by itself, the app announces it on the local network as a `_dashwall._tcp` service, with the tablet's name, installation id and app version. Any device on your network can see this announcement, and can ask the tablet for its name, installation id, model and app version. Everything else needs a request signed by a paired Home Assistant, and the tablet answers only devices on the local network.

If your Home Assistant's address starts with http:// instead of https://, this traffic is not encrypted on your network, as with any browser. What Home Assistant does with it is set by you and by Home Assistant's own privacy policy.

Purchases, through Google Play

If you buy premium, the purchase is handled entirely by Google Play. We never see your name, your payment details or your Google account. The app asks Google Play whether premium has been bought, for example when it starts. This uses Google Play Billing, a library from Google built into the app. Google Play Billing may also send Google technical information about purchases. All of this is handled by Google under Google's privacy policy.

Android's WebView

The dashboard is shown in Android System WebView, the part of Android, made by Google, that apps use to show web pages. With Google Safe Browsing on, which is Android's default, the WebView checks the addresses it loads against Google's list of dangerous sites, under Google's privacy policy. The app adds nothing to that.

Messages and refund requests, to our server

Only when you send us a message with Contact us, or use Request a refund, does the app send what that screen says to our server. The next section explains what is sent and what we keep.

Nothing else

Nothing else leaves your tablet. We never receive your dashboard, your Home Assistant address or login, your settings, the event log or anything about your home.

Contact us and refund requests

Dashwall has two screens that send something to our server, api.weekendbunnies.com: Contact us and Request a refund. We run it ourselves, on a server we rent, and it is the same one that handles messages and refunds for our apps PDF Label and Business Hours. Each screen says what it sends before you send it.

When you send us a message

If you use Contact us, the app sends us:

the topic you chose and your message (at most 2000 characters);
your email address, which is required, because we answer by email;
the app's version and language;
if you tick "Include my purchase reference", your purchase record from Google Play (see "Your purchase"), so we can see your message next to any refund request.

We keep the topic, your message, your email address, the app's version and language and, from a purchase record, only the order number, the purchase token and the product. We use them to read and answer your message, and for nothing else. Our answer comes by email from office@weekendbunnies.com to the address you gave. We never add your address to a mailing list and never share it.

When you ask for a refund

Our refund promise: 14-day refund, no questions asked; one per Google account. That one is for Dashwall alone: a refund for one of our other apps does not count for it.

If you press Request a refund, the app sends us your purchase record from Google Play and the app's version. Nothing else: no name, no email address, no device identifier. A person approves each refund, normally within 2 working days, and the money comes back through Google Play.

Each time you open the Request a refund page, and once more after you send a request, the app sends the same purchase record to ask our server where a request for your purchase stands. The page says so under its button.

For a refund request we keep the order number, the purchase token and a fingerprint of it, the product, the app and its version, when the request was made and dealt with, its status, the reason if it was declined, and whether Google Play confirmed the purchase. We use this to check the purchase with Google Play and to handle your refund.

Your purchase

Payment is handled entirely by Google Play. We never see your card or bank details. When you buy premium, Google Play gives the app a purchase record: the order number, a purchase token, the product, the purchase time and its status, signed by Google. The app keeps it on your tablet, as described under "What the app keeps on your tablet", and sends it to us only with a message, if you choose to include it, or from the Request a refund page, as described above. We treat the order number and the purchase token as personal data. To check a purchase, and whether it was refunded, our server sends the purchase token to Google Play.

How we keep out fake requests

Every request to us carries a one-time token from Google Play Integrity. With it, Google confirms to us that the request came from the genuine Dashwall app from Google Play, on a real device, and that it was not altered on the way. To make the token, Google Play checks the app and your device, under Google's privacy policy, and our server sends the token to Google to read it. We delete the token at once if a refund is declined, otherwise as soon as it has been used, and in any case after 14 days at most.

To stop the same refund being claimed twice, we ask Google Play, when a refund is completed, to set a flag for this device that says "a refund for Dashwall has been given here". Google keeps that flag for us for up to 3 years after the app was last used on the device; it survives a factory reset. We keep no device identifier ourselves. If a later refund request comes from a device with that flag, it is declined automatically. See "Automated decisions".

With every request

Like any connection on the internet, a request to us shows your IP address to Cloudflare, which carries the connection, and to our server. Our server does not keep IP addresses in its logs, and deletes its logs after 14 days.

Automated decisions

A refund request from a device that already had a refund for Dashwall is declined automatically, based on the flag described above. You have the right to have a person look at that decision: contact us, explain your situation (for example, if you bought the tablet second-hand), and a person will review it.

No other decisions about you are made automatically, and we do not build profiles.

Why we may use it (the legal basis)

Handling a refund you asked for, and checking your purchase: to perform our agreement with you (GDPR article 6(1)(b)).
Answering a message you sent: to take the steps you asked for, and our legitimate interest in helping the people who use the app (GDPR article 6(1)(b) and (f)).
Keeping out fake requests and repeat refunds: our legitimate interest in preventing fraud and abuse (GDPR article 6(1)(f)).
Keeping records of purchases, refunds and messages about them: our legal obligations, such as the Dutch tax law duty to keep records (GDPR article 6(1)(c)).

What the app keeps on your tablet and exchanges with your own Home Assistant never reaches us, so we do not process it.

Where we rely on our legitimate interest, you may object; see "Your rights".

Who processes it for us

Google (Google Play, Google Play Integrity and the Google Play Developer API): to confirm that requests are genuine, to check purchases and refunds, and to keep the refund flag described above. Google's privacy policy: policies.google.com/privacy
Cloudflare: carries the connection between the app and our server and protects the server from attacks. To do that it decrypts the connection, so it can see the request, including your IP address.
Leaseweb, from which we rent our server, in the Netherlands.
Microsoft (Microsoft 365): delivers our email, including our answers to you.

These companies process the data on our behalf, under a data processing agreement.

Outside the European Economic Area

Google, Cloudflare and Microsoft may process data outside the European Economic Area (EEA), including in the United States. Where they do, the transfer is protected by the EU-US Data Privacy Framework, for companies certified under it, or by the European Commission's standard contractual clauses.

Backups and moving to a new tablet

Nothing is backed up. Android's backup to your Google account includes nothing from this app.
Nothing is transferred. If you copy your old tablet to a new one, by cable or directly between the devices, nothing from this app is copied either. On a new tablet you set up the dashboard again and add it in Home Assistant again. Premium itself comes back from Google Play.

The settings are encrypted with a key that exists only on the tablet, so a copy would be of no use elsewhere.

Deleting your information

"Log out of the dashboard" in the settings deletes Home Assistant's login, cookies and stored data from the app. "Forget paired Home Assistant servers" deletes the keys' fingerprints, so those servers can no longer reach the tablet. Your Home Assistant user name and password are deleted when you clear those fields and save.
To delete everything the app keeps, clear its storage in Android's settings for the app, under Storage, or uninstall the app. Uninstalling removes everything the app stored on your tablet.
What your Home Assistant keeps about the tablet, such as the history of its sensors, is kept by your Home Assistant: remove the device there.
To have what we keep on our server deleted, write to us; see "Your rights".

Children

Dashwall is made for adults who set up a tablet for their own Home Assistant, and is not directed at children. We do not knowingly receive information from children.

Your rights

Under the GDPR you have the right to see the personal data we hold about you and get a copy, to have it corrected or deleted, to have its use limited, to take it elsewhere, and to object to how we use it.

Everything the app keeps on your tablet is under your control, so you can see, change and delete it yourself. We hold information about you only if you sent us a message or a refund request, or emailed us. You can ask us for a copy of it, or ask us to delete it: we delete it, unless the law makes us keep it for a set time, such as purchase and refund records under Dutch tax law, and then we tell you which and for how long. Because we keep no account and no name, we may ask for your purchase's order number or the email address you used, to find your data. Write to office@weekendbunnies.com and we answer within two weeks.

You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl). If you live or work in another country of the European Union or the European Economic Area, such as Iceland, you may also complain to the authority there. In the United Kingdom you have the same rights under the UK GDPR, and you may complain to the Information Commissioner's Office (ico.org.uk).

Changes to this policy

This version is dated 24 October 2026. If we change this policy, the new version appears on this page with a new date. If a change means the app sends something it did not send before, the app tells you before it does.