Who is responsible
Paul Kok is responsible for the data processing described here. Contact [email protected] for privacy questions or requests. We may need to verify that a request relates to your account or information before acting on it.
This policy covers the Digital Twin builder and its Homey widget. It does not replace the policies of Homey, a payment provider, or an AI service you choose to connect.
Your account & saved designs
The service stores account details such as your name, email address, account identifier, and access or licence status. Where password sign-in is used, a password hash is stored. Homey sign-in provides account information and authorisation tokens needed for the connection.
The backend stores the home designs you save, including rooms, floor layouts, furniture models, lights, device links, and published widget views. This information is used to provide the builder and deliver your chosen home view to your widget.
The Homey connection
Linked Homey identifiers, rooms, device names, capabilities, and relevant device states are processed to match your 3D scene to your home. Connection keys and authorisation tokens allow the service and widget to connect; Homey OAuth tokens are encrypted in backend storage.
The installed app currently requests Homey’s broad API permission. The widget is implemented to read and display device states rather than send device control commands; the permission itself is broader than read-only access.
Published home data and last known device states may be cached on Homey so the widget can keep displaying the saved house during a backend interruption. Removing a widget is not the same as deleting your backend account or saved projects.
Services you choose to use
Homey/Athom processes information for authentication and connected-home services under its own policies. If paid checkout is enabled and you use it, Stripe processes payment details; Digital Twin receives billing identifiers and licence or subscription status, rather than your full card details. See Stripe’s privacy policy.
If you connect an AI agent through MCP, that agent may read or modify project information within the permissions you give it. Images and messages you send to that agent are handled by its provider. Only connect a service you trust and review its privacy terms before sharing home plans or photos.
Email and infrastructure providers process the information needed to deliver and secure the service. Providers may process data outside your country.
Sessions, diagnostics & retention
The builder uses session cookies for sign-in and may use local browser storage for interface or project state. These support the service rather than advertising on this portfolio.
The application’s diagnostic store records a limited set of event types, error reasons, status codes, counts, and timestamps. It retains events for up to 30 days, subject to a maximum of 50,000 grouped entries. That diagnostic store excludes email addresses, IP addresses, message contents, house names, device details, and credentials. Hosting and network infrastructure may maintain separate operational logs.
Saved accounts and home designs are kept to provide the service until removed through available controls or a verified deletion request. Licence expiry does not itself delete your saved house. Some billing, security, or backup records may need to be retained for applicable obligations.
Why information is used
We use account, design, and connection data to provide the services you request; licence and billing data to manage access and purchases; and limited diagnostic data to maintain security and resolve failures. Where applicable, these purposes rely on providing the service, legal obligations, or legitimate interests. Optional processing that legally requires consent relies on that consent.
Your data & requests
Depending on applicable law, you may request access to your personal data, correction, deletion, restriction, or a portable copy, and object to certain processing. Where processing relies on consent, you can withdraw that consent. You may also complain to your local data protection authority.
Email [email protected] with your request. Please do not include passwords, payment card details, or connection keys.
To request account or project deletion, email from the address associated with your Digital Twin account and identify the data you want removed. You can also disconnect access using the controls available in Homey and any connected AI service. Revoking access does not automatically delete a previously saved copy of your home.
Changes & questions
The date above will change when this policy is updated. Contact Paul Kok for questions about your account, a particular connection, or the handling of your home design.