Last Updated: [INSERT DATE]
This Privacy Policy explains how qLabs LLC, a Washington limited liability company doing business as Homeway.io (“Homeway,” “we,” “us,” or “our”), collects, uses, discloses, stores, and protects information when you use Homeway.io, the Homeway add-on, Homeway cloud relay services, Homeway Sage, Homeway MCP features, Supporter Perks, referral programs, websites, software, APIs, documentation, and related services (collectively, the “Services”).
qLabs LLC is registered in Washington, United States. Our mailing address is:
qLabs LLC
13110 NE 177th Pl, #1074
Woodinville, WA 98072
United States
By using the Services, you acknowledge that you have read this Privacy Policy. If you do not want information collected, used, disclosed, or processed as described in this Privacy Policy, do not use the Services.
Homeway is designed to collect only the information reasonably needed to provide, secure, operate, support, bill for, and improve the Services. We do not sell your personal information for money. We do not intentionally use your private Home Assistant data, Sage chat content, voice data, MCP tool data, or smart-home data to build advertising profiles.
Sage stores chat history so that the assistant can provide conversation history, continuity, and related product features. Homeway does not intentionally store Sage audio recordings, speech-to-text audio streams, or text-to-speech audio after the processing needed to provide the feature is complete, unless you separately provide that information to us for support, debugging, legal compliance, abuse investigation, or another purpose.
Most AI services used by Homeway receive data under API, enterprise, commercial, or similar no-training terms where available. However, each third-party provider processes data under its own terms, data-processing terms, retention rules, and privacy policy. Homeway does not control third-party providers.
No internet-connected service can be guaranteed to be private or secure. Homeway may process sensitive information depending on how you configure your Home Assistant instance, Sage, MCP features, voice features, integrations, devices, entities, automations, and connected third-party services. You are responsible for what you choose to connect, expose, transmit, or ask Homeway or third-party providers to process.
We may collect the following categories of information, depending on how you use the Services:
Homeway does not intentionally collect camera images, microphone recordings, precise presence-location sensor data, lock state, garage-door state, alarm or security system state, health-related sensor data, or energy-usage data as standalone product features unless you enable a feature, integration, support workflow, Sage request, MCP tool, automation, exposed entity, or connected service that sends that information through Homeway.
However, Home Assistant environments can contain highly personal information, including device names, room names, schedules, presence information, sensor states, appliance status, lock status, garage-door status, climate data, energy use, automation history, and other information that may reveal household routines, occupancy, sleep patterns, health-related routines, security habits, or other sensitive details.
The specific information Homeway can access depends on your configuration, enabled features, permissions, exposed entities, integrations, Sage requests, MCP tools, and connected third-party services. You are responsible for deciding what to connect, expose, transmit, or make available through the Services.
We may use information to:
If you use Homeway Sage, voice features, speech-to-text, text-to-speech, AI-chat features, or AI-assistant features, we may process and transmit information needed to provide those features. This may include your messages, prompts, assistant responses, Sage chat history, saved memories, audio streams, transcripts, tool calls, tool results, model selections, voice selections, speech settings, rough location derived from IP address, and smart-home context you choose to expose.
Sage stores chat history. Stored Sage chat history may include your messages, assistant responses, tool-call context, Home Assistant context you include or expose, and other information needed to provide conversation history and assistant features. You should not send Sage information that you do not want Homeway or connected AI providers to process.
Homeway does not intentionally store raw Sage audio recordings, speech-to-text audio streams, or text-to-speech audio after the processing needed to provide the feature is complete, unless you separately provide audio or related files to us for customer support, debugging, legal compliance, abuse investigation, or another purpose.
Depending on the feature, your information may be sent to third-party AI, speech, voice, search, weather, cloud, or infrastructure providers, including providers such as OpenAI, Anthropic, Google, Amazon/AWS, Microsoft Azure, Deepgram, ElevenLabs, Apple, Bing, or others we identify in this policy or in the product.
Most AI services used by Homeway receive data under API, enterprise, commercial, or similar terms that do not permit the provider to train its general models on your data, where those terms are available to Homeway. However, provider terms may vary by feature, model, region, integration, account type, and provider. Homeway does not control third-party AI, speech, voice, search, or weather providers, and their processing is governed by their own terms, privacy policies, data-processing terms, security practices, and retention practices.
If you do not use Sage, voice, speech, AI, or assistant features, Homeway does not intentionally send your Sage chat, voice, or assistant content to AI, speech, or voice providers for those features. However, ordinary hosting, logging, security, analytics, monitoring, support, or infrastructure providers may still process information as needed to operate the Services.
If you enable or use Homeway’s cloud MCP server, AI tool server, assistant bridge, automation bridge, or similar functionality, Homeway may process MCP configuration, exposed tools, exposed entities, tool descriptions, tool calls, tool-call results, permissions, authentication metadata, logs, assistant requests, connected application metadata, and Home Assistant data made available through those tools.
MCP features may allow AI systems, agents, assistants, applications, or third-party providers to read, control, modify, create, delete, or otherwise interact with your Home Assistant instance, integrations, devices, automations, scenes, scripts, configuration, connected services, and smart-home environment. Information sent through MCP features may be processed by Homeway and by the third-party AI provider, assistant, application, or service you connect.
You are responsible for deciding which tools, entities, data, integrations, and permissions to expose. Do not expose information through MCP features that you do not want Homeway, connected AI systems, connected applications, or third-party providers to process.
MCP tool calls and results may include sensitive Home Assistant or smart-home context depending on your configuration. You are responsible for reviewing the privacy practices of any AI provider, MCP client, assistant application, or third-party service you connect to the MCP features.
We may use cookies, local storage, pixels, analytics identifiers, session tokens, and similar technologies to operate the website, keep you signed in, remember preferences, secure accounts, understand usage, diagnose issues, and improve the Services.
Homeway currently does not provide a cookie consent banner. Because privacy and cookie laws vary by location, certain analytics or non-essential cookies may require consent, opt-out, or additional notice in some jurisdictions. We may add, remove, disable, or modify cookies, analytics tools, and consent controls over time to support legal compliance and user choice.
You can configure your browser to refuse, delete, or limit cookies. Some parts of the Services may not function correctly without cookies or similar technologies.
We may use analytics providers, such as Google Analytics or similar services, to understand website and product usage, improve the Services, detect issues, and measure performance. These providers may collect information such as IP address, device information, browser information, pages visited, events, and cookie or analytics identifiers.
We do not intentionally sell your personal information for money. We do not intentionally use private Home Assistant data, Sage chat content, voice content, MCP tool data, or smart-home device data for targeted advertising. If we ever use advertising technologies that are considered “selling,” “sharing,” or targeted advertising under applicable privacy laws, we will provide required notices and choices.
We may disclose information in the following circumstances:
Depending on how you use the Services, information may be processed by some or all of the following providers or categories of providers:
This list may change as we add, remove, or replace providers. We will update this Privacy Policy when material provider categories change.
We keep information for as long as reasonably necessary to provide the Services, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, prevent abuse, maintain security, process payments, provide support, and operate our business.
Retention periods vary depending on the type of information and the reason it is used. For example:
If we anonymize or aggregate information so that it can no longer reasonably identify you, we may use and retain it for any lawful purpose.
You may request deletion of your account or certain personal information by using account deletion tools, contacting support through the website, or emailing support@homeway.io.
When your account is deleted, we will delete or de-identify personal information associated with your account unless we need to retain information for legitimate business, legal, tax, accounting, payment, fraud-prevention, security, dispute, backup, or compliance reasons. For example, we may retain limited records of subscription status, invoices, refunds, chargebacks, referral activity, abuse prevention, security events, or legal compliance.
Some information may remain in backups, logs, archives, or third-party provider systems for a limited period before deletion according to ordinary backup, security, retention, or provider processes.
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or opt-out of certain processing, sale, sharing, targeted advertising, or profiling. You may also have the right to appeal a decision we make about your request.
To exercise privacy rights, contact us at support@homeway.io or by mail at the address listed in this Privacy Policy. We may need to verify your identity before completing a request. We will respond as required by applicable law.
We do not discriminate against users for exercising privacy rights, but some Services may not function if required information is deleted or restricted.
If you are a California resident, California law may provide specific rights regarding personal information, including the right to know, access, correct, delete, and opt out of certain sharing or sale of personal information.
We do not intentionally sell personal information for money. We do not intentionally share private Home Assistant data, Sage chat content, voice content, MCP tool data, or smart-home device data for cross-context behavioral advertising. If our analytics or advertising practices are considered a “sale” or “sharing” under California law, we will provide required notices and opt-out mechanisms.
The categories of personal information we collect are described in the “Information We Collect” section. The purposes are described in “How We Use Information.” The categories of recipients are described in “When We Disclose Information” and “Third-Party Services We May Use.”
qLabs LLC is registered in Washington, United States. Homeway is not a healthcare provider, and the Services are not intended to provide medical care, diagnosis, treatment, health monitoring, emergency response, or healthcare services.
Homeway does not intentionally collect health-related sensor data or consumer health data as a standalone product feature. However, depending on how you configure your Home Assistant instance, devices, sensors, automations, Sage requests, MCP features, exposed entities, or connected integrations, information processed by Homeway could reveal or be used to infer health-related information, such as sleep routines, mobility patterns, disability-related automations, medication reminders, environmental preferences, medical-device-related automations, or other health-related routines.
Do not use Homeway to process consumer health data unless you are comfortable with that information being processed as described in this Privacy Policy and by any third-party providers you connect. If required by applicable law, we will provide additional notices, obtain consent, or limit processing of consumer health data.
If you believe Homeway has collected consumer health data about you and you wish to request access, deletion, withdrawal of consent, or another action, contact us at support@homeway.io or by mail at:
qLabs LLC
13110 NE 177th Pl, #1074
Woodinville, WA 98072
United States
The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact us at support@homeway.io, and we will take reasonable steps to delete it.
If you configure Homeway, Sage, MCP features, cameras, microphones, presence sensors, voice assistants, or smart-home devices in a household with children, you are responsible for obtaining any required consent and configuring your devices and integrations appropriately.
Homeway is operated from the United States and has users around the world. If you access the Services from outside the United States, your information may be collected, processed, stored, and transferred in the United States and other countries where Homeway or its service providers operate. These countries may have privacy, data-protection, and government-access laws different from those in your jurisdiction.
Where required by applicable law, we rely on recognized legal bases or transfer mechanisms for international processing and transfers, such as performance of a contract, legitimate interests, consent, legal obligations, standard contractual clauses, data-processing agreements, or other lawful mechanisms.
If you are located in the European Economic Area, United Kingdom, Switzerland, Brazil, Canada, Australia, or another region with specific privacy requirements, you may have additional rights under local law. You can contact us at support@homeway.io to exercise privacy rights or ask questions.
We use reasonable administrative, technical, and organizational measures designed to protect information. However, no method of transmission, processing, storage, authentication, remote access, cloud hosting, AI processing, or smart-home integration is completely secure. We cannot guarantee absolute security.
You are responsible for securing your account, email account, identity-provider account, Home Assistant instance, devices, integrations, local network, passwords, tokens, API keys, exposed entities, MCP permissions, and connected third-party services.
The Services may link to or integrate with third-party websites, applications, providers, models, assistants, voice services, cloud services, payment services, and smart-home platforms. We do not control third-party services and are not responsible for their content, terms, privacy policies, security practices, data retention, or processing activities.
We may access, preserve, or disclose information if we believe it is reasonably necessary to comply with law, legal process, subpoenas, court orders, law enforcement requests, security investigations, fraud prevention, abuse prevention, payment disputes, enforcement of our Terms of Service, or protection of the rights, safety, property, or security of Homeway, users, third parties, or the public.
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new “Last Updated” date. If we make material changes, we will use reasonable efforts to notify you, such as through the website, email, or account notice. Your continued use of the Services after the updated Privacy Policy becomes effective means you acknowledge the updated policy.
If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact us at:
Email: support@homeway.io
Mail:
qLabs LLC
13110 NE 177th Pl, #1074
Woodinville, WA 98072
United States