Privacy Policy — Haba Casa

1. Who We Are

Haba Casa is a product of Edge-AI LTD, a company registered in England and Wales. We provide AI-native environment management software that runs locally on your premises.

2. Our Core Principle: Your Data Stays With You

Haba Casa is designed with privacy at its foundation. All data processing occurs locally on your own hardware. Your personal data, sensor readings, camera feeds, and automation logs never leave your building unless you explicitly choose otherwise.

3. What Data We Process

When you use Haba Casa, the following data may be processed locally on your device:

• Environmental sensor data (temperature, humidity, air quality)
• Camera feeds and motion events
• Smart device states (lights, heating, locks)
• Voice commands (processed locally)
• Automation schedules and preferences
• User account credentials for connected services

4. Third-Party Service Integrations

Haba Casa connects to third-party services (such as Google Nest, Home Assistant, and smart device APIs) solely to control your devices on your behalf. When connecting these services:

• We use industry-standard OAuth 2.0 authentication
• Credentials are stored locally on your device, encrypted at rest
• API calls are made directly from your device to the service provider
• We do not act as an intermediary or store your data on external servers

5. What We Do NOT Do

• We do not sell, share, or transfer your personal data to third parties
• We do not store your data on cloud servers
• We do not use your data for advertising or profiling
• We do not collect analytics or telemetry without your explicit consent

6. Swarm Intelligence (Optional)

Haba Casa offers an optional swarm learning feature. If you opt in, anonymised and aggregated performance data (e.g. "heating pattern X is 15% more efficient") may be shared across the network to improve all installations. No personally identifiable information or raw data is ever included. This feature is disabled by default and requires explicit opt-in.

7. Data Retention

All data is stored locally on your device. You have full control over retention periods through your Haba Casa dashboard. You may delete any or all data at any time.

8. Your Rights

Under UK GDPR and the Data Protection Act 2018, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data
• Restrict processing
• Data portability
• Object to processing

Since all data resides on your own hardware, you can exercise these rights directly through the Haba Casa dashboard or by contacting us.

9. Security

• All local data is encrypted at rest
• API communications use TLS encryption
• Authentication tokens are securely stored and automatically rotated
• No remote access to your system without your explicit configuration

10. Children's Privacy

Haba Casa does not knowingly collect data from children under 13. The system processes household environment data regardless of occupant age, but does not profile individual users.

11. Changes to This Policy

We may update this policy from time to time. Changes will be communicated through the Haba Casa dashboard and on our website.