Privacy Policy
Slatly is a watchOS + iOS app that controls Somfy exterior venetian blinds over the official Somfy / Overkiz cloud API. This policy explains what data Slatly handles, where it lives, and what we do (and don't do) with it.
The short version
- The Slatly app collects no analytics, no tracking, no advertising identifiers. The marketing website you are reading uses Microsoft Clarity for anonymous visitor analytics — see below.
- Slatly does not operate any backend server. The only network calls go directly from your device to Somfy's official OAuth and device-control endpoints.
- Your Somfy / TaHoma credentials are stored locally in iCloud Keychain (Apple-managed, end-to-end encrypted under your Apple ID). They are never sent to us.
- We have no servers, no logs, no database. There is nothing for us to collect even if we wanted to.
What data Slatly uses
- Somfy account credentials (email + password) — entered by you in the iOS app, stored in iCloud Keychain so they sync to your Apple Watch. Used solely to obtain OAuth tokens from Somfy's official endpoint.
- Blind device list + state — fetched on demand from Somfy's API. Cached only in memory while the app is running.
- Scenes you create (named presets of closure + tilt per blind) — stored in iCloud Keychain so they sync across your devices.
- Per-blind preferences (custom name, slat colour, "My" position override) — stored locally in UserDefaults on each device.
Where the data goes
- Somfy / Overkiz (somfy.com) — OAuth login + REST API calls to read and command your blinds. Subject to Somfy's own privacy policy.
- Apple iCloud Keychain — credentials + scenes, end-to-end encrypted by Apple, accessible only on devices you sign in to with your Apple ID.
- Apple WatchConnectivity — when both your iPhone and paired Apple Watch are reachable, scenes are pushed via WatchConnectivity for immediate sync. Apple-managed channel between your own devices.
Nothing leaves these channels. There is no Slatly server.
Permissions Slatly requests
- Network access — to talk to Somfy's cloud API.
- iCloud Keychain — to store credentials + scenes for cross-device sync.
Slatly does not request access to contacts, photos, location, microphone, camera, or any other system service.
This marketing website
The Slatly app itself has no analytics. The marketing website you are reading at slatly.punkhive.com uses Microsoft Clarity for anonymous visitor analytics (page views, click heatmaps, anonymised session recordings). Clarity does not collect personally identifiable information, does not set advertising cookies, and is GDPR-compliant. Data is processed by Microsoft under their privacy statement. You can opt out of Microsoft Clarity tracking globally via your browser's Do-Not-Track signal or via Clarity's cookie consent docs.
Children
Slatly is not directed at children and does not knowingly collect any information from anyone.
Open source
Slatly is open source. The full source code is published at github.com/martinjanicek/slatly so you can verify the claims in this policy.
Contact
For privacy questions, contact contact@punkhive.com.
Changes
If this policy changes materially, the "Last updated" date above will change and a notice will appear on the Slatly homepage.