Privacy
Theatrium doesn't collect your data
Theatrium is a dashboard that runs on your Apple TV, Google TV or Android tablet and talks to your own smart-home system. There is no Theatrium account, no Theatrium server holding your information, and no analytics or tracking software of any kind.
Last updated 13 October 2026 · Applies to Theatrium for Apple TV, the Theatrium iPhone and iPad app, and Theatrium for Google TV and Android tablets
The short version. We have no servers that receive your data. Your home details, camera images and settings stay on your Apple TV, Google TV or Android tablet and on the systems you connect it to and, if iCloud Sync is on, in your own iCloud account. Nothing you do in the app is logged, profiled, or sold. The one exception: if you have turned on Apple's Share with App Developers analytics, Apple may send us anonymous crash reports so we can fix bugs — that comes from Apple, is not linked to you, and you can switch it off in your device's own Analytics settings. On Android, Google can likewise send anonymous crash and not-responding reports if you have turned on its diagnostics sharing.
What stays on your Apple TV
Everything you set up in Theatrium is stored on the device itself: which dashboard theme you use, which cards are on screen, your Home Assistant address and access token, and any music or vehicle service you connect. Access tokens and passwords are held in the Apple Keychain, not in ordinary app storage. The one exception is the Spotify sign-in described below, which is kept as a file in the app's own storage on the device.
iCloud Sync (Settings ▸ Connections) is on by default on new installs and off on older installs until you turn it on. While it is on, your Theatrium settings are copied through your own iCloud account so your other Apple TVs match and a replacement Apple TV can restore them. That includes your themes and cards, your connection address, your reminders lists and your Countdown events, including the name and date of any birthday you added from Contacts. That data goes to Apple, not to us, and it is covered by Apple's privacy terms. Turning the setting off stops it.
Your smart home
When you connect Home Assistant, Theatrium talks directly to the address you enter — normally a server in your own house. Camera images, sensor readings and notifications travel between your Apple TV and that server, and nowhere else. The same is true in Apple Home mode, where Theatrium reads your home through Apple's own HomeKit framework on the device.
Camera snapshots that appear with a motion alert are created by your Home Assistant, saved on your server, and fetched from it. Theatrium never uploads a camera image anywhere.
Contacts, for birthday countdowns
In the Theatrium iPhone app, Add a Birthday from Contacts opens Apple's own contact picker, and only the person you choose is shared with Theatrium. In the rare case the picker cannot pass on that person's birthday, the app asks for access to your Contacts at that moment, for that purpose only. Theatrium keeps that person's name, birthday and an internal reference on your iPhone, and sends them over your home network to Theatrium on your Apple TV, the same way the app already sends reminders and photos. If iCloud Sync is on, your countdown list is also saved to your own iCloud account with your other Theatrium settings, so a replacement Apple TV can restore it. None of this reaches us or any server of ours, and none of it is shared with anyone else. Delete the countdown in the iPhone app and it is removed from your Apple TV.
Spotify
If you choose Spotify as your music source, you pick your Apple TV as a speaker in the Spotify app on your phone, and the Spotify app passes the sign-in to Theatrium on your Apple TV over your home network. Theatrium never sees your Spotify password. Your Apple TV keeps that sign-in on the device only: it is not copied to iCloud, and tvOS may clear it, in which case you pick your Apple TV in the Spotify app again. Music, track details and artwork come from Spotify to your Apple TV under Spotify's own privacy policy. Nothing about your listening is sent to us.
Services the app can contact
Some cards fetch public information from the internet. Only what those services need is sent, and no account or device identifier goes with it.
| Feature | Service | What is sent |
|---|---|---|
| Weather and air quality | Open-Meteo | An approximate location. Where you haven't set one, it is estimated once from your internet address using an IP-lookup service. |
| Rain radar | RainViewer | Map tile requests for the area shown. |
| Public webcams | Windy | A request for the webcam being displayed. |
| News headlines | Public news feeds (BBC, NPR, Guardian, ABC and similar) | A request for the feed. |
| Markets and crypto | CoinGecko and market data providers | The symbols shown on the card. |
| Track tempo | GetSongBPM | The artist and title of the track playing, to look up its tempo. |
| Music services | Last.fm, Spotify, Plex, Apple Music | Only if you connect one. For Last.fm, Plex and Apple Music, sign-in happens with that service and Theatrium reads what is playing. For Spotify, see the Spotify section above. |
| Vehicle (optional) | Tessie | Only if you enter a Tessie token. Used to read your car's charge, range and status. |
| Purchases | Apple | Theatrium Pro is bought through the App Store. Apple handles payment; we never see your payment details. |
Each of these services has its own privacy policy, and we have no control over it. Cards you don't use make no requests.
Theatrium on Google TV and Android tablets
Theatrium for Android works the same way as the Apple TV app: there is no Theatrium account and no Theatrium server that receives your information. This section covers what is different on Android.
What stays on your device. Your dashboard layout, theme, settings, Home Assistant address and any connection you set up are stored on the TV or tablet. Access tokens and passwords, including your Home Assistant token and any Plex, Tessie or Synology details, are encrypted with a key held in Android's secure storage. Theatrium turns off Android backup, so none of this is copied to Google Drive or to a new device. A new device starts fresh.
Home Assistant. Theatrium talks directly to the address you enter, normally a server in your own house. Camera images, sensor readings and commands travel between your device and that server, and nowhere else. Many Home Assistant servers use plain http on the home network, so Theatrium permits it for the servers you connect it to.
Google Home. If you choose Google Home, Theatrium reads and controls your home through Google's Home APIs. Google asks for your permission on screen. Your devices, camera views and commands travel between your device and Google under Google's privacy policy; they do not pass through us. Camera live view is a direct video stream to your screen, and Theatrium never uploads a camera image anywhere.
What is playing on this device. To show what another app on this TV or tablet is playing, Theatrium asks for notification access. Android requires it before an app may read the media details of other apps. Theatrium reads only the now-playing details on the device: title, artist, album, artwork, and whether and where the track is playing, so it can show progress and send play, pause and skip back. It does not read the content of your notifications. You can switch this off in Android's settings at any time. To find a track's tempo and cover art, the title and artist are sent to GetSongBPM and to the iTunes Search service.
Spotify. If you choose Spotify as a music source, this TV or tablet appears as a speaker in the Spotify app. You pick it there, and Spotify's app hands over your sign-in, so Theatrium never sees your Spotify password. The sign-in is saved in Theatrium's private storage on the device so the speaker is ready next time. Music streams from Spotify to your device, and Theatrium shows the title, artist and artwork. Spotify Premium is required. While Spotify is selected, Android shows a small “Spotify is available” notice, and Theatrium asks to post notifications once, when you first choose Spotify. Declining only hides the notice.
Last.fm and Plex. Only if you connect them. Theatrium sends your Last.fm username to Last.fm to read what you are playing. Plex sign-in uses Plex's own link code flow, and Theatrium then talks to your Plex server.
Google user data. Theatrium's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
Your Google data stays on your device. Theatrium runs entirely on your own TV or tablet, and the app on your device is what reads your Google data. If you connect them, it reads your Google Home (your devices, their status, camera views, and the commands you send). It also shows your Google account's email address in Settings.
How we protect it. We use encryption to protect your information. Every request between your device and Google travels over an encrypted HTTPS connection. Theatrium keeps no copy of your Google data on any server and holds no Google access token, so there is nothing stored with us that could be read, lost or leaked. On your device, what Theatrium saves sits in the app's private storage, which other apps cannot read, and Android backup is turned off. Access tokens and passwords for the other services you connect are encrypted with a key held in Android's secure storage. Security procedures are in place to protect the confidentiality of your data, and the main one is that your data only ever travels between your device and Google.
We cannot see it. That information goes directly between your device and Google, over encrypted connections. It never passes through a server of ours, because Theatrium has no server that receives user data. No one at Theatrium, including its developers, can access, view or retrieve it in any way. Theatrium has no account system and no analytics or crash-reporting software that could carry it to us.
What is kept on your device. Theatrium keeps no Google access token; Google Play services supplies one when it is needed. Task content and Google Home data are held in memory to draw your dashboard and are not saved to storage. The only things saved are that you are connected, the account's email address, and the lists and devices you chose for your cards. Android backup is turned off, so none of this is copied to Google Drive or to another device.
Your control. We do not sell or share this data, or use it for advertising. Earlier versions could show a Google Tasks list in the To-Do card. That feature has been removed, and updating deletes any saved Google Tasks connection from the device. You can remove Theatrium's Google permissions at any time at myaccount.google.com/permissions.
Services the Android app can contact. Some cards fetch public information. Only what the service needs is sent, and no account or device identifier goes with it. Cards you don't use make no requests.
| Feature | Service | What is sent |
|---|---|---|
| Weather, air quality, sun | Open-Meteo | An approximate location. Where you haven't set one, it is estimated once from your internet address by an IP-lookup service (ipwho.is, GeoJS or ipapi.co). |
| Typing a place name | OpenStreetMap Nominatim | The place name you type. |
| Commute and traffic | HERE | The home and work addresses you enter, and the route between them, to give a travel time with traffic. |
| Rain radar | RainViewer | Map tile requests for the area shown. |
| Public webcams | Windy | A request for webcams in the category shown. |
| News and sports headlines | Public news feeds (BBC, NPR, Guardian, ABC and similar) | A request for the feed. |
| Bluesky | Bluesky public service | The public account name you choose. |
| Markets and crypto | Yahoo Finance and CoinGecko | The symbols shown on the card. |
| Art card and screensaver | Public museum collections (Cleveland Museum of Art, Art Institute of Chicago, The Met, National Gallery of Art, Rijksmuseum, Yale Center for British Art) and Wikimedia Commons | A request for artwork images and their details. |
| Track tempo and cover art | GetSongBPM and iTunes Search | The artist and title of the track playing. |
| Music services | Last.fm, Spotify, Plex | Only if you connect one. |
| Vehicle (optional) | Tessie and Tesla | Only if you enter a Tessie token. Tessie is asked for your car's charge, range and status. Tesla's image service is asked for a picture matching the car's model and paint colour. |
| Live video links | YouTube | Only if you enter a YouTube live link. Theatrium loads that page to play the stream. |
| Network speed card | Cloudflare | A speed-test download. |
| Relaxing Video | theatrium.info | A download request for the video clip. |
| Pro purchase | Google Play | Theatrium Pro is bought through Google Play. Google handles payment, and we never see your payment details. |
Each of these services has its own privacy policy, and we have no control over it.
Software built into the Android app. The Android app includes these third-party components. Each runs inside the app on your device.
- Google Play Billing handles the Theatrium Pro purchase and restores it on a new device.
- Google Home APIs (through Google Play services) connect to Google Home when you choose it.
- The Spotify receiver, built on the open-source librespot project, lets this device play Spotify when you pick it.
- LibVLC and ExoPlayer (Android Media3) play camera streams, live video and Plex films.
- WebRTC carries the live camera view from Google Home.
- Standard open-source Android libraries for the screens, network requests, background work and QR codes.
None of them is an analytics or advertising tool, and Theatrium sets no advertising identifier. Google Play services and Google Play Billing are Google's own software and report to Google under Google's privacy policy.
Permissions. Theatrium asks for internet access, a notification permission when you first choose Spotify, optional notification access to read what other apps are playing, and the standard Android permissions to buy Theatrium Pro, run a media service, publish the home screen row and discover Home Assistant on your network. It never asks for your location, camera, microphone, contacts, calendar or files. When you add photos from the tablet, you choose them in Android's own picker and Theatrium keeps private copies on the device. The Android home screen row can show what is playing; that stays on the device.
Deleting your data on Android. The steps are also on the Delete your data page. Settings ▸ About ▸ Start Fresh clears Theatrium's setup on that device: your layout, settings, saved connections and the access tokens for Home Assistant, Plex, Tessie and Synology. From version 1.3.0 it also removes the saved Spotify sign-in Uninstalling the app removes everything else Theatrium stored on the device. You can also remove Theatrium's Google permissions at myaccount.google.com/permissions, and remove the Spotify speaker from the Spotify app. Anything held by a service you connected is deleted through that service.
What Theatrium never does
- No version of Theatrium has analytics, advertising or tracking software built in. The Apple TV app's only third-party component is the Spotify receiver, built on the open-source librespot project, which runs inside the app on your Apple TV and lets it play Spotify when you pick it. The Android app uses a small number, named in the Android section above, and none of them is an analytics or advertising tool. The only diagnostics we ever see are the anonymous crash reports Apple or Google provide when you have chosen to share diagnostics with developers, which you can turn off at any time in your device's own settings.
- No Theatrium account exists, so there is no profile, email list or usage history.
- Your Home Assistant address and token are never sent to us or to anyone else.
- Camera images and microphone audio are never uploaded by the app. Precise location is never collected; the weather card sends only an approximate location, as described above.
- Nothing is sold or shared with data brokers.
Children
Theatrium isn't directed at children and collects no personal information from anyone, including children.
Deleting your data
Because there is nothing held elsewhere, removing your data is entirely local: Settings ▸ About ▸ Start Fresh clears Theatrium's setup on that Apple TV and, if iCloud Sync was on, the copy in your iCloud account. Deleting the app removes the rest. Birthdays and other Countdown events are removed by deleting them in the iPhone app, and deleting the iPhone app removes its copy. Anything held by a service you connected — Home Assistant, Spotify, Tessie and so on — is deleted through that service.
Changes
If this policy changes, the date at the top changes with it, and material changes will be noted in the app's release notes.
Contact
Questions about privacy: hello@theatrium.info