Privacy Policy
Last updated: 19 August 2026
This policy explains what Sentral Labs ("Sentral", "we") collects when you use the
Sentral app and the Sentral service, why we collect it, who it is shared with, and
how to have it deleted. It applies to the mobile app, our backend, and the Sentral
integration for Google Home.
What we collect
- Account details. Your email address, display name, and password (stored only as a cryptographic hash).
- Home and device data. The rooms in your home and the devices in it — names, types, and settings — together with their current state, such as whether a light is on or how far a curtain is open.
- Commands. The instructions you issue, whether typed, spoken, or sent from Google, and their result.
- Vendor connections. Access tokens for the device platforms you connect, so we can operate your hardware. Tokens are stored encrypted and are never shown to other users.
- Technical logs. App version, device model, IP address, and error diagnostics, kept for reliability and abuse prevention.
We do not sell personal data, and we do not use your data for advertising.
Google user data
If you link Sentral to Google Home, Google gives us an identifier for the linked
account and permission to act on your behalf for smart-home requests. We use it for
one purpose: to answer Google's device queries and carry out the commands you give
the Assistant.
- We send Google the list of devices in your home — names, rooms, and types — so they appear in the Google Home app.
- We send Google device state (for example "open", "24°C") when Google asks for it, or when the state changes.
- We do not use Google user data to train generalised artificial-intelligence or machine-learning models.
- We do not transfer Google user data to third parties except as described under "Who we share with" below.
- Unlinking Sentral in the Google Home app ends this access immediately, and we delete the linked-account tokens.
How we use it
- To operate your devices and show their state.
- To interpret instructions and run the automations you set up.
- To keep your account secure, diagnose faults, and support you when you ask for help.
- To meet legal obligations.
Who we share with
- Google — device names, rooms, types, and state, only when your account is linked to Google Home.
- Device manufacturers and their platforms — the commands required to operate the hardware you connected.
- Infrastructure providers that host our servers and databases, under contract, for hosting only.
- Your installer or distributor, if your system was set up for you, and only for the home they installed.
- Authorities, where the law requires it.
Where it is kept, and for how long
Data is stored on servers in the European Union. Account and home data is kept while
your account is active. Technical logs are kept for up to 90 days. When an account is
deleted, its data is removed from live systems within 30 days and from backups within
a further 90 days.
Security
Traffic is encrypted in transit with TLS. Passwords are hashed, vendor tokens are
encrypted at rest, and access to production systems is limited to named staff. No
system is perfectly secure, but we treat a breach affecting your data as an incident
to be reported to you and to the relevant regulator.
Your rights
You may ask us for a copy of your data, ask us to correct it, or ask us to delete your
account and everything in it. Write to
ops@sentragate.com from the address on the
account and we will respond within 30 days. You can also unlink Google Home or
disconnect any vendor account at any time from within the app.
Children
Sentral is not directed at children under 16, and we do not knowingly create accounts
for them. If you believe a child has an account, contact us and we will remove it.
Changes
If this policy changes materially we will update the date above and notify you in the
app before the change takes effect.
Contact
Sentral Labs — ops@sentragate.com