Privacy Policy — JAP Home
JAP Home is a private application that lets its users monitor their solar installation and control their smart switches. This policy explains what data the app handles, why, who processes it, and how you can have it removed. The app is published by Johnny Barakat, an independent developer ("I", "me"), who is the person responsible for the data described below.
Data the app collects
| Data | Why it is needed | Where it is kept |
|---|---|---|
| Email address and password | To create your account and sign you in. Access to the app is restricted to accounts that are issued to you. | Google Firebase Authentication. I never see or store your password; Firebase keeps it in hashed form. |
| Push notification token (a device identifier issued by Google) | So system alerts about your installation can reach your device. In the browser version the user-agent string and the date the token was created are recorded alongside it, so expired tokens can be cleaned up. | Google Firebase Cloud Messaging and Firebase Realtime Database. |
| Readings from your solar installation — production, household load, grid flow, battery state of charge and the other inverter parameters | To display your live dashboard and your alert history. | Firebase Realtime Database, linked to your account. |
| The state of your smart switches, and their power metering | To show each device and to carry out the on/off commands you tap. | Held by the eWeLink / CoolKit platform that operates the switches; the app reads it live and keeps no copy of its own. |
| Your alert history | So you can review, search and delete past notifications. | Firebase Realtime Database. Deleting an alert in the app deletes it there. |
| A sign-in token stored on your device | So you stay signed in between sessions. | Local storage on your own device only. It is erased when you sign out. |
What the app does not collect
- No analytics or crash-reporting service is built into the app, and no usage profile is compiled about you.
- No advertising identifier, and no advertising of any kind.
- No location data, contacts, calendar, photos, camera, microphone, call logs or SMS. The app requests only internet access and, on Android 13 and later, your permission to show notifications.
- No payment or financial information.
Who else processes your data
I do not sell your data and I do not share it for advertising. It is handled only by the service providers the app depends on, and only so that the app can work:
- Google (Firebase Authentication, Realtime Database, Cloud Messaging and Hosting) — accounts, live data storage, and delivery of push notifications. See the Firebase privacy documentation.
- eWeLink / Shenzhen CoolKit Technology — the platform that operates your smart switches. Commands and device status pass through their API, which is outside my control and governed by their own privacy terms.
- corsproxy.io — a relay that the browser version of the app has to route eWeLink requests through, for technical reasons imposed by web browsers. It forwards those device requests only, and is never sent your account password.
Because these providers operate globally, your data may be processed on servers outside your own country.
How your data is protected
- All traffic between the app and the services it uses is encrypted in transit (HTTPS).
- Your data is readable only by your own signed-in account, enforced by Firebase security rules on the server rather than by the app alone.
- Signing out clears the session and the locally stored token, and unsubscribes the device from alerts.
How long data is kept
Account details and installation data are kept for as long as your account is active. Notification tokens are removed when you sign out, or when Google reports them as expired. Alerts you delete in the app are removed immediately.
Your rights, and deleting your account
You can ask me to show you the data held about you, to correct it, or to delete it — including deleting your account entirely, which removes your sign-in details and your alert history. Write to jb.johnny.barakat@gmail.com from the email address on the account and I will act on the request within 30 days. Depending on where you live you may also have rights under the GDPR or comparable laws, including the right to complain to your data protection authority.
Children
JAP Home is a tool for the owner of a solar installation and is not directed at children. I do not knowingly collect data from anyone under 16.
Changes to this policy
If this policy changes the date at the top of this page will be updated, and for significant changes you will also be notified in the app.
Contact
Johnny Barakat — jb.johnny.barakat@gmail.com