Homelab Privacy Policy
Last updated: September 12, 2026
Homelab is a native, free, open-source Android application designed for monitoring and managing self-hosted infrastructure. Privacy, user sovereignty, and local control are foundational to this project. We do not operate a cloud infrastructure, we do not require accounts, and we never touch your data.
1. Zero Cloud Backend & No User Accounts
The application operates entirely as a local client. There is no Homelab-hosted server, database, or proxy. No account creation is required, and no user profiles are generated or maintained.
2. Data Stored Exclusively on Your Device
All information entered into the application—including server hostnames, IP addresses, ports, labels, API tokens, passwords, and custom preferences—is stored locally on your device.
- Hardware-Backed Secret Storage: Sensitive credentials (such as API keys and basic auth passwords) are encrypted using AES-256-GCM via the Android KeyStore (hardware-backed TEE / StrongBox).
- PIN & Biometric Protection: PIN codes are salted and hashed with PBKDF2-HMAC-SHA256. Biometric authentication remains within the secure enclave of your Android hardware.
- Screenshot Protection: Sensitive screens enforce Android’s
FLAG_SECUREto prevent background task snapshot capture.
3. Direct Network Connections
Homelab connects directly to the servers, IP addresses, and domain names that you explicitly configure. Traffic flows strictly between your Android device and your self-hosted services (via local Wi-Fi, WireGuard, Tailscale, or HTTPS reverse proxy). Homelab never routes, inspects, or logs your traffic.
4. Zero Telemetry, Analytics, or Advertising
Homelab does not contain:
- Any advertising SDKs or tracking pixels.
- Any crash-reporting telemetry services (e.g. Firebase Crashlytics).
- Any behavioral or analytics tracking tools.
- Any data brokering or monetized telemetry.
5. Backups & User Ownership
When you generate a backup from within Homelab, the exported file is stored directly on your phone's storage. Encrypted backups use industry-standard encryption requiring a password chosen by you. You have 100% control over the storage, transfer, and deletion of your backup files.
6. 100% Free Forever & Zero Donations
Homelab is released under the Apache License 2.0. The project does not sell software, does not feature in-app purchases, and does not accept or request donations.
7. Questions & Issues
If you have questions or concerns regarding privacy, security, or data handling in Homelab, you can inspect the full source code or open an issue on GitHub: