Skip to content

Privacy statement

Which personal data instnt processes through instnthub.com and the instnt hub app, why, and what your rights are. In short: the app sends nothing to instnt, and the website only measures through Google with your consent. In case of differences, the Dutch text prevails.
Last updated October 22, 2026 · instnt · Stratingplantsoen 1-B, 1951 EP Velsen-Noord · KvK 59580577

Controller

instnt is the controller within the meaning of the General Data Protection Regulation (GDPR) for the processing of personal data through this website, instnthub.com, and through the instnt hub app. Questions about this privacy statement may be addressed to privacy@instnt.nl.

Signing up for the beta and the mailing

You can sign up for the instnt hub beta via TestFlight, for the mailing, or for both. instnt processes your email address, your choice and, if you fill them in, which devices and services you use at home and what you currently use as controls or display. A request is sent to instnt by email and used to invite you; the legal basis is your request (Article 6(1)(b) GDPR). instnt processes the sign-up in its own system, which passes your email address on to Apple (TestFlight in App Store Connect) for the invitation; Apple sends you the invitation. Afterwards that system only keeps that the invitation was sent, not your email address. If the invitation does not go through right away, it keeps your email address encrypted for at most 24 hours to try again; if it still does not go through, the team receives it by email to invite you by hand.

If you choose the mailing, your email address, together with the devices and services you entered, is passed on to Kit (Kit Inc., United States), the service instnt uses to send the mailing. The legal basis is your consent (Article 6(1)(a) GDPR). You can unsubscribe at any time via the link below every email. Kit may process data outside the European Economic Area; see Kit’s privacy policy.

Requesting a feature or device

On the Works with and Features pages you can request a feature or device. instnt receives it by email, with your email address if you enter it to get a reply. It is used only to improve the app and to answer you (Article 6(1)(f) GDPR).

Preventing misuse and counting

To prevent misuse, each form can be submitted once per minute. For this purpose, an irreversible derivative (hash) of your IP address is stored, which is not linked to your request. In addition, instnt records for each submission which form was sent when and which choice was made (such as TestFlight or the mailing), without your email address or what you entered, in order to follow the number of sign-ups. The legal basis is the legitimate interest of instnt in securing its website and improving the app (Article 6(1)(f) GDPR).

The instnt hub app

instnt hub has no instnt server and no account. instnt receives no personal data through the app: there is no analytics, no third-party crash reporting and no advertising. Photos and appointments are read on the iPad itself and do not leave the device.

The app only connects to services you set up yourself: your own Home Assistant, HomeKit on your iPad, Apple for the weather if you do not use Home Assistant (with a rounded location), and, in the TestFlight beta, Sony if you enter a PSN token. The App Store version does not talk to Sony directly.

When someone rings, the app shows your doorbell camera through your own Home Assistant. If you tap the button to talk, the sound from the microphone goes to your doorbell; nothing is recorded or stored.

If you move your settings to another device, they go, with your Home Assistant sign-in, directly between the two devices over your own network, encrypted with the code you type. Nothing goes through the internet or through instnt.

The voice assistant is off by default. If you turn it on, the app only uses the microphone after you open it, by tapping the bubble or swiping down. Your voice is turned into text on the iPad itself, or by your own Home Assistant; you choose this in the settings. If you choose On the iPad, the Apple Intelligence language model answers your question on the device itself, and nothing leaves the house. Otherwise the question goes to your own Home Assistant. If you have set up a language model from another party there, such as OpenAI, Google or Anthropic, Home Assistant sends your question to that party, under its terms. That is your own choice and configuration; instnt is not a party to it. With Follow-up questions on, the app keeps your previous question and the answer in memory for five minutes, to send them along; they are not stored.

Statistics

This website measures how it is used without cookies, with instnt studio, a product of instnt. This involves processing: the pages visited, the website you came from and campaign data in the link, measurements of loading speed, error messages from the website, and for forms which fields were used and whether the form was submitted, never what you entered. To count visitors, an irreversible derivative (hash) is made with a key that changes every day and disappears after two days; it cannot be used to follow a visitor across days. The legal basis is the legitimate interest of instnt in improving the website (Article 6(1)(f) GDPR).

Only with your consent does this website also use Google Analytics (Google Ireland Ltd.). The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time. Without consent, Google Analytics is not loaded. The cookies involved are listed in the cookie statement.

instnt’s hosting provider records technical data in server log files, including IP address and time of visit. This data is used solely for the security and proper functioning of the website (Article 6(1)(f) GDPR).

Retention periods

Sign-ups and requests
Two years after the last contact; for the mailing until you unsubscribe
Statistics without cookies
The daily derivative is deleted after one day; the counts themselves contain no personal data
Statistics (Google Analytics)
[Retention period as set in Google Analytics for instnthub.com]
Server log files
[Period of the hosting provider]

Disclosure to third parties

instnt does not sell personal data and does not disclose it to third parties for commercial purposes. Personal data is processed only by parties instnt engages for the technical operation of the website, namely the hosting provider, with servers within the European Union, and the email provider, and, for those who sign up for the mailing, Kit, and, with your consent, Google for statistics. Data processing agreements have been concluded with these processors. Where data is processed outside the European Economic Area, this is done on the basis of the EU-US Data Privacy Framework or standard contractual clauses.

instnt only discloses personal data to other third parties where it is legally required to do so.

Security

instnt takes appropriate technical and organisational measures to protect personal data. The website is only accessible through an encrypted connection, and access to sign-ups and requests is limited to the people who need them to handle them.

Your rights

Under the GDPR you have the right to:

  • access the personal data instnt processes about you;
  • rectification or erasure of your personal data;
  • restriction of processing and to object to processing;
  • portability of your personal data.

You can send a request to privacy@instnt.nl. instnt responds within one month of receipt. You also have the right to lodge a complaint with the Dutch Data Protection Authority.

Changes

instnt may change this privacy statement. The current version is always available on this page; the date of the last change is shown at the top.