Smart Home 3D
Privacy Policy
How Smart Home 3D stores your home model and works with connected devices.
Updated 8 October 2026
In short. Your home model, layout and device data are not sent to the developer's servers. There is one exception - the alarm notification, if you turn it on yourself: the developer's server then stores your device's notification token and, when an alarm goes off, receives from your hub the name of the security system and its room and passes them to Apple for delivery. The app has no analytics, no advertising and no tracking SDKs. Your home model and settings stay on your device and in your own iCloud account.
What is stored on your device
- The home model. RoomPlan geometry: walls, openings, room outlines and slabs. RoomPlan produces parametric geometry without photographs. Separately, 3D files you import may include their own materials.
- Your layout. Placed objects and their names, links between smart home accessories and points on the model, room pins, groups, wall edits, staircases.
- Connection settings. Hub address, account email, chosen data source, hub serial number.
- Your SprutHub password - in Keychain, accessible after the first unlock. The entry is configured to sync between your devices through iCloud Keychain. The password is not included in home export files.
What leaves your device
1. A copy of your home in your iCloud
A copy of the home is uploaded to the app's private container automatically - about eight seconds after you change the layout or scan a floor. The copy includes both your layout and the LiDAR floor scans. This requires that you are signed in to iCloud, that iCloud Drive is on, and that "Keep a copy in iCloud" is enabled in the app.
It exists so that deleting the app doesn't take the scan of your whole home with it, and so the home shows up on your new device. It lives in your account and is not accessible to the developer.
You can turn the copy off inside the app: More → Copy in iCloud → the switch. Turning it off stops new uploads but does not erase the copy already stored - there is a "Delete copy" button next to it for that. You can also delete it from the system: Settings → your name → iCloud → Manage Storage.
Each device keeps its three latest home copies. Copies from other devices and the earlier shared copy are not overwritten. A random device identifier and its name distinguish copies within your iCloud only. You can choose a copy to restore or delete an individual copy in the app.
2. Sending to another device of yours
The home is sent directly between nearby devices - over the local network or peer to peer. Sending starts only when you pick the recipient yourself, and the receiving side shows a warning and waits for your confirmation.
The connection is not encrypted and the recipient is not authenticated: any nearby device running this app with receiving enabled can accept the home. Use this only on a network you trust.
3. Exporting to a file
You can save the home as a .smarthome3d file. From then on the file lives wherever you put it - Files, a drive, a chat. The app is not responsible for that location.
4. Talking to a SprutHub
If you choose SprutHub as the data source, the app needs your hub account email and password - they go to the hub itself when signing in, along with the commands you send to accessories.
- Local route (hub on your network): the connection is not encrypted. This is a limitation of the hub itself, which offers no secure channel on the local network.
- Cloud routes (SprutHub
web,beta,alpha): the connection is secure and the data passes through SprutHub servers. How they handle it is governed by SprutHub's own terms, not by this policy.
Your home layout and LiDAR scans are never sent to the hub.
5. Settings syncing between your devices
The hub address, account email and hub serial number sync through iCloud. The SprutHub password syncs separately through iCloud Keychain when that system service is available. Your chosen data source stays local to each device. This is separate from home backups.
6. Home Assistant
When you select Home Assistant, the app stores the server address in settings and the access token in a local Keychain entry without syncing. Device, state and room requests and control commands go to the server you specify. Available scenes run on that server. Home geometry and scans are not sent to it. Use HTTPS: HTTP does not encrypt the token or traffic. When using a cloud address, data handling along that route depends on the service you choose.
7. Device backup
The app's files are included in the regular backup of your iPhone, iPad or Mac if you have one enabled. The app does not exclude them.
8. Alarm notification
The feature stays off until you turn it on in More → Alarm notification. It works with a SprutHub hub.
When you turn it on, the app creates a scenario named "Smart Home 3D: alarm" in your hub. It contains the notification server address and a random key for your home. When a security system reports an alarm, the hub itself sends the system and room name, for example "Alarm system · Hallway", to the server at smarthome3d.app. The server passes this text to Apple Push Notification service, which delivers the notification to your devices. The app can be closed at that moment.
The server stores only what it needs to deliver the notification: the notification token of each device where the feature is on, the build type (debug or App Store), the time of the last registration, a SHA-256 hash of the home key and a SHA-256 hash of a random device secret. The key itself, the hub address and serial number, your SprutHub account and password, your device list and security modes never reach the server. The server does not store or log the system and room name: it is needed only while sending. Tokens, keys and secrets are never written to server logs.
A token is deleted from the server when you turn the notification off on that device, and when Apple reports that it is no longer valid, for example after the app is deleted. When the notification is turned off on the last device of the home, the app also deletes the scenario from the hub.
The home key is stored in the hub scenario as plain text. Anyone who can read your hub's scenarios can see it, and it is included in hub backups. The key allows sending alarm notifications to your home's devices, but not controlling your home.
As with this website, the hosting provider may record the IP address and request path in its access log; the token, key and secret are never part of the path. Apple handles notification delivery and content under its own terms. Delivery is not guaranteed: if the hub has no internet or the server is unavailable, the notification will not arrive.
9. Furniture and camera connections
Furniture photos are processed on your device to create a 3D model. Temporary photos are deleted after you accept the model or cancel; the model stays in your home. SprutHub video connections use Cloudflare STUN (stun.cloudflare.com): the service sees your IP address and connection metadata, but does not receive your floor plan, credentials or video stream.
Apple Home
When Apple Home is the data source, the app reads room and accessory names, their types and their states - only to show them on the home model and let you control them. Current device states stay in memory. The names of rooms you mark, identifiers and selected bindings are saved in your local home layout and its private iCloud backup. Apple Home bindings are excluded from the portable archive.
Some of it is remembered, though, and that is worth stating plainly. When you attach an accessory to a point on the model or create a group, identifiers in the form homekit:UUID are written into the home file, along with the names you gave those objects and groups. If you named an object after the accessory, that name is stored too. All of this ends up in your iCloud copy together with the home.
Apple Home data is not used for advertising, is not mined, is not collected and is never shared with third parties.
Camera and LiDAR
The camera is used by Apple RoomPlan/ARKit for room scanning and fixture placement. Placement stores spatial marks; for an LED strip, its start and end are stored. The app stores the resulting geometry and recognized object categories, not a recording from the iPhone camera. Viewing smart home cameras is separate: video comes from the selected provider and is not sent to the developer's server.
What the app does not have
- Location.
- Advertising identifiers or any advertising.
- Analytics, trackers or crash reporting.
- Advertising or tracking SDKs. Connectivity uses, among other components, the third-party Argon2 cryptographic library; using it does not send data to its author.
- An account with the developer. The alarm notification works without registration: the server knows a device only by its notification token.
Children
The app is not directed at children and collects no data about them. The only thing the developer's server keeps is the notification token of a device where the alarm notification is on.
How to delete everything
- Deleting the app removes its on-device container, but does not guarantee deletion of Keychain entries, synced settings, exported files or the iCloud home backup. You can revoke a Home Assistant token on your server and change your SprutHub password with that provider.
- The iCloud copy: Settings → your name → iCloud → Manage Storage → Smart Home 3D.
- The alarm notification: turn it off in More on every device - the token is deleted from the server. You can also delete the "Smart Home 3D: alarm" scenario in SprutHub. If the app was deleted first, the token is deleted on the first delivery attempt.
- Exported files and copies you have sent are yours to delete - the app doesn't know about them.
Changes
If this policy changes, a new update date will appear here. Any change that widens the data involved will also be described in the app's release notes.
This website
When you open smarthome3d.app, the hosting server processes your IP address and technical HTTP request data needed to deliver the pages. The server may record these in access logs. For anonymous visit statistics the website uses Umami on the developer’s own server (t.lumen.fashion): it counts page views, the referring page, device type, browser, language and country. Umami sets no cookies, does not store your IP address and builds no visitor profile; Umami data is not shared with third parties or used for advertising. In addition, the website uses Yandex Metrica (operated by YANDEX LLC). It stores cookies in your browser and collects anonymized visit statistics: pages viewed, the referring page, device and region. Yandex processes this data under its privacy policy: https://yandex.ru/
On your first visit to the home page, the language is chosen from your browser preferences. A manual RU/EN choice is stored in this browser’s localStorage only as the language code “ru” or “en”. If storage is blocked, the choice is carried in links. You can change it with the language switch or remove it by clearing this website’s data in your browser settings.
Contact
Privacy questions: support@smarthome3d.app