Privacy · Last updated 14 October 2026

Privacy Policy

How Lindy Studio ApS processes personal data when you use the invitation-only Patrimony Collection iOS app and related invitation services.

Patrimony Collection is a private, invitation-only app for principals with one or more residences. It is not a public consumer social product.

1. Controller

Lindy Studio ApS
CVR: 45095282
Bakken 3, 6640 Lunderskov, Denmark

Contact for privacy requests: support@patrimonycollection.com

We are established in Denmark and process personal data under the EU General Data Protection Regulation (GDPR) and the Danish Data Protection Act.

2. What the app does with data

WhereWhat
Your iPhoneSign in with Apple session; house-connection credentials in the iPhone Keychain; camera used only to scan a pairing QR code
Each residence’s Home AssistantLive home state stays on that house. We do not continuously stream or store that live state in our cloud as telemetry
Our backendInvitations and access grants, account/session data, Apple Push Notification device tokens, and push delivery (quiet house nudges)
Weather (Open-Meteo)For homes connected to Home Assistant, the app shows local weather by sending the home's approximate location (rounded to about 1 km) from your phone to Open-Meteo (open-meteo.com). No name, account or other identifier is sent. You can turn this off in Settings.

We do not sell personal data.

3. Categories of personal data

Depending on how you use the app, we may process:

We do not require a separate password for Sign in with Apple beyond what Apple provides.

4. Purposes and legal bases (GDPR)

PurposeLegal basis
Create and manage your invitation-only account; authenticate you (Sign in with Apple)Performance of a contract (Art. 6(1)(b))
Maintain invitations, grants, and session so the app works as offeredPerformance of a contract (Art. 6(1)(b))
Deliver push notifications you have enabled (quiet house nudges)Performance of a contract (Art. 6(1)(b)); where required, your consent for notifications at the system level
Store house-connection credentials in Keychain and use the camera for QR pairingPerformance of a contract (Art. 6(1)(b)); camera access is controlled by iOS permission
Respond to support requestsLegitimate interests (Art. 6(1)(f)) — helping you use the service — or contract where the request relates to your account
Security, abuse prevention, and legal complianceLegitimate interests (Art. 6(1)(f)) and/or legal obligation (Art. 6(1)(c))

Where we rely on legitimate interests, you may object as described in section 8.

5. What we do not do

6. Sharing and processors

We share personal data only as needed to run the service:

We do not sell data to data brokers or advertisers.

If a processor is outside the EEA, we use an appropriate transfer mechanism (for example Standard Contractual Clauses) or rely on a valid adequacy framework where applicable. Apple services may involve processing in the United States.

7. Retention

Live home state stays on each residence’s Home Assistant and is not wiped by deleting your Patrimony account.

8. Account deletion and your rights (EEA / Denmark)

If you create an account with Sign in with Apple, you can delete it in the app: Settings → Delete Account. That removes your Patrimony account and associated server data (session, entitlements, device tokens). Live house data stays on your Home Assistant. Email support@patrimonycollection.com (subject “Privacy”) remains a backup, not the only path.

Subject to GDPR conditions, you may also: access; rectify; erase; restrict; portability (where applicable); object to legitimate-interests processing; withdraw consent where processing is consent-based. For rights other than in-app account deletion, email the address above.

Complaint: Danish Data Protection Agency (Datatilsynet), https://www.datatilsynet.dk.

9. Children

Intended for adult principals and authorised household users. We do not knowingly offer the service to children under 16 (or a lower age where local law sets a different digital-consent age).

10. Security

Appropriate technical and organisational measures for the backend (access control, encrypted transport in transit, least-privilege). House-connection credentials in iPhone Keychain. Protect the device with a passcode or biometrics.

11. App permissions (iOS)

PermissionWhy
Sign in with AppleAccount creation and sign-in
NotificationsQuiet house nudges via APNs (optional; controlled in iOS Settings)
CameraScan pairing QR code only

12. Website analytics

The marketing website at patrimonycollection.com may use Google Analytics 4 to understand aggregate visits (pages viewed, approximate region, device type). This is separate from the iOS app.

Analytics cookies and similar storage run only after you Accept on the cookie bar. Decline leaves analytics storage denied (Google Consent Mode). We configure IP anonymization where offered by Google.

Google acts as a processor / independent controller for parts of Analytics under Google’s terms. Processing may involve transfers outside the EEA with safeguards described by Google. See Google’s Privacy Policy.

You can change your choice by clearing site data for this domain, or email support@patrimonycollection.com.

13. Changes

We may update this policy when the product or the law changes. The “Last updated” date at the top will change. Material changes will be posted at https://www.patrimonycollection.com/privacy/. Where the law requires consent for a change, we will ask for it.

14. Contact

Lindy Studio ApS — CVR 45095282 — Bakken 3, 6640 Lunderskov, Denmark — support@patrimonycollection.com. Privacy requests: same email, subject “Privacy”.