Kiloton Labs

Foyer privacy policy

Publisher
Kiloton Labs
Contact
support@kilotonlabs.com, GitHub Issues, or a private security advisory for anything you do not want to post publicly.
Effective date
October 22, 2026

Summary

Foyer connects your Roku directly to the Home Assistant server you choose. The publisher does not run a server for Foyer and does not receive your home data, camera pictures or video. The app contains no advertising, analytics or tracking.

Data the app handles

  • On your Roku: the address of your Home Assistant server, a limited access token so the app can reconnect, your camera grid layout, and where you stopped in videos and music you played, so you can resume. Resume points are stored under a short code made from each file's address, not under its name. Forget this TV deletes the address and token. Removing Foyer from the Roku deletes everything it stored there.
  • Between your Roku and your server: the names and states of the rooms, devices, scenes and cameras you selected for the TV; pictures and live video from those cameras; the controls you use; notifications and alerts sent by your automations; playback status for casts; the media you cast; and, if the media library is on, the names of the folders and files in Home Assistant's My media and the files you play from it. These travel only between your own devices on your network, or through your own remote-access setup.
  • On your Home Assistant server: your Foyer settings, hashed pairing codes and access tokens, and each TV's local network address and Roku app ID so Home Assistant can open the app. When an alert interrupts another app, the name of that app is kept in memory until the alert ends, so the TV can return to it.
  • Media playback on your server: when you play a file the Roku cannot open as it is, Home Assistant repackages it into temporary working files on your server, which are deleted when playback ends or Home Assistant stops. If you turn on Prepare videos for TV (off by default) and choose to convert a file, Home Assistant saves a converted copy in a hidden .foyer folder next to the original. Copies stay until you delete them.
  • Dashboard renderer (optional): runs on your own equipment with a Home Assistant token you create. It keeps dashboard pages in memory and does not store pictures.

The publisher receives none of these data.

Purchases

If Foyer is sold, the purchase is handled by Roku. The publisher does not receive your payment card details. Roku may share limited transaction information with the publisher, such as records needed for payments, refunds and tax reporting, under Roku's own terms and privacy policy.

Other services

Roku, Home Assistant, GitHub and any services your own devices use have their own privacy practices. Roku may collect information about how you use your Roku device, including which apps you open, under Roku's own privacy policy; the publisher does not control that. Information you post in a public GitHub issue is public.

Your choices

You can delete everything Foyer keeps about a TV: choose Forget this TV on the Roku, select Revoke for that TV in Foyer's settings in Home Assistant, then remove the Foyer integration and app. Because the publisher holds none of your data, there is nothing to request from the publisher.

Children

Foyer is a home-automation utility and is not directed to children.

Changes

Changes to this policy will be published on this page with a new effective date.