Privacy Policy for AuraFlow For Smart Lights

AuraFlow Privacy Policy

Effective date: September 10, 2026
Last updated: September 10, 2026

This Privacy Policy explains how AuraFlow (“AuraFlow,” “the app,” “we,” “us,” or “our”), developed and published by WebsWoven, accesses, uses, stores, and shares information.

AuraFlow synchronizes compatible smart lighting with visual experiences played on the user’s device or through Google Cast. AuraFlow can connect to Philips Hue Bridges, Home Assistant installations, Chromecast and other compatible Google Cast devices.

AuraFlow’s Android package identifier is com.webswoven.auraflow.

Information We Access and Use

AuraFlow does not require users to create an AuraFlow account. We do not ask users to provide their name, postal address, telephone number, contacts, financial information, health information, or other personally identifying information to use the app.

AuraFlow may access or process the following technical information to provide its features.

Local Network and Device Discovery

AuraFlow accesses the user’s local network to discover and communicate with compatible devices and services, including:

• Philips Hue Bridges and lights
• Home Assistant servers and compatible entities
• Chromecast and other Google Cast devices
• The device running AuraFlow

Local network information may include device names, local IP addresses, service information, connection status, device capabilities and other information needed to establish and maintain a connection.

AuraFlow uses this information only to discover devices, connect to devices selected by the user, control compatible lights and provide synchronized media playback.

Philips Hue Information

When a user connects a Philips Hue Bridge, AuraFlow may access and store:

• The Hue Bridge’s local IP address
• The application username or authorization key issued by the Hue Bridge
• Bridge names and identifiers
• Light, room and group names
• Light identifiers and capabilities
• Light availability and current state
• Light-to-screen-zone assignments selected by the user

This information is used to connect AuraFlow to the user’s Hue system and control selected lights during AuraFlow experiences.

Hue credentials and configuration information are stored locally within AuraFlow’s private application storage. AuraFlow does not intentionally transmit Hue credentials to WebsWoven servers.

Home Assistant Information

When a user connects AuraFlow to Home Assistant, the app may access and store:

• The Home Assistant server address entered by the user
• A Home Assistant access token supplied by the user
• Entity identifiers and friendly names
• Entity availability, capabilities and current state
• Lighting assignments and configuration choices made in AuraFlow

AuraFlow uses this information only to connect to the Home Assistant installation selected by the user and control compatible devices.

The Home Assistant address and access token are stored locally within AuraFlow’s private application storage. AuraFlow does not intentionally transmit a user’s Home Assistant access token to WebsWoven servers.

Users should protect their Home Assistant access token and should revoke it through Home Assistant if they believe it has been compromised.

Saved Preferences and Configurations

AuraFlow may store settings locally on the user’s device, including:

• Selected lighting platform
• Connected bridge or server information
• Selected Cast or playback device
• Light and screen-zone assignments
• Lighting intensity
• Favorite experiences
• Playback preferences
• Interface preferences
• Previously selected devices
• Other settings required to restore the user’s AuraFlow configuration

These settings are used to operate the app and make the user’s selected configuration available during future sessions.

Media Playback Information

AuraFlow may process information about the visual experiences selected by the user, including the selected experience, media address, playback state, playback position and destination device.

When the user selects local playback, media is played on the device running AuraFlow.

When the user selects Google Cast playback, AuraFlow sends the selected media address, metadata and playback commands to the chosen Cast receiver. The Cast receiver then retrieves and plays the selected media.

Web Server Information

AuraFlow may retrieve videos, images, lightmaps and other application content from servers operated for WebsWoven.

Like most internet servers, these servers may automatically receive technical information when content is requested, including:

• Internet Protocol address
• Date and time of the request
• Requested file or media address
• Browser or application user agent
• General device and operating-system information
• Request status and diagnostic information

This information may be used for content delivery, service reliability, troubleshooting, security, abuse prevention and aggregate service analysis. It is not used by WebsWoven to create advertising profiles.

Ordinary server logs may be retained for up to 90 days unless a longer period is reasonably necessary to investigate abuse, address a security incident, comply with legal obligations or protect the rights and safety of users and WebsWoven.

Google Cast

AuraFlow uses the Google Cast SDK to discover Cast-enabled devices, establish Cast sessions and control media playback.

Google states that the Cast SDK may automatically collect information about interactions with Cast devices. This may include:

• General Cast-device discovery events
• Cast session-management events
• Mobile-device information
• Client Cast application information
• App activity associated with Cast interactions

According to Google, this information is anonymized, encrypted during transmission and used to improve the Google Cast experience. Information collected directly by the Google Cast SDK is handled according to Google’s applicable privacy policies and data-retention practices.

AuraFlow does not control Google’s collection or retention of information generated by the Cast SDK.

Permissions and Device Capabilities

Depending on the operating system and device, AuraFlow may request access to capabilities such as:

• Internet access
• Local-network communication
• Wi-Fi and network-state information
• Nearby-device discovery
• Multicast network discovery
• Notifications for playback or Cast controls
• Foreground media playback services

AuraFlow uses these capabilities only to provide device discovery, smart-light control, synchronized experiences, local playback, Cast playback and related app functions.

AuraFlow does not use local-network or nearby-device access to determine the user’s physical location for advertising or tracking.

If an Android version associates Wi-Fi or nearby-device discovery with a location-related permission, AuraFlow uses that permission only as technically required to discover compatible devices. AuraFlow does not use this access to track the user’s movements or create a location history.

How Information Is Used

AuraFlow uses accessed or stored information to:

• Discover compatible devices on the local network
• Connect to devices selected by the user
• Authenticate with the user’s Hue Bridge or Home Assistant server
• Control selected lights
• Synchronize lighting with visual experiences
• Provide local and Cast media playback
• Save user-selected settings and mappings
• Maintain Cast and device connections
• Diagnose errors and improve reliability
• Protect the app, services and users from abuse or security threats
• Comply with applicable legal obligations

Sharing of Information

WebsWoven does not sell or rent users’ personal or sensitive information.

Information may be transmitted to or processed by third parties only when necessary to provide a feature selected by the user. These parties may include:

• Google and the Google Cast SDK for Cast-device discovery, session management and playback
• The user’s Philips Hue Bridge and compatible Hue devices
• The Home Assistant server selected by the user
• Internet-hosting and content-delivery providers used to deliver AuraFlow media and application resources
• Authorities or other parties when reasonably necessary to comply with applicable law, legal process, security obligations or the protection of legal rights

Connecting to Philips Hue or Home Assistant does not give WebsWoven general access to the user’s home network. Communication is limited to the devices, services and functions necessary to provide AuraFlow’s features.

Advertising and Sale of Data

AuraFlow does not sell personal or sensitive user data.

AuraFlow does not use Hue credentials, Home Assistant credentials, local-network information or smart-home configuration information for advertising.

AuraFlow does not use third-party advertising SDKs unless a future version of this policy and the app’s Google Play Data safety disclosures expressly state otherwise.

Data Security

WebsWoven takes reasonable measures to protect information handled by AuraFlow.

Internet-hosted AuraFlow content is ordinarily delivered using encrypted HTTPS connections. Google Cast SDK telemetry is encrypted in transit according to Google.

Connections to devices on the user’s local network depend on the protocols and configuration supported by those devices. Philips Hue Bridge communication or a user-configured Home Assistant address may use an unencrypted local HTTP connection. Users who make Home Assistant available outside their private network should use HTTPS and appropriate security controls.

Credentials and preferences saved by AuraFlow are stored within the app’s private storage area and are subject to the security protections of the user’s device and operating system.

No electronic storage or communication system can be guaranteed to be completely secure.

Data Retention and Deletion

Hue credentials, Home Assistant credentials, device information, mappings and app preferences stored locally remain on the user’s device until the user:

• Disconnects or removes the applicable integration within AuraFlow
• Clears AuraFlow’s application data
• Uninstalls AuraFlow
• Revokes the corresponding credential through Philips Hue or Home Assistant

Because AuraFlow does not require an AuraFlow account, there is ordinarily no centrally hosted AuraFlow account to delete.

Users may contact WebsWoven to ask whether WebsWoven controls any information associated with them and to request its deletion. Certain information may be retained when reasonably necessary for security, fraud prevention, legal compliance, dispute resolution or enforcement of legal rights.

Information collected independently by Google, Philips Hue, Home Assistant or another third-party service is governed by that party’s privacy and deletion practices.

User Choices

Users may choose whether to connect AuraFlow to Philips Hue, Home Assistant or Google Cast.

Users can stop AuraFlow’s access by:

• Disconnecting an integration within AuraFlow
• Removing or revoking the AuraFlow authorization from the connected service
• Revoking the Home Assistant access token
• Removing AuraFlow’s Hue Bridge authorization
• Changing Android permissions in device settings
• Clearing AuraFlow’s application data
• Uninstalling AuraFlow

Disabling an integration or permission may prevent the related AuraFlow feature from working.

Children’s Privacy

AuraFlow is intended for a general audience and is not directed toward children under 13.

WebsWoven does not knowingly request or collect personally identifying information from children through AuraFlow. If we learn that personally identifying information from a child has been collected under our control, we will take reasonable steps to delete it.

Third-Party Services

AuraFlow may interact with products or services supplied by Google, Philips Hue or Signify, Home Assistant and other compatible-device manufacturers.

Those products and services operate under their own terms and privacy policies. WebsWoven is not responsible for the independent privacy practices of third-party products or services.

References to third-party products do not imply that those parties sponsor or endorse AuraFlow.

Legal Disclosures

WebsWoven may preserve or disclose information when reasonably believed necessary to:

• Comply with applicable law, regulation, subpoena, court order or other valid legal process
• Investigate fraud, abuse or security incidents
• Protect the rights, property or safety of WebsWoven, AuraFlow users or others
• Enforce applicable agreements
• Complete a business transfer with appropriate notice and legal protections

Changes to This Privacy Policy

We may update this Privacy Policy when AuraFlow’s features, integrations, legal obligations or data practices change.

The revised policy will be posted on this page with an updated effective date. Material changes may also be communicated through the app or its store listing when appropriate.

Continued use of AuraFlow after an updated policy becomes effective constitutes acknowledgment of the revised policy to the extent permitted by applicable law.

Contact Us

Questions, concerns or deletion requests related to this Privacy Policy or AuraFlow’s privacy practices may be submitted to:

WebsWoven
Email: [email protected]
Website: https://WebsWoven.com

When contacting us, please include enough information to understand and respond to the request.
Do not send Philips Hue authorization keys, Home Assistant access tokens or other passwords by email.