In short
SonaPilot controls your home cinema through an IR bridge on your own Wi-Fi. The app has no account, no cloud, no advertising, no analytics and no crash reporting. We, the providers of SonaPilot, receive no data from you. Everything the app stores stays on your device; every command goes straight to the bridge on your local network.
There is one exception, which you start yourself: transferring the setup from your phone to a Wear OS watch (section 4).
1. Controller
Sonamont, Christian Klinkenberg, Iterstrasse 3, B-4730 Raeren, Belgium
Company number: 0817.863.814 · VAT: BE0817863814
Privacy and support: sonamontmedia@gmail.com
2. What the app processes, and where
| Data | Purpose | Where it is kept |
|---|---|---|
| Address, port and MAC address of the IR bridge | Send commands to the bridge; find it again after its address changed | on your device only |
| Learned IR codes, waiting times, on/off confirmation | Remote keys and film scenes | on your device only |
| User and password of the bridge's web interface (optional) | Access a locked bridge | on your device only, encrypted (Windows: DPAPI; Android: Android Keystore) |
| History of sent commands | The "History" screen | in memory only; deleted when the app closes |
| State of a running sequence | Keep running while the screen is locked; report an interruption | on your device only |
The app processes no personal data in the usual sense: no name, no email address, no location, no contacts, no device ID and no advertising ID.
3. Network connections
- To the IR bridge: the app sends commands over HTTP to the bridge on your local network. It accepts only private addresses (such as
192.168.x.x) and local network names, and stops before connecting if an address points outside the local network. Tasmota offers no HTTPS; anyone reading along on the same Wi-Fi can see commands and a bridge password, if one is set. Protect your Wi-Fi with a strong password. - Bridge search: on request, the app asks the addresses of your own Wi-Fi network (at most one /24 network, up to 254 addresses) with the Tasmota command
Status 0. No credentials are sent. Mobile networks and VPN connections are never searched. - Buying the full version: the purchase and its check run through Google Play or the Microsoft Store on your device. The app only asks there whether the full version was bought, and keeps the answer on the device. The app never sees payment details, and we do not receive them.
- Nothing else: the app does not connect to the internet.
4. Transfer to the watch (Wear OS)
When you choose "Set up / update watch" on the phone and agree on the watch, the app transfers the control profile (bridge address, MAC address, IR codes, waiting times) and, if stored, the bridge user and password to your paired watch. It uses the Google Play services data layer for this. The data usually goes straight to the watch over Bluetooth or Wi-Fi. If the watch is connected to the phone only over the internet, it can pass through Google's servers in encrypted form; Google's privacy policy applies to that (https://policies.google.com/privacy). We receive no data. The transfer only happens when you start it, and it expires after two minutes.
5. Profile export
"Export profile" saves the control profile as a file in a place you choose. The file contains no credentials. What you do with the file is up to you.
6. Permissions (Android)
| Permission | Used for |
|---|---|
| Internet | Connection to the bridge on the local network (Android has no permission for the local network alone) |
| Network state | Find your own Wi-Fi network for the bridge search |
| Wake lock, foreground service | Finish a film scene while the screen is locked |
| Notifications | Show the progress and the stop button of a running sequence |
| Google Play billing (com.android.vending.BILLING) | Buying the full version through Google Play; only active in the version from Google Play |
The app requests no location, camera, microphone, contacts or file access. Android cloud backups are switched off for SonaPilot.
7. Retention and deletion
All data stays until you delete it. "Remove password" deletes the bridge password at once. Uninstalling the app makes the operating system delete all its data. You delete exported profile files yourself.
8. App stores
If you get SonaPilot from Google Play or the Microsoft Store, these providers process data about the purchase, the installation and, where applicable, crash reports under their own privacy policies. We have no influence on that, and we receive no data from it that identifies you.
9. Your rights
Since we receive no personal data from you, we have nothing to disclose or delete; all data stays with you. For privacy questions, contact us at the address in section 1. You also have the right to lodge a complaint with a data protection supervisory authority.
10. About Tasmota
SonaPilot is an independent product. It is not affiliated with, endorsed or certified by the Tasmota project or any device maker. "Tasmota" is named only to describe which firmware the app works with.