Nova Home

Privacy information

Last updated: 13 November 2026

Scope and operator

This page describes Nova Home's Google Health connection and the separate public information pages. Nova is a personal household application. Contact: info@dibobouw.nl. Other integrations have separate data flows and are outside this connection-specific notice.

Data accessed and purpose

With the account owner's consent, Nova requests read-only permission for activity and fitness, sleep, and health metrics and measurements. It uses selected records to display recent personal activity, sleep and wellbeing information in its authenticated private dashboard.

The selected records include steps, energy estimates, exercise sessions, sleep summaries and stages, heart rate and heart-rate variability, oxygen, respiratory rate and skin-temperature information where supplied. Granted categories can cover more data than the connector actually requests. Missing records are not treated as zero.

Storage and retention

The connector stores its Google client credentials, refresh token, required permission names and connection metadata in an owner-restricted directory on the private Nova host. Access tokens and fetched health-history responses are held in process memory. The connector does not create a persistent archive of fetched health-history records.

Memory caches are bounded and replaced as new requests are made; they are lost when the process ends. Private credential backups, if retained by the operator, have their own retention and must be protected and removed separately. File permissions do not protect data from the host's administrator.

Where information goes

The connector exchanges authorization and data requests with Google and serves the resulting information to the authenticated Nova dashboard. Google Health records, connection tokens and private dashboard data are not uploaded to these public information pages. The public pages contain no sign-in form, analytics script or health-data collection form.

These information pages are hosted by Cloudflare. Cloudflare may process ordinary web-request information, such as IP addresses and request logs, to serve and protect the website. See Cloudflare’s privacy policy. Google processes requests according to its privacy policy.

Disconnecting and deletion

The owner can remove Nova's access in Google Account → Third-party connections. In Nova's private connection setup, “Disconnect locally” removes the locally stored active credentials but does not itself revoke Google's grant. “Revoke and disconnect” also attempts revocation with Google and reports whether that request was confirmed.

Disconnecting does not delete original Fitbit or Google Health records. Manage those records with the originating service. The operator must handle any separately retained backups and close displayed dashboard views when removing local access.

Questions

For privacy questions, contact info@dibobouw.nl. Do not send passwords, access tokens or medical records to the public website.