Privacy Policy
Last updated: August 2026
AirMonitor is a small service that connects your Kasa smart plug to PurpleAir air quality data. This page explains what information we collect, why, and how it's handled. We keep it brief because the service is simple.
What we collect
- Email address — used to create your account and send transactional emails (subscription confirmation, billing issues).
- Kasa (TP-Link) credentials — your TP-Link email and password, used to control your smart plug on your behalf. These are encrypted at rest using AES-256 symmetric encryption and are never logged or transmitted in plaintext.
- PurpleAir sensor IDs — the outdoor and optional indoor sensor you configure. No location data is stored beyond what you provide.
- AQI readings and plug activity — a log of each polling cycle: what the AQI was, whether the plug was turned on or off, and any errors. This is what populates your dashboard log.
- Payment information — handled entirely by Stripe. We never see or store credit card numbers. Stripe's privacy policy applies to that data.
What we don't collect
- We don't use analytics trackers, ad pixels, or third-party cookies.
- We don't sell or share your data with anyone except the third-party services described below.
- We don't collect your physical location beyond the address you enter to find a nearby PurpleAir sensor.
Third-party services
The service relies on three external APIs:
- PurpleAir — AQI readings are fetched from the PurpleAir API using sensor IDs you provide. No account information is shared with PurpleAir.
- TP-Link (Kasa) — your Kasa credentials are used to authenticate with the TP-Link cloud API to control your plug. This happens on our server; the credentials are decrypted only at the moment of the API call.
- Stripe — subscription billing is processed by Stripe. Stripe stores your payment method and billing history under their own privacy policy at stripe.com/privacy.
Data retention and deletion
Your data stays in our database for as long as your account is active. You can delete your account at any time from Account settings in the dashboard. When you delete your account:
- Your Stripe subscription is cancelled immediately.
- All stored data (credentials, sensor IDs, activity logs) is permanently deleted from our database.
- Stripe may retain billing records per their own policies and applicable law.
Your Kasa password is encrypted before it's stored and decrypted only to make API calls. We don't have a way to view it in plaintext, and it isn't included in any logs.
Security
The service runs on a server with SSL/TLS encryption in transit. Kasa credentials are encrypted at rest. We don't log credentials or AQI data to application logs.
If you discover a security issue, please email [email protected].
Changes to this policy
If we make material changes, we'll update the date at the top of this page. We won't change how existing data is handled without notice.
Contact
Questions? Email [email protected].
AirMonitor is part of trailpeaches.com.