What we collect — and what we deliberately don't

What never leaves your Pi

This is the core of how Piazza HQ works, not just a policy promise: your calendar events, photos, chores, names, and everything else you put into the app lives in a local database on your own Raspberry Pi. None of it is sent to our servers, ever — there's no code path that does it. If your Pi is offline, the display still works; that's only possible because nothing about your actual content depends on a connection to us. The one optional exception is Remote access, described below: if you switch it on, pages you open through your private address travel over Cloudflare's network — still never through our servers.

What we do collect

A small, specific set of things, needed to run updates and licensing:

• Email address — used to send you a license key and update notices. Nothing else.
• How you found us — if you choose to answer "How did you hear about Piazza HQ?" when you sign up, your answer is saved with your sign-up so we can see which kinds of places people find us. It's optional, and used only for that.
• Device check-ins — each Pi periodically asks our update server "is there a newer version?" That request includes a randomly generated device ID (not tied to your name or email) and your IP address, logged only so we can see how many devices are actually out there.
• Feedback or bug reports — only if you choose to submit one from within the app. Whatever you type, plus an optional screenshot, goes to us so we can actually fix things.
• Contact form messages — your name, email, and message, if you use the contact form on this site.

Remote access (optional, off unless you turn it on)

Remote access lets you open your calendar from outside your home. If you turn it on, Piazza HQ gives your main Pi a private web address (like maple-river-4821.piazzahq.com), and your Pi opens a secure connection out to Cloudflare, the network that carries that address. Nothing is opened on your router.

• Cloudflare can technically see that traffic. When you (or anyone you share the remote password with) open the address, your requests and the app's replies — including the calendar content on screen — pass through Cloudflare's network, which decrypts the connection in order to forward it to your Pi. Cloudflare's own privacy policy applies to that. It does not pass through our servers, and we don't store it.
• What we keep to run it: your private address, an internal tunnel ID, your device ID and the account it belongs to, and when the address was created or changed. That's it. We remove it when you turn remote access off and give the address back, when you remove the device, or automatically if the device stays offline for a long time.
• Not sent through remote access: live camera video, database backups, and software updates. Those only work on your home network.
• Your remote password is stored only on your Pi, as a one-way hash. We never see it.
• Every sign-in and wrong-password attempt is logged on your Pi so you can review it in Settings.

You can turn it off at any time in Settings → Security, which closes the connection right away.

Payments

Piazza HQ is free to use. We don't collect any payment or card information.

Third parties

If you turn on an optional integration — Todoist, a non-default weather provider, or your own Home Assistant — your Pi talks directly to that service under its own terms, entirely outside our servers; we never see that traffic or what's in it. Home Assistant in particular is typically something you already run yourself, not a third party in the usual sense — your Pi is just talking to another device on your own network.

Beyond that, we don't sell, rent, or share data with anyone else.

Your data, your choice

Want your email or an old feedback submission deleted? Get in touch and we'll take care of it. Since your actual calendar/photo content was never on our servers to begin with, there's nothing to delete there — deleting it is as simple as wiping your own Pi.

Changes

If this ever changes in a way that matters, it'll be reflected here with an updated date, not buried in a rewrite. Last updated September 2026.