Privacy Policy

1Who and what this covers

This policy covers the WattLoft service: this website (wattloft.com), the dashboard at connect.wattloft.com, the WattLoft apps for iPhone, Mac and Apple Watch, the WattLoft app for Homey, and the public demo. They are all windows onto the same account, and this one policy covers them all.

WattLoft is operated from Romania, in the European Union, and the operator of WattLoft is the data controller for the personal data described here. You can reach us at [email protected].

2What we store

• Your account — email address, display name, and a salted hash of your password (never the password itself).
• Your Tesla connection — the tokens Tesla issues when you approve access on Tesla's own sign-in page, your vehicles' identifiers (VIN, name, model, options) and, if you connect through your own Tesla developer application, the application credentials you enter. Your Tesla password never touches WattLoft.
• Vehicle data — what your car reports, by streaming (Tesla Fleet Telemetry) or polling: battery and pack readings, charging, climate, doors, locks and windows, tyre pressures, software version, speed, heading and location. Location history exists so you can see your trips and where you charged.
• Your settings — units, currency and electricity rates, theme, dashboard layout, notification rules and delivery choices, automations and alert thresholds, storage cadence.
• Sharing you set up — which accounts you granted access to, and the share links you created (their level, expiry and whether they can be claimed).
• AI analyst conversations — if you use the optional analyst, the questions you ask and the answers, kept with the alert they concern (section 8).
• Technical logs — server logs with IP addresses and request paths, kept briefly for security (rate-limiting sign-in attempts) and for fixing faults.
• Usage figures — first-party counts we keep to run the service: which public pages are opened, which screens of the dashboard are used, sign-ins, and how many requests each account makes. Visitors are counted with an anonymous hash that changes every day, so nobody is followed from one day to the next; no raw IP address is stored with those visitor counts. Separate security and access logs can contain IP addresses, approximate country or city, account identifiers, request paths and search queries, response status and timing. These logs are retained for the configured security-log period and are used to operate, secure and troubleshoot the service.

3What we work out from it

From the raw readings the service derives the figures you see: drives and charging sessions (with distance, energy, averages and peaks), battery health and capacity, charger efficiency, stationary drain (energy lost while parked, asleep or awake), charging costs from your rates or Tesla's bills, and the weather at the car's parked location. These are stored with the car, and are covered by everything in this policy.

4What we don't do

• No third-party advertising or cross-app tracking SDKs. The first-party usage and security records described above help us operate the service. No tracking pixels in emails.
• No selling or renting your data. Service providers receive the information described in section 7 when needed to deliver the features you use.
• No advertising profiles and no training of WattLoft's own models with your data. Optional AI processing is described in section 8.
• Access is limited to authorised service operators for operation, security and support.
• The public demo contains no real personal data: it is a copy of a consenting owner's car with the identity, locations and place names replaced.

5How data is used, and why we may

Your data is used for one purpose: showing your cars to you and to the people you share them with, and running the alerts, notifications and automations you set up. Emails are sent only when you have asked for them — alerts, digests, password resets, and the occasional service notice about the account itself.

Where the GDPR asks for a legal basis: operating the service you signed up for (contract); security logs and abuse prevention (legitimate interest in keeping the service safe); notifications, sharing, weather lookups and the AI analyst (your choice — each one is something you turn on, and can turn off).

6Sharing you set up

Sharing is under your control — and it is real access. Granting an account, or creating a share link, shows that person your car's live data and history, location included. A link works for anyone who holds the URL until it expires or you revoke it; a link you mark claimable can attach the car permanently to an account, at the access level you chose. You can see and revoke every grant and link from the car's Share panel at any time, and you are emailed when a link of yours is used.

7Outside services, and what each receives

• Tesla, Inc. — your car's data comes from, and commands go through, Tesla's official Fleet API and Fleet Telemetry, under Tesla's own terms and privacy policy.
• Cloudflare — sits in front of the service as network infrastructure (DNS, TLS, protection) and sees traffic the way any such provider does.
• Open-Meteo (weather) — once an hour, for each parked car, our server asks for weather using the parked car's latitude and longitude, currently sent to four decimal places. No account identifier or VIN is included in the weather request. A car that is driving is not looked up.
• Map tiles — the maps in the web dashboard are drawn from tiles that our server fetches and caches from OpenStreetMap (road) and Esri World Imagery with Esri's road and place-name layers (satellite). Your browser never contacts them, and they never learn which car or which route the tiles are for. The apps draw their maps with Apple Maps on your device, under Apple's policy. "Navigate" buttons open Apple or Google Maps only when you tap them.
• Exchange rates — currency conversion of charging costs uses public rate services (open.er-api.com, frankfurter.app). Only currency codes are requested; nothing about you.
• AI provider — only when you use the analyst; see section 8.
• Apple Push Notification service — if you enable remote notifications, device push tokens and notification payloads pass through Apple's service to deliver your alerts and supported Live Activity updates.
• Email delivery — password resets and the notifications you enable are sent through our mail provider, which handles the message in transit.

We do not share data with data brokers. Infrastructure and AI providers may process information outside the European Union under their applicable service terms and privacy policies. Contact us for details of the provider and international-transfer arrangements applicable to your account.

8The AI analyst

The Analyze button on alerts and in Diagnosis is optional. When you use it, the service sends the AI provider configured for the request a snapshot of that car's context — its state, battery and pack readings, climate, tyres, the weather at the car, recent alerts, battery health — together with the alert record and your question, and shows you the answer. The analyst may also run a web search for technical background (Tesla manuals, known faults); the search query is built from the alert, never from your identity, VIN or location.

Supported providers include OpenAI (including a connected ChatGPT account), Anthropic, xAI and OpenRouter. The actual provider depends on the service configuration. The provider's retention and use of requests are governed by its applicable terms and account settings; this policy does not promise identical retention or training settings for every provider. WattLoft does not use these requests to train its own models. Use is limited per account per day. Please do not paste personal details of other people into the chat: the analyst is for the car.

9Storage & security

• Data is stored on servers operated by WattLoft in the European Union.
• Every connection uses TLS; cars authenticate to the telemetry endpoint with mutual TLS certificates issued by Tesla.
• Vehicle commands travel Tesla's signed command protocol, authorized by the virtual key you approve on the car.
• Passwords are stored as salted scrypt hashes; sign-ins are rate-limited per address and per account against brute force. Tesla tokens and other secrets are held server-side and are never sent to browsers or apps.
• Access inside an account follows the sharing you configure — view-only means view-only, and administrative functions are admin-only.
• Cookies & storage: one session cookie keeps you signed in; your browser's local storage remembers preferences such as the theme and the last car. There are no tracking or advertising cookies of any kind.

10Retention & deletion

• Raw readings and events are kept for the service's retention window — currently one year — and then removed automatically.
• Drives, charging sessions and battery-health history are summaries, not raw samples, and are kept for at least two years so that long-term trends work.
• Security logs are short-lived and rotate automatically.
• Disconnecting your Tesla account stops all collection immediately. You can remove a connected Tesla account and select deletion of its vehicle history in the account controls.
• Permanent account deletion can be initiated inside the iPhone, iPad or Mac app: open Settings, find Account, select Delete account and confirm the permanent deletion. The web app offers the same option in Settings. No support email, telephone call or separate website visit is required. After confirmation, your account and associated data in the active service, including owned vehicle history, saved connection credentials, personal settings, shares, account logs and push tokens, are erased and all your sessions are invalidated. Completion is confirmed on screen. A running import or export must finish or be canceled before deletion can proceed. A keyed removal marker, containing no VIN or account identity, prevents late vehicle telemetry from recreating erased data. This does not delete your account with Tesla or vehicles owned by other users. Deletion requests made by older app versions are processed within 30 days and confirmed by email. You can also contact [email protected] from your account address for deletion or assistance. Records legally required to be retained are restricted to that purpose; backup copies expire through the normal backup rotation.

11Your rights

Under the GDPR — and similar laws elsewhere — you have the right to access your personal data, to have it corrected, to receive a copy in a machine-readable form, to have it erased, to restrict or object to its processing, and to complain to a data protection authority (in Romania, the ANSPDCP; or the authority where you live). Most of this you can see and do yourself in the dashboard; for an export, a deletion, or anything else, email [email protected] and it will be handled promptly and without fuss.

12The apps and Homey

• iPhone, Mac and Apple Watch apps talk only to your WattLoft account. If you enable remote notifications, WattLoft stores the Apple push token, platform, delivery environment, device name and delivery status linked to your account. These are used to deliver alerts and supported Live Activity updates, not advertising tracking. A token is removed when that device signs out or you remove it from delivery settings, when it becomes invalid, or as part of account deletion. Your device's own location is used only with your permission for map and movement features; this is separate from the connected car's location stored by the service.
• The Homey app stores your WattLoft sign-in on your own Homey device and talks only to WattLoft — your credentials never pass through anyone else.

13Children

WattLoft is not directed at children under 16 and does not knowingly collect their data. Car access for family members is granted by the account holder.

14Changes

If this policy changes, the new version appears here with an updated date, and a material change is announced to account holders by email before it takes effect.

15Contact

Privacy questions and requests: [email protected].