Privacy Policy

Last updated: October 28, 2026

1. Introduction

Welcome to Spotwise Energy ("we", "our", or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (spotwise-energy.com) or use our application (app.spotwise-energy.com) and tell you about your privacy rights and how the law protects you.

2. Data Collection and Usage

Our principle: only the data a function really needs. We process personal data only where it is necessary for a function you use, and only for that purpose. We do not sell data, do not show advertising and do not build profiles. You can use the prices and recommendations without an account; everything below that is optional is marked as such.

We collect and process the following data:

• Account Information (optional): When you register, we collect your email address and the name you enter via Google Firebase Authentication to manage your account and secure your data.
• Device Data: The application allows you to store information about your electrical devices (e.g., consumption, runtime) to provide optimization recommendations. This data is stored in our database linked to your account.
• Savings Log: When you mark a device as started, we store the device name, start time, energy amount and the calculated costs and savings with your account (or your household, see below).
• Tariff Settings: The electricity tariff, markups and grid fees you enter are stored with your account to calculate your prices.
• Electricity Bills: In the statistics you can add your electricity bills. If you choose a PDF bill, it is read only on your device (in your browser) to suggest the values; the file is not uploaded, not stored and not sent to us or any third party. We only store the values you confirm: billing period, consumption (kWh), total amount, supplier and whether it is a spot or fixed tariff, with your account (or your household, see below). Names, addresses, customer and metering point numbers or bank details from the bill are not stored. You can edit or delete each bill at any time.

2a. Push Notifications

Push notifications are optional and only sent after you enable them in the settings. Your browser then creates a push token, which we store with your account together with your notification preferences and the browser's user agent. An automated job checks the public electricity prices, your notification settings and your devices every 30 minutes and decides which notifications to send. This job runs on GitHub Actions (GitHub, Inc.). Notifications are delivered through Google Firebase Cloud Messaging and the push service of your browser or operating system (for example Google, Apple or Mozilla), which receive the token and the text of the notification. You can disable notifications at any time in the settings or in your browser; the token is deleted when you disable notifications or log out.

2b. Households

You can create a household and invite other people with an invite code or link. Members of a household can see each other's name or email address, the shared devices, the shared settings (such as recommendation times and the tariff), the shared savings log, including who logged an entry, and the shared electricity bills (the values listed above). Anyone who knows the current invite code can join until the household is full; the creator can create a new code, remove members or dissolve the household at any time, and every member can leave it. Personal settings such as appearance, language, notifications and statistics are not shared.

2c. Bug Reports (optional)

While you use the app, it keeps the most recent technical messages (such as error and warning messages) in the memory of your device only. They are not stored, not sent anywhere and are gone when you close the app.

Only if you choose "Report a bug" does the app prepare a report, on your device. It contains only what is needed to find and fix the error:

• your description and the screenshots you choose;
• unless you switch it off, technical information: app version, browser and operating system, screen size, language, appearance setting, the open tab, whether you are logged in and your user ID (to find the data the error concerns), your plan and whether you are in a household;
• the recent technical messages, with email addresses, access tokens and invite codes removed beforehand.

The report does not contain your devices, settings values, savings log, electricity bills, prices or your location. You can view the complete technical part before sending. Screenshots are re-encoded on your device, which removes metadata such as the location where a picture was taken. The app does not send anything itself: you send the report with your own email app, so it is processed by your email provider and reaches us by email (Google Gmail). We use it only to find and fix the error and delete it once the error is resolved.

3. Payment Processing

Paid plans (Pro and Family) cannot be purchased yet, so no payment data is processed at the moment. Before paid plans become available, this policy will be updated with the payment provider used.

4. Usage Statistics (Google Analytics, only with your consent)

The app asks you once whether it may collect usage statistics. Without your consent, Google Analytics is not loaded at all: no cookies are set and nothing is sent to Google, and the app works exactly the same. The website spotwise-energy.com does not use any analytics.

If you agree, we use Google Analytics for Firebase to see which parts of the app are used and where problems occur. We limit it to what is needed for that:

• What is collected: which app pages are opened (address without parameters), start and length of a visit, device type, operating system, browser, screen size, language and the approximate region (country, region, city) derived from your IP address. Google Analytics does not store the IP address itself.
• Identifier: a random identifier stored in a cookie (_ga) for at most 6 months, so that visits can be counted.
• Not collected: your name, email address or user ID, your devices, settings, savings log, electricity bills or anything you enter. Google signals, advertising features and ad personalisation are switched off.
• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as our processor. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of the European Commission of 10 July 2023).
• Storage period: event data is deleted by Google Analytics after 2 months.
• Legal basis: your consent (Art. 6(1)(a) GDPR and § 165(3) Austrian Telecommunications Act 2021).
• Withdrawal: you can withdraw your consent at any time in the app under Settings → General settings → "Usage statistics (Google Analytics)". Collection stops immediately and the Analytics cookies are deleted. The withdrawal does not affect the lawfulness of processing before it.

4a. Hosting and Delivery

The website and the app are hosted on Google Firebase (Firebase Hosting, Authentication and Cloud Firestore; Google Ireland Limited) and delivered through Cloudflare (Cloudflare, Inc.). When you open a page, your IP address and technical connection data (such as browser and time of the request) are processed by these providers to deliver the page and to protect it against attacks. This is necessary to provide the service (Art. 6(1)(b) and (f) GDPR). We do not use these data to identify or track you.

5. GDPR Compliance

As we are based in Austria, we are fully committed to compliance with the General Data Protection Regulation (GDPR). You have the right to:

• Access your personal data.
• Request correction of your personal data.
• Request erasure of your personal data ("right to be forgotten").
• Object to processing of your personal data.
• Request restriction of processing your personal data.
• Request transfer of your personal data.
• Withdraw a consent you have given at any time, with effect for the future (for example for usage statistics, see section 4).
• Lodge a complaint with a supervisory authority, in Austria the Datenschutzbehörde (Barichgasse 40–42, 1030 Vienna, dsb.gv.at).

You can delete your account yourself at any time in the app under Settings → Account → "Delete account". This deletes your login, your devices, settings, savings log, electricity bills, push tokens and your household (members of someone else's household are removed from it). To exercise any of the other rights, please contact us at the email address provided below.

6. Data Security

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We use Google Firebase's secure infrastructure for authentication and data storage.

7. Contact Information

If you have any questions about this privacy policy or our privacy practices, please contact us:

Spotwise Energy
Attn: Benedikt Schönwiese
Grandgasse 3
4142 Hofkirchen im Mühlkreis
Austria
Email: [email protected]