Controller: Hehku Company Oy (3259593-4), Väinämöisentie 7 E, 04200 Kerava, support@wattspotter.com. This policy covers the Wattspotter app, its web version and its Google Home integration (the "service"). Suomeksi.
| Data | Purpose | Basis |
|---|---|---|
| Email address and Google or Apple account identifier | Sign-in and account identification | Contract |
| Names, types and identifiers of the Google Home devices you connect to price control | Controlling and showing your devices | Contract, consent (Google Home permission) |
| Rules, settings, electricity contract prices, the town of your home | Computing the schedule, total price, sunrise/sunset | Contract |
| Control events (when a device was switched and why) | Running the schedule, savings estimate, troubleshooting | Contract |
| Push token (FCM/APNs) | Notifications, if enabled | Consent |
| Google Home account-linking tokens (OAuth) | Delivering control commands to Google Home | Contract |
We do not process your device's location; you choose the town yourself. We do not sell data, use it for advertising, or train AI models with it.
The service uses Google's Home APIs and a Google Home integration. The Google Privacy Policy is incorporated into this policy by reference and applies to data processed by Google. Access to your devices requires a permission you grant in Google's screen and can revoke at any time in the Google Home app or your Google Account settings.
The device list obtained through the Home APIs (device names, types, states and temperatures) is kept only on your phone for at most 10 days and is deleted when you sign out. Our server stores only the identifiers and names of the devices added to Wattspotter (by default every supported device in the home you granted access to; you can remove any) and of their homes, and the identifier and name of a temperature sensor you choose for a rule, because the schedule and automations need them while the device is controlled. Device states and readings are not stored on our server. This data is deleted 30 days after you remove the device from control or unlink Google, and immediately when you delete your account. Home APIs data is not sold, shared, used for advertising or used to train AI models.
Control events (Wattspotter's own switching decisions, not device readings) 400 days for yearly statistics, removed devices 30 days, device data 30 days after unlinking Google, sent notifications 90 days, expired authorization codes and tokens immediately. The device list on your phone at most 10 days. Your account and all data are deleted immediately when you delete the account.
Google (Firebase Authentication, Firebase Cloud Messaging, Google Home / HomeGraph): data may be processed outside the EU under Google's standard contractual clauses and the EU–US Data Privacy Framework. The server and database are located in the EU (OVHcloud, Warsaw, Poland). Electricity prices: ENTSO-E Transparency Platform and porssisahko.net (no personal data).
You can access, correct and delete your data in the app (Settings → Account → Delete account) or by writing to support@wattspotter.com. You have the right to data portability, to object, and to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi). Account deletion: instructions.