Privacy Policy
1. Who we are
Gemwatt ("Gemwatt", "we", "us") provides a mobile application and related services that turn electric-vehicle data into insight about battery health, efficiency, trips and charging costs (the "Service"). For the personal data described here, Gemwatt is the controller.
Privacy contact: privacy@gemwatt.com.
This policy explains what personal data we process when you use the Service, why, and the choices you have. Gemwatt is an independent product and is not affiliated with, endorsed by, or sponsored by Tesla, Inc.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Connection data | Identifier of your car maker account, vehicle identifier (such as VIN), model and name, and the authorization tokens that let us fetch your data. Tokens are stored encrypted. | You, through the car maker's official sign-in |
| Vehicle data | Battery level, range, charging state and power, energy added, odometer, speed, drive state, and similar readings made available through the official API. | The car maker's API, after you authorize it |
| Derived data | Trips, charging sessions, efficiency, cost, and battery-health estimates that we calculate from the readings above. | Calculated by us |
| Location (optional) | Start and end points and route of trips, and charging locations, only if you enable a feature that needs it. | The car maker's API, with your permission |
| Settings you provide | Electricity prices, currency, units, theme and gem style. | You |
| Device and technical data | IP address, device model, operating system, app version, language, time zone, crash and diagnostic logs, and a push-notification token if you enable notifications. | Your device |
| Purchase data | Subscription status and receipts. Payments are handled by Apple, Google or another payment provider; we do not receive your card number. | App store / payment provider |
| Communications | Messages you send to support. | You |
What we do not collect: your car maker account password (you enter it only on the car maker's own page), in-car camera or microphone content, your contacts, or advertising identifiers for tracking.
3. Why we use it, and our legal bases
- To provide the Service (connect your car, build trips and sessions, show estimates, manage your subscription). Basis: performance of a contract.
- Location and notifications. Basis: your consent, which you can withdraw at any time in the app or your device settings.
- Security, fraud prevention, reliability and support. Basis: our legitimate interests in running a safe and dependable service.
- Improving the Service using aggregated or de-identified data. Basis: legitimate interests.
- Legal compliance and defending legal claims. Basis: legal obligation and legitimate interests.
We do not sell your personal data, and we do not use it for third-party advertising. We do not make decisions with legal or similarly significant effects about you by automated means. Estimates in the app are informational only.
4. Who we share it with
- Service providers acting on our instructions: cloud hosting and database providers for the backend; Cloudflare for this website, its analytics and email forwarding; and the Apple App Store and Google Play for payments and subscriptions. We do not currently use a third-party crash-reporting or advertising service.
- Your car maker, as the source of your data. Gemwatt is read-only and never sends commands to your car.
- Authorities or advisers where required by law or to protect rights, safety and security.
- A successor in a merger, acquisition or sale of assets, with notice to you where required.
5. International transfers
Our providers may process data in countries other than yours. Where required, we use safeguards such as adequacy decisions or standard contractual clauses.
6. How long we keep it
| Data | Retention |
|---|---|
| Connection tokens | Until you disconnect or delete your account, or the authorization expires |
| Raw vehicle readings | 30 days, then reduced to trips and sessions |
| Trips, charging sessions, estimates | While your account is active, or until you delete them |
| Location data | 12 months or until you delete it or turn the feature off |
| Security and diagnostic logs | 90 days |
| Support messages | 24 months |
| Billing records | As required by tax and accounting law |
When you delete your account we remove or irreversibly de-identify your personal data within 30 days. Encrypted backups are overwritten within 35 days. See Delete your account and data.
7. Security
We use encryption in transit and at rest for sensitive data, encrypt authorization tokens, restrict and log access, keep signing keys in a dedicated secrets store, and limit how much data we request. No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as the law requires.
8. Your rights
Depending on where you live (for example under the GDPR / UK GDPR, the Israeli Protection of Privacy Law, or US state laws), you may have the right to: access your data; correct it; delete it; restrict or object to processing; receive a portable copy; withdraw consent; and complain to your data-protection authority. You may also contact the Israeli Privacy Protection Authority or the data-protection authority where you live.
To exercise a right, email privacy@gemwatt.com. We may need to verify your identity, and we aim to reply within 30 days. You will not be treated worse for using your rights.
9. Children
The Service is not directed to anyone under 18, and we do not knowingly collect their personal data. If you believe a child has given us data, contact us and we will delete it.
10. Your car maker's data
Data held by your car maker is governed by its own terms and privacy notice. You can review and revoke Gemwatt's access at any time from your car maker account, and from within the app. Revoking access stops new data from reaching us.
11. This website
This website does not use cookies or advertising trackers. We use Cloudflare Web Analytics, a privacy-focused measurement service that, according to Cloudflare, does not use cookies and does not track visitors across sites. It tells us in aggregate how many people visit and which pages they view. Our hosting provider, Cloudflare, also processes standard server logs (such as IP address and request time) for security and delivery.
12. Changes
We may update this policy. For material changes we will give notice in the app or by email before they take effect. The date at the top shows the latest version.
13. Contact
Gemwatt. Email: privacy@gemwatt.com.