01Who is responsible
Voltie is an independent app operated by Edgar Magalhães, an individual developer based in Portugal, who is the controller of your personal data. Voltie is not a company yet; if that changes, this policy will be updated.
For anything related to your data, write to hello@voltie.app.
Voltie is not affiliated with, endorsed or sponsored by Tesla, Inc.
02What we collect
Your account. Your email address and an account identifier. If you sign in with Google or Apple, we receive the basic profile details they share, such as your email address.
Your Tesla connection. When you connect your Tesla account, Tesla gives Voltie access tokens for the permissions you approve. Voltie can request vehicle information, vehicle location, vehicle commands and charging commands, plus offline access so the connection keeps working. We never receive your Tesla password.
Vehicle data. Data that Tesla sends about the vehicles you choose to follow, such as the VIN, model and software version; location, routes and addresses; speed and odometer; battery level, range, charging and energy use; interior and outside temperature; tyre pressure; and the state of doors, windows, locks, climate and Sentry Mode. From this we build your trips, charging and parking sessions, statistics and estimated costs.
What you enter. Vehicle names, saved places, automations, electricity tariffs and fuel-comparison settings.
Your phone’s location (optional). If you allow it, the app uses your phone’s location while it is open to show where you are relative to your car. For a few commands that depend on where you are, such as opening a garage door with HomeLink, your location is sent with the command to Tesla.
Notifications. A push notification token for your device, so we can tell you when an automation runs. Notifications only carry a short generic message; details stay in the app.
Diagnostics and usage. The app uses Google Firebase Analytics, which records the screens you view, the app version, device type, an installation identifier and an approximate location derived from your IP address. It also uses Firebase Crashlytics, which sends crash reports linked to your account identifier.
The website and the beta. voltie.app uses no cookies, analytics or trackers. If you request an invitation, we store your email address, a one-way hash of your IP address used to prevent abuse, your browser’s user agent, the page you came from and the time of the request.
03How we use it, and why
- To provide Voltie (performance of our agreement with you): your account, Tesla connection, vehicle data, settings, optional phone location and notifications.
- To keep Voltie secure and reliable (legitimate interests): crash reports, diagnostics, rate limits and abuse prevention.
- To improve the app (legitimate interests): usage analytics. You can object at any time by writing to us.
- To send beta invitations (consent): the email address you submit. You can withdraw consent at any time.
- To meet legal obligations, when the law requires it.
We don’t sell your data. We don’t show ads or use your data for advertising, and we don’t track you across other companies’ apps or websites.
04Who processes data for us
We rely on a small number of providers. Each receives only what it needs to do its job for Voltie:
- Google (Firebase and Google Cloud): sign-in, database, file storage, cloud functions, encryption keys (Cloud KMS), push notifications, analytics and crash reports.
- DigitalOcean: hosts the server that receives the vehicle data Tesla streams to Voltie.
- Tesla: the source of your vehicle data and the recipient of the commands you send. Tesla’s own privacy policy applies to your Tesla account.
- Geoapify: receives vehicle coordinates, without your name, email or VIN, to turn them into addresses and elevation.
- Mapbox: displays the maps in the app. Its software collects usage and diagnostic data.
- Apple and Google: the phone’s built-in services that turn coordinates into addresses.
05Where your data is processed
Data is processed in the European Union and in the United States. Some Google services that Voltie uses, including its cloud functions, analytics and crash reports, run in the United States. These transfers rely on the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.
06How we protect it
- You sign in on Tesla’s website, using OAuth with PKCE. Voltie never sees your Tesla password.
- Tesla tokens on your phone are kept in its secure storage (Keychain on iPhone, Keystore on Android). When our servers need a token to run your automations, it is encrypted with Google Cloud KMS, and the app itself can never read it back.
- Data travels over encrypted connections (TLS) and is stored encrypted at rest by our providers.
- Database rules ensure each account can only reach its own vehicles and history.
Your vehicle history is not end-to-end encrypted: our servers need to process it to build trips and statistics and to run automations. Access is limited to the developer and used only to operate and maintain the service, to investigate a problem you report, or when required by law.
07How long we keep it
- Account and vehicle history: for as long as your account exists. When you ask us to delete your account, we delete it, your vehicle history and stored Tesla tokens within 30 days. Residual copies in backups are removed within a further 30 days.
- Working data on the telemetry server: most of it is deleted on a rolling basis, between 24 hours and 30 days after it has been added to your history.
- Beta requests: until the beta ends, or sooner if you ask.
- Analytics and crash reports: for a limited period set in Google’s services, up to 14 months.
After deleting an account, we may keep a minimal record that the deletion happened, to prevent abuse and meet legal obligations.
08Your rights and choices
Under the GDPR you can ask to access, correct, delete or receive a copy of your data, restrict or object to how we use it, and withdraw consent. Write to hello@voltie.app and we will reply within one month. Deleting your account from within the app is coming; until then, email us and we will do it for you.
Disconnect Voltie at any time: revoke its access in your Tesla account’s third-party app settings, and remove Voltie’s virtual key from your vehicle’s Locks screen.
You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or to the authority where you live.
09Children
Voltie is not intended for anyone under 16.
10Changes to this policy
When Voltie changes how it handles data, we will update this page and the date at the top. If a change is significant, we will also tell you in the app or by email.