Last updated: 1 March 2025
Privacy Policy
EnergyIQ is committed to protecting your privacy and handling your data responsibly. This policy explains what we collect, why, and how you remain in control.
1. Who We Are
EnergyIQ Pty Ltd (ABN pending) operates the EnergyIQ hardware device and associated cloud services. Our registered address is in Australia. You can contact us at privacy@energyiq.com.au.
2. What We Collect
Account information
When you create an account: email address and password (hashed). We do not store payment card numbers — payments are processed by third-party providers.
Energy telemetry
Your hub sends power readings (solar, battery, grid, home load) to our cloud every 60 seconds. This data is stored in Australia (Supabase Sydney region) and is associated with your account. Granular 5-second data is stored locally on your hub only — we never upload it.
Device diagnostics
Hub firmware version, connectivity status, and error logs for the purpose of providing OTA updates and support.
Usage data
Anonymous product analytics (page views, feature usage) to improve the product. No personally identifiable information is included in analytics.
3. How We Use Your Data
- ●Provide and operate the EnergyIQ service
- ●Deliver OTA firmware updates to your hub
- ●Send service notifications (outages, security alerts)
- ●Respond to your support requests
- ●Improve the product through aggregated, anonymised analytics
- ●Comply with Australian law
We do not sell your personal data or energy usage data to third parties. Ever.
4. Data Storage and Security
All cloud data is stored in Australia (AWS ap-southeast-2 via Supabase). Data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Your hub communicates with our cloud using a dedicated device token — not your account credentials.
Granular 5-second energy readings stay on your hub and are never uploaded. You own that data. See our Security Policy for full technical details.
5. Your Rights (Australian Privacy Act)
Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:
- ●Access the personal information we hold about you
- ●Correct inaccurate or out-of-date information
- ●Request deletion of your account and associated data
- ●Export your energy data in machine-readable format (CSV)
- ●Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)
To exercise any of these rights, email privacy@energyiq.com.au. We will respond within 30 days.
6. Data Retention
| Data type | Retention |
|---|---|
| Account information | Until account deleted |
| 1-minute telemetry (cloud) | 30 days at 1-min, 1 year at hourly, then daily |
| 5-second data (hub local) | Up to 90 days on-device |
| Device diagnostics | 90 days |
| Anonymous analytics | 24 months aggregated |
7. Third-Party Services
We use the following sub-processors to deliver the service:
- ●Supabase — Database, auth, and cloud sync (Sydney, Australia)
- ●Vercel — Web portal hosting (US, with Australian edge nodes)
- ●Solcast — Solar forecasting API (Australia)
- ●Amber Electric API — Electricity pricing (Australia)
- ●Sentry — Error monitoring (anonymised)
8. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or an in-app notification at least 14 days before the change takes effect. Continued use of EnergyIQ after that date constitutes acceptance of the updated policy.
9. Contact
Privacy questions or complaints: privacy@energyiq.com.au