Privacy & your data

Short version: we hold the minimum to do the job — on purpose — we never keep a password in readable form, and you can delete everything, any time, from your account.

• What we store. Your email (to sign you in); an optional name and postcode; a sign-in password only if you choose to set one (kept as a scrambled one-way hash, never the password itself); any home bills you type in yourself (e.g. broadband or insurance amounts, to show your whole-home picture); and — only if you connect a meter — your meter’s resource id, an encrypted read-only data token, and the energy-usage readings it returns. No bank details, no card details, no personal profile.
• The bill check. By default the bill check keeps nothing — we read your bill, pull the numbers, show you what we found, and it’s gone (the bill image is never stored). If you’re signed in and choose to save a check, we keep the numbers you confirmed (never the bill image), so you can re-see it — and you can delete it any time.
• What we never store. Never a readable password — not ours (only a one-way hash, if you set one) and never your meter/Bright account’s (we use it once to connect, then discard it). By default you sign in with a short-lived email link that expires in 15 minutes.
• How we secure it. Everything travels over encrypted (HTTPS/TLS) connections; the meter token is encrypted at rest; sessions use a signed, secure, HTTP-only cookie; and we never log secrets or tokens.
• Read-only. Meter access is read-only — we can see your usage, never change your account.
• Who we share it with — nobody, for their own use. We never sell your data and never share it for anyone’s marketing. To run the service we use a few trusted providers who process data strictly on our behalf: a regulated meter-data provider (your consented read-only connection), an email provider (sign-in and account emails), and UK/EU cloud hosting. That’s it.
• Notifications (if you turn them on). If you enable notifications we store a device push token so we can send them; turn them off and it’s removed. Off by default.
• Analytics. We keep basic, anonymised usage stats (roughly which pages get visited) to improve the app. No third-party advertising or tracking SDKs, and it isn’t tied to you.
• Your control. Delete your account any time — it hard-deletes your record and meter connection immediately, with no retained copy. Want a copy of what we hold first? Email us and we’ll send it.
• Logged out, nothing is stored. The free per-postcode check creates no account and stores nothing.

Written to be plain and straightforward. If anything here isn’t clear, or you want a copy of your data or it deleted, just get in touch.