Privacy policy

Last updated 8 November 2026.

IonVolt is an app for your home battery, solar and EV charger, made by RizMade Ltd, a company registered in England and Wales (company number 17529077, registered office 128 City Road, London, EC1V 2NX) ("we", "us"). This policy explains what IonVolt collects, why, who else is involved, and the choices you have. We are the controller of your personal data under UK GDPR.

What we collect, and why

• Your account: your email address, an optional name, and your password stored only as a one-way hash. If you sign in with Apple or Google we receive your email address and an identifier from them, and with Apple a token we use only to revoke the sign-in when you delete your account. For each device you're signed in on we keep a sign-in token (only as a hash) and, from Android phones, the phone's model. Used to run your account.
• Your inverter and battery: readings (battery level, solar, grid, house and car power), its settings, model, serial number and firmware, a log of the changes made to it and by whom (you, an automation, or another app), and its alarms. Kept so you can see your system now and over months and years, and to run your automations.
• Sign-ins to other services, on your behalf: to reach your inverter or home battery (for example Duracell, FoxESS, GivEnergy, AlphaESS, SolaX, Tesla Powerwall), your EV charger (for example Hypervolt, myenergi, Ohme, Wallbox, Pod Point, Easee) and, if you link it, your energy supplier (Octopus Energy, EDF or E.ON Next). Where you sign in with a password, the password goes from your phone straight to that company, never to us; we keep only the token or API key they give back, encrypted on our server. The one exception is the Duracell Energy app connection: its sign-ins only last about two hours, so, as the Duracell Energy app itself does, we keep your Duracell Energy email (or serial number) and password, encrypted on our server, to sign in again for you. Supplier accounts are only read (your tariff, export rate, free electricity times and when your car is given cheap power); IonVolt never changes anything on them.
• Your energy prices and home: your tariff or the rates you type in, your supplier's name, your battery size and time zone. If you set up Smart charging: your postcode district (the first half of the postcode, never the full postcode), which we turn into your electricity region and the location of the middle of that district, and your solar panels' size, direction and tilt. Used to price your energy, find free electricity times, forecast your solar and plan your battery's charging.
• Automations, Smart charging and Free Hours: the rules you create, Free Hours times you add, and what each one did. Used to run them.
• Notifications: your phone's push notification token and the version of IonVolt on that phone, which alerts you want, and the notifications we've sent you (the newest 200 are kept for the app's notification list). Used to alert you, for example when the battery is low, backup power goes off or free electricity is coming up, and, if you leave News and updates on, to tell you about IonVolt news such as a new feature. The app version tells us which versions are still in use, so we know when an old one can stop being supported.
• Purchases: if you subscribe, the plan, its transaction ID and when it ends, as confirmed by Apple or Google. If we give you a plan free (for example as a tester), the plan, when it ends and a short note of why. If you redeem a tester code, which application it came from, when you redeemed it and whether you use iPhone or Android, so we know when your free time ends. We never see your card or payment details.
• Feedback you send: your message, and a reply address only if you give one. If you leave "Include app and account details" on, also your account email, whether you have a plan, how your house battery is connected, your charger's make, the app version, the kind of phone and its system version, and a short list of what you did in the app recently (screens opened, changes sent and what the house battery said). Never passwords or sign-ins. Feedback is emailed to us and kept so we can reply and fix things. We reply by email, or, if you sent your account details, in the app's notification list.
• Diagnostics you share: when you tap Share Diagnostics (in Settings, or on an error), the app sends us a short report so we can fix what went wrong: the app version, the kind of phone and its system version, how your house battery and charger are connected and whether they're online, when the last readings came, the app's recent activity and errors (with our server's reference for each), a few settings (such as whether changes are allowed, the app's colour and dark or light mode), whether crash reports are on and, if so, this installation's crash report identifier so we can find a matching crash, and any note you add. If you're signed in, it's linked to your account. The app masks it before it leaves your phone, and our server masks it again: never passwords, sign-ins, tokens or keys, never a full serial number (only its last four characters), never your exact location, full postcode or network addresses, and nothing from the requests IonVolt makes to other companies. We use it only to find and fix problems, keep it for 30 days and then delete it; deleting your account deletes it straight away. You're shown a reference (such as IV-7KQ2) to quote if you write to us.
• Usage statistics and crash reports, only if you agree: with your permission, IonVolt sends usage statistics and crash reports to Google Firebase (Analytics and Crashlytics), so we can see which features are used and fix problems. They include the screens opened, a few events (such as a house battery or charger being linked, a setting being changed by name only, or a purchase being started), crash details and the kind of error the app ran into (never its message, which could contain your data), an identifier for this installation of the app, and the phone model, system and app version. They don't include your name, email, address or house battery details, aren't used for advertising, and aren't linked to your account. Both are off until you say yes, and you can turn either off at any time in Settings › Privacy. If IonVolt closed unexpectedly and you haven't turned crash reports off, the app asks once whether to send that one report; the answer only covers that crash.

Tesla Powerwall

If you connect a Tesla Powerwall, you sign in on Tesla's own page and agree to share your energy site's data with IonVolt; we never see your Tesla password. Tesla then gives us a token, which we keep encrypted on our server, to read your Powerwall's live power, battery level, grid status, settings and history, and to change its settings when you ask: the backup reserve, operation mode, Storm Watch, grid charging and export, and the backup reserve while the car guard holds the battery for your car. IonVolt reads each change back from Tesla and lists it under Changes to the house battery. We use this only to run IonVolt for you. You can stop sharing at any time by unlinking it in IonVolt or by removing IonVolt's access in your Tesla account. If you ask us to delete the data we hold from Tesla, or delete your account, we delete it within 28 days, backups included. Tesla's own Customer Privacy Notice also applies.

Your home location

Home can show the weather where you live, with the real sunrise and sunset. When you start using IonVolt it asks once whether you'd like that; you can say not now, and set or remove it at any time in Settings. There are two ways to set it:

• Use my location: your phone asks your permission first (approximate location is enough), then gives IonVolt one location. IonVolt rounds it to about 5 km on your phone straight away; the exact position is never kept or sent anywhere.
• Type a town or postcode: the words you type are looked up to find the place, with Apple Maps on iPhone and Android's own location service (Google) on Android. Only the words you type are sent, not your location.

Either way, only the town's name and its position rounded to about 5 km are kept, on your phone. That rounded position is used only to get the weather. On iPhone it goes from your phone straight to Apple Weather, and Apple Maps is asked once for the name of your town so Settings can show it; if Apple Weather can't answer the phone directly, the iPhone asks through our server instead. On Android it always goes through our server to Apple Weather, because the server holds the key Apple Weather needs, and Android's own location service (Google) is asked once for the name of your town so Settings can show it. Either way, the server uses it only to fetch the weather and doesn't store or log it, and it's never shared for anything else. App lock (Face ID or fingerprint) works entirely on your phone.

The IonVolt Bridge

If you use the IonVolt Bridge, it runs on your home network and reads your house battery directly, without the maker's cloud. It keeps your history on the Bridge and sends the same readings, settings and change log to our server, so the app works away from home and your history is kept if the Bridge is lost. At home the app talks to the Bridge over your own network (your phone asks your permission for this). The Bridge gets its updates from our server. Its SD card download is served by Cloudflare.

Bridge downloads are logged against your account. The Bridge is only for IonVolt customers, so the app asks our server for a download link that lasts 15 minutes, and a paired Bridge proves it's yours to fetch its own updates. Each time, our server records which account it was, when, what was asked for or downloaded (the card, the installer or an update) and your IP address cut to its network prefix (the first three parts of an IPv4 address, the first 48 bits of an IPv6 one), never the full address. We use it to keep the Bridge to IonVolt's customers and to spot links being shared. It's kept for 12 months, then deleted, and it goes with your account if you delete it sooner.

Applying to test IonVolt

If you apply on our testers page, we collect what you put in the form: your name and email address, whether you use an iPhone or Android (and the model, if you give it), where you live, your house battery's maker, model and details and how it connects (and, for a Duracell, which app you sign in to), your EV charger and solar panels, your energy supplier and tariff if you give them, anything else you tell us, and that you agreed to the tester terms and this policy. We also keep when you applied and your IP address cut to its network prefix (the first three parts of an IPv4 address, the first 64 bits of an IPv6 one), never the full address, to stop the form being flooded. The form never asks for a password or key; please don't put one in it.

We use it only to choose testers so we cover as many systems as we can, and to email you about testing: if we pick you, your tester code and how to install the test build. Our legal basis is taking steps at your request before an agreement with you (the tester terms). The form is checked by Cloudflare Turnstile, which looks at your browser to tell people from bots, under Cloudflare's own privacy policy, and is passed through Cloudflare to our server, where it's kept; it's emailed to us as a short summary.

How long we keep it. If we decline your application, it's deleted 30 days after we decide. If we accept it, it's kept while your code can be redeemed and, once you redeem it, while you're a tester; it's deleted 30 days after your code lapses unused or 30 days after your free time ends. An application we haven't answered is deleted after 6 months. Deleting your IonVolt account ends your free time straight away. To have your application deleted sooner, email us at the address below.

Refer a friend

When you use a friend's referral code, we keep who referred whom (as account numbers), when and how (a typed code, a link, or Google Play's install referrer), and a one-way scrambled form of your phone's app identifier, so one phone can't use codes again and again. To know when your friend has paid for 3 months, we keep a record of each subscription payment the App Store or Google Play reports: when, how much and whether it was refunded. Your friend sees how many months you've paid, never your name or email. A customer's referral link shows their first name to the people they share it with. Our legal basis is our legitimate interest in running the scheme fairly. If you delete your account, your code stops working and your phone's identifiers are deleted.

Partners

If you apply to be a partner, we collect what you put in the form: your name, business name, email, phone if you give it, website or channel, how you'd recommend IonVolt, how many systems you install and that you agreed to the partner terms and this policy, with your IP address cut to its network prefix to stop the form being flooded. The form is checked by Cloudflare Turnstile, as for testers. If you become a partner, we also keep your code, the customers you referred (as account numbers; we never show you their names or contact details), the commission on each of their payments, your payouts and statements, and your bank details, which are encrypted with a key kept apart from the data and seen in full only by RizMade when paying you. Your dashboard sign-in links and sessions are kept as one-way hashes. Our legal basis is the partner agreement. We keep payment records for 6 years for HMRC, and a declined application for 90 days.

Who else is involved

• Hetzner hosts our server in Nuremberg, Germany. Nightly backups are kept on the server and copied, encrypted, to Backblaze B2 in the EU (Amsterdam, the Netherlands).
• Your inverter's, charger's and supplier's companies receive the requests IonVolt makes for you with your token, key or (for the Duracell Energy app) sign-in, as their own apps would. Their own privacy policies cover what they do. We also read tariff prices from the public price lists of Octopus Energy, EDF and E.ON Next, which involves no personal data.
• Apple delivers notifications to iPhones, handles App Store subscriptions and Sign in with Apple, and provides the weather and the solar forecast (Apple Weather) and, on iPhone, your town's name and the town or postcode you type to find it (Apple Maps).
• Google delivers notifications to Android phones, looks up your town's name and the town or postcode you type to find it (Android's location service), handles Google Play subscriptions and Sign in with Google, and (Google Firebase) receives the usage statistics and crash reports you agree to.
• Apple Weather receives an approximate location: your home location rounded to about 5 km for the weather on Home, and the middle of your postcode district, also rounded to about 5 km, for Smart charging's solar forecast. NESO (the National Energy System Operator) is asked for your region's grid carbon intensity, and postcodes.io about your postcode district. None of these receive anything that identifies you.
• Apple iCloud Mail sends our emails, such as password reset codes, and receives email sent to our @ionvolt.app addresses, including the feedback you send from the app.
• Cloudflare hosts this website, the Bridge's SD card download and our domain names, and checks the tester form with Turnstile. The website sets no cookies and uses no analytics.

We never sell your data, share it for advertising, or use it to track you across other apps or websites. There is no advertising in IonVolt and no advertising identifier is used. Some of these providers are outside the UK (Apple, Google and Cloudflare are US companies); where your data goes outside the UK, it's protected by the UK's international data transfer safeguards.

Our server

Our server keeps no access logs and doesn't store your IP address; it holds IP addresses briefly in memory only to slow down repeated sign-in attempts. The exceptions are the Bridge download record and tester applications above, which keep only the network prefix. Its short technical logs can include an inverter or charger serial number, but never passwords, tokens or your location.

Legal basis

We use your data to provide the app you've asked for (performance of our contract with you), to keep it secure and working (our legitimate interests), and, for usage statistics and crash reports, only with your consent, which you can withdraw at any time in Settings › Privacy.

Keeping and deleting data

Readings, daily totals and change logs are kept while you have an account, so you can look back over months and years. The record of Bridge downloads is kept for 12 months. Diagnostics you share are kept for 30 days. Usage statistics are kept by Firebase for 2 months and crash reports for 90 days. Feedback is kept until we've dealt with it (at most the newest 2,000 reports).

Your acceptance of our terms. When you accept our terms of use, at sign-up or in the app, we record your account's email address and id, the version you accepted, when, how (sign-up or in the app), and whether it was on iPhone or Android with the app's version. This is our record of the agreement between us, so we can show what you agreed to if there's ever a dispute. Our legal basis is our legitimate interest in being able to establish and defend legal claims. Unlike the rest of your data, this record isn't erased when you delete your account. We keep it for six years after the account is deleted, the time limit for contract claims in England and Wales, and then delete it.

Delete your account in the app (Settings › Account › Manage Account › Delete Account) and your account, your house battery and charger links, the tokens, keys and sign-ins we hold for you, all stored readings, automations, notifications, purchase records, the record of your Bridge downloads and any plan we've given you free, and any feedback sent with your account details are erased straight away (except the record of your acceptance of our terms, kept as described above), and a Sign in with Apple is revoked at Apple. Backups that still contain them are deleted within 14 days on our server and within 28 days off-site. Feedback emails in our mailbox and feedback sent without your account details aren't linked to your account; we'll delete them too if you ask. Deleting your account doesn't cancel a subscription; cancel it with Apple or Google. Unlinking a supplier, house battery or charger deletes the token, key or sign-in we held for it.

Your rights

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable form. Email us at the address below. If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office (ico.org.uk).

Children

IonVolt is meant for the people who run a home's energy system and isn't directed at children under 13.

Security

All traffic is encrypted with HTTPS. Sign-in tokens are kept in your phone's secure storage (the iPhone Keychain, Android's encrypted storage) and only as hashes on our server; tokens, keys and sign-ins for other services are encrypted on our server, and so are our off-site backups.

Changes

If we change this policy we'll update the date above, and tell you in the app if the change is significant.

Contact

Questions or requests: hello@ionvolt.app.