Privacy Policy · MissingBolt

This Privacy Policy explains how MissingBolt ("we", "us") handles personal data when you use the AprEvse app, this website, or contact us for sales and support. We collect only what we need to run the service and support your charger. We do not sell your data, do not use it for advertising, and do not send marketing messages.

Who we are

The data controller is MISSINGBOLT , trading as MissingBolt, Portugal. Contact: [email protected].

What we collect, and why

Your account. Your email address or Telegram account, used to sign in, and the name and profile picture you choose to add. Needed to provide the app (contract).
Your chargers. Device name, serial number, MAC address, firmware version, and the settings you configure: charging limits, tariffs, solar region, and optionally a location name and address. Needed to operate and control your chargers (contract).
Charging history. Charging sessions, energy, power and meter readings recorded by your charger, shown to you as charts and statistics (contract).
Notifications. If you enable them, a push token for your phone or browser, used only to send you alerts about your charger (contract).
Support conversations. Messages you send us by email, to our Telegram bot or in our Telegram groups, with your display name, username and any attachments. Used to answer you (steps taken at your request, or our legitimate interest in replying to enquiries).
Customer record. If you buy from us or ask for help, we may keep your name, contact details, installation address and notes about your installation, so we can quote, install and support your charger (contract, or steps at your request).
Sales, repairs and warranty. What was sold, when, and any faults and repairs on each unit. We keep these to honour the warranty and to find defects affecting other units (legitimate interest in product safety and warranty).
Diagnostics. App crash reports (app version, phone model, OS version, error details) and charger logs, used to find and fix problems (legitimate interest). They contain no advertising identifiers.

The app does not track your location, read your contacts, or collect browsing activity, and we use no third-party analytics or advertising trackers.

Website analytics

This website counts page views and clicks using our own endpoint on our hosting provider (Cloudflare). We record the page, language, referring site, campaign tags, country and whether the device is mobile or desktop. There are no cookies and nothing is stored on your device.

Repeat views are counted with a hash of your IP address and browser that we rotate every day: the IP address itself is never stored, and the hash cannot be linked back to you or followed across days. If you start a chat with us from a link on this site, that link carries a short random reference so we can see which page and campaign it came from. Analytics data is aggregated, kept for at most 90 days, never sold, and never shared with advertisers.

When a charger changes hands

Charging history is recorded against whoever holds the charger in the app, for the period they hold it.
Releasing a charger in the app ends your holding period. You can choose to erase your charging history when you release it; this option is on by default.
The next holder only sees history recorded from the moment they add the charger. They never see yours, whether or not you erased it.
Warranty is tracked against the charger, not the person. It carries over to the next holder and survives the deletion of your account or customer record.

How long we keep it

Account: while it is active. Sign-ups never confirmed are deleted after 1 hour; accounts with no charger are deleted after 14 days.
Charging history: detailed data for 90 days, hourly summaries for 2 years. You can erase it at any time in the app.
Diagnostics: 30 days.
Support conversations not linked to a customer: 12 months after the last message.
Customer record and its conversations: while we have a relationship with you — you hold one of our chargers, or have an open order, repair or request. Once none of these apply, we review and delete it after 24 months without contact.
Sales, repair and warranty records: kept for the life of the product, without your name once your customer record is deleted.
Backups: kept for 30 days. If we ever restore one, any deletion made after it was taken is applied again.
Website analytics: at most 90 days.

Service providers

We run our own systems and use providers only to deliver the service:

Hosting providers for our servers.
Cloudflare for this website, its analytics and backup storage.
SMTP2GO for email delivery, including sign-in codes.
Telegram, if you sign in with Telegram or message us there. Telegram keeps its own copy of your messages under its own privacy policy.
Expo, Google and your browser's push service to deliver notifications, if you enable them.

Some of these providers process data outside the European Economic Area. Where they do, the transfer relies on the safeguards they offer, such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We may also disclose information if required by law.

Storage and security

Sign-in tokens are kept in your device's secure storage (Keychain on iOS, Keystore on Android). Server-side data is held on secured infrastructure and encrypted in transit.

Your rights

You can ask for access to your data, a copy of it, its correction or deletion, or restrict or object to how we use it. Write to [email protected]; we answer within one month. Your app account and charging history can also be deleted directly in the app. See Delete your account for the steps.

You can also complain to the Portuguese data protection authority, the CNPD (www.cnpd.pt).

Children

AprEvse is not directed to children and we do not knowingly collect data from them.

Changes

We may update this policy and will revise the date above when we do.

Contact

MISSINGBOLT (MissingBolt), Portugal — [email protected]