Privacy Notice App - "HG Power"

Last updated: August 2026

1. Scope

This privacy notice applies to the „HG Power“ mobile app (iOS and Android) provided by HGPower GmbH. It describes which personal data is processed when you use the app.

For the website hgpower.de, the privacy notice and imprint published there apply additionally.

2. Controller

HGPower GmbH
Ballenberger Weg 8
97944 Boxberg
Germany

Contact (including privacy requests):
Email: info@hgpower.de
Phone: +49 7930 9936 220

3. Quick overview

• We process personal data only to the extent necessary to provide and operate the app.
• Data is transmitted securely (HTTPS/TLS).
• We do not share data for marketing purposes.
• The app does not use tracking and does not create advertising profiles.
• The app is not specifically designed for children.

4. Data we process

4.1 Account data

For authentication and account management, we process e.g.:

• Email address
• Username
• Display name

4.2 Device and operational data

To provide app features, we process e.g.:

• Device identifiers
• Status and measurement values of your heat pump
• Configurations
• Fault messages

4.3 Technical metadata

For operational security and troubleshooting, we process e.g.:

• App version
• Timestamps of API requests

4.4 Location name (optional)

You may optionally enter a location name (e.g., a city) to display outdoor temperature. Coordinates are derived from this and transmitted to weather services (see section 6).

4.5 What we do not process

• No profile image upload in the app
• No continuous GPS location data transmitted to our servers
• No push tokens transmitted to our servers (notifications are generated locally on the device)
• No advertising and no sale of personal data

5. Data stored locally on your device

The following data is stored only on your device:

• Login credentials and session information – encrypted (e.g., in secure device storage)
• Optional device label (e.g., “Basement”) – local only, not transmitted to our servers
• App settings (e.g., language, theme)

• Intermediate states for fault notifications

6. Weather data

To display outdoor temperature, the app may use a location name entered by the user (e.g., in the device or location field).

• This location name is transmitted to Open-Meteo (open-meteo.com) to retrieve coordinates and current temperature values.
• If Open-Meteo is unavailable, MET Norway may be used as a fallback.
• No continuous GPS location data from the device is transmitted to our servers.
• Data processed includes: entered location name, derived coordinates, and the retrieved temperature value.

Legal basis: Performance of contract and/or legitimate interest in providing the outdoor temperature display (Art. 6(1)(b) and/or (f) GDPR).

Attribution: Weather data by Open-Meteo. Fallback: MET Norway.

7. App permissions

The app requests only permissions required for certain features. You can change permissions anytime in your device settings; some features may then be limited.

Bluetooth

Bluetooth is used to find nearby heat pumps, configure them, and connect them to WiFi where applicable.

Location (for device discovery)

On Android and iOS, location access (e.g., “While in use”) may be required by the platform to scan for Bluetooth or WiFi devices.

• We do not use location data to build movement profiles.
• No GPS location data is transmitted to our servers.
• Access is used only for technical device discovery.

Notifications (optional)

If enabled, the app can notify you locally about faults. The app polls the server at regular intervals for this purpose.

• No push tokens are transmitted to us.
• Notifications can be disabled in your device settings.

8. Purposes and legal bases (GDPR)

9. Recipients and processors

We use technical service providers to deliver the app services:

• NewNTide – processor operating the cloud and API infrastructure
• Open-Meteo and, if applicable, MET Norway – independent providers for weather data (location name and coordinates, see section 6)

These providers are contractually bound and receive personal data only to the extent necessary to operate the app.

Processing takes place primarily within the EU. If, in exceptional cases, data is transferred to third countries, we ensure appropriate safeguards (e.g., Standard Contractual Clauses).

10. Retention

We keep data only as long as necessary for the stated purposes or as required by law.

• Account data is stored until account deletion.
• After you delete your account in the app (under “Personal Data”), data is deleted or anonymized where possible unless legal obligations require retention.

11. Your rights

You have the right to:

• Access your stored data
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Withdraw consent at any time with effect for the future (e.g., by disabling permissions in device settings)
• Object to processing based on legitimate interests on grounds relating to your particular situation (Art. 21 GDPR)

Contact to exercise your rights:
info@hgpower.de

Right to lodge a complaint:
You have the right to lodge a complaint with a data protection authority, e.g., the competent authority in Baden-Württemberg, Germany.

12. Children

The app is not directed at children under 16. We do not knowingly collect personal data from children.

13. Changes to this notice

We may update this privacy notice as needed, e.g., when app features or legal requirements change. The current version is available at this URL. The date stated above applies.