This policy explains how Electrify Everything Now Ltd, trading as Anode ("Anode" or "we") handles your personal data when you use the Anode app on Android or iPhone, or the Anode Management Portal (AMP) at amp.anode.energy. We are responsible for that data (its "controller").

Registered in England and Wales, company number 16014266. Registered office: Unit 16 Severn Business Park, Upton On Severn, Worcester, WR8 0LX.

For questions about your data, or any of the requests below, email support@anode.energy.

• Your account: email address, password (stored only as a hash), name, phone number if you give one, and two-step sign-in settings.
• Your home: address and postcode, your distribution network region, and your cheap-rate hours. Installers record the address when they commission a system.
• Your system: your hub, Batris and meters, the names you give them, their settings and schedule, and their readings: power, energy, battery charge and status. Readings show how your home uses energy, and so can show when it is occupied.
• Activity: a log of changes made to your system, such as overrides, schedule and setting changes and software updates, and who made them (you, your installer or our support team).
• Your phone, if you use the app: a push notification token so we can send the alerts you choose, and your alert settings.
• Connected services you set up: details for the Octopus Energy integration, and API keys you create (for example for Home Assistant).

We don't use advertising, analytics or tracking, in the app or on the web.

• Camera: used only to read the barcode on your hub's label. The image is read on the phone and never saved or sent. The barcode reader, Google's ML Kit, sends Google diagnostic and usage data about itself: the phone's make, model and Android version, the app's name and version, how fast and how often it reads codes, any errors, and an identifier for this installation of the app that doesn't identify you or your phone.
• Location permission: Android requires it to look for and join your hub's Wi-Fi during setup. The app never reads your location.
• Home-screen widget: keeps a copy of your latest battery level and next charge on the phone so it can show them.

• To run the service you signed up for: show your system, carry out the changes you ask for, run your schedule, and send the alerts you turn on. (Legal basis: our contract with you.)
• To show the grid's carbon intensity for your area: we send the first half of your postcode to the Carbon Intensity API (carbonintensity.org.uk). (Contract.)
• To let your installer, and our support team when you or your installer ask for help, look after your system. (Contract, and our legitimate interest in keeping systems safe and working.)
• To keep accounts secure, with sign-in codes, two-step sign-in and emails about changes to your account. (Legitimate interests.)
• To keep records of grid connection and export settings that we may need to show to your network operator. (Legal obligation and legitimate interests.)

• Your installer: the installer who commissioned your system can see and manage it.
• Our support team: only when looking into a problem, and each look is recorded in your system's activity.
• Services that run things for us: DigitalOcean, in London, for our servers; an email delivery provider for account emails; Expo, Google (Firebase) and Apple to deliver push notifications; and the Carbon Intensity API for regional grid data. They only use the data to provide their service to us. Some are based outside the UK, and we rely on the UK's adequacy rules or standard contract clauses for those transfers.
• Services you connect: Octopus Energy, if you turn on that integration, and anything you give an API key to.

We don't sell your data or share it for advertising.

• Your account, for as long as you have it. Deleting it removes your account details, signs out every device and removes their push tokens, and releases and resets your hub.
• Readings belong to the hub that recorded them and stay with it. If the hub later belongs to someone else, they may see readings from before they had it, marked as possibly incomplete.
• Activity: power changes for 30 days, schedule changes for 90 days, settings and other changes for a year. Records of grid connection and export settings, address and ownership changes, and software updates are kept indefinitely, as they may be needed as evidence.

How to delete your account, and what is deleted or kept, is on Delete your Anode account. You don't need to sign in to read it.

You can ask for a copy of your data, ask us to correct or delete it, object to or restrict how we use it, or ask for it in a portable form. To delete your account, see Delete your Anode account. You can turn alerts off in the app or in your phone's settings at any time.

If you're unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner's Office (ico.org.uk).

Anode accounts are for adults; the service isn't aimed at children.

AMP uses one essential cookie to keep you signed in. It lasts until you sign out or your session expires, and only Anode uses it. The app keeps the same sign-in securely on your phone instead. We don't use tracking, analytics or advertising cookies. If you decline the cookie, you won't be able to sign in to AMP.

We will update this page when what we collect or how we use it changes, and change the date at the top.