Privacy Policy
Last updated: October 20, 2026
1. Who we are
EnergyHUD is operated by Danbridge LLC, 439 N Liberty Keuter Rd, Lebanon, OH 45036. Questions about this policy go to privacy@energyhud.app.
2. What we collect
When you create an account we store:
- Your Tesla user ID
- Email address and name, collected at onboarding
- Preferences (theme, units, currency, timezone, electricity rate, refresh interval, notification choices)
- Dashboard layout
- Tesla energy site ID, site name, and a cached copy of the site configuration
- Stripe customer ID, subscription ID, subscription status, and the current billing period end
- Your Tesla access and refresh tokens, encrypted (see below)
- For each TV you pair: the name you give it, the energy site it shows, when it was paired, and when it last checked in
Tesla tokens. When you sign in, Tesla gives us OAuth tokens that let us read your energy data and send the Powerwall changes you request. We store them in our database encrypted with AES-256-GCM, and only our servers can decrypt them. They are never sent to your browser or to a paired TV, and your session cookie does not contain them. Our servers refresh them with Tesla as needed.
Paired TVs. When you approve a TV at /tv, the TV receives its own device token. That token can only read live energy data for the site you chose. It cannot change Powerwall settings, billing, or your account. We store only a one-way hash of it. You can remove a TV at any time in Settings → Paired TVs, and it stops working immediately.
Energy readings (live power and history charts) are fetched from Tesla when you open the dashboard. We do not store those readings in our database.
Analytics, when you have not opted out, include pages viewed, clicks, device and browser information, and session recordings. Form inputs are masked in those recordings.
2a. The Apple TV app
The EnergyHUD Apple TV app shows the live energy view for a site on your account. It works only after you pair it at /tv while signed in. For each paired TV we store:
- A device ID that we generate when you pair the TV. It is not a hardware or advertising identifier.
- Your EnergyHUD user ID (your Tesla user ID), which links the TV to your account
- The device name the TV reports, or the name you give it when you approve it
- The energy site it shows, when it was paired, and when it last checked in (updated at most once a minute)
- A one-way hash of the TV's device token, and the date you removed it, if you did
This data is linked to your account and used only to make the app work: showing your live data, listing your TVs in Settings → Paired TVs so you can remove them, and checking that your Pro subscription is active.
- No tracking. We don't use this data to track you across apps or websites, and we don't share it with data brokers.
- No ads, and no third-party analytics or advertising SDKs in the TV app.
- Energy readings are fetched from Tesla each time the TV refreshes and passed straight to the TV. We don't store them, and the TV app doesn't save them.
- We don't store your TV's IP address in our database or link it to your account. Our rate limiter may hold it for up to 20 minutes, and our host's standard request logs (Vercel, section 4) record it.
3. How we use it
- Sign you in and show your energy dashboard
- Remember preferences and dashboard layout
- Bill for the Pro plan and send account and billing email
- Understand how the product is used and fix problems
- Respond to support and privacy requests
4. Service providers
| Provider | Purpose | Data |
|---|---|---|
| Tesla | Fleet API energy data and sign-in | Tesla account identity, site data, and live energy readings |
| Vercel | Hosting, KV rate limiting, and logs | Request logs and rate-limit counters |
| Prisma (Prisma Data Platform) | Postgres database and connection pooling | Account records, encrypted Tesla tokens, paired-TV records, and cached site configuration |
| Stripe | Payments. We never see full card numbers. | Email, customer ID, subscription ID, and billing status |
| Resend | Transactional email | Email address and the content of account and billing messages |
| PostHog | Product analytics and session recording, with inputs masked | Pages, clicks, device and browser details, and session recordings |
You can opt out of PostHog analytics and session recording in Settings → Preferences.
5. Cookies and local storage
- NextAuth session cookies keep you signed in. The session cookie is http-only.
- PostHog uses localStorage and a cookie for analytics, unless you opt out.
- Your theme choice is stored in localStorage on this device.
6. Retention and deletion
We keep account data while the account is active. Email privacy@energyhud.app to request deletion. We complete deletion requests within 30 days, including your encrypted Tesla tokens and paired TVs. Stripe keeps billing records as required by law.
- Unused TV pairing codes expire after 10 minutes and are deleted within a day.
- A removed TV's record is deleted 30 days after you remove it.
- If you revoke this app's access in your Tesla account, our stored tokens stop working. We delete them along with the account, or sooner on request.
7. Your rights
You can ask to access, correct, or delete the personal information we hold. Email privacy@energyhud.app.
California residents: we do not sell personal information, and we do not share it for cross-context behavioral advertising. You may request access or deletion as described above.
8. Children
EnergyHUD is not directed to children under 13, or under 16 where that is the local age of digital consent. We do not knowingly collect their personal information.
9. Changes
We will update this page when the policy changes. Last updated: October 20, 2026.