1. Introduction
Welcome to Charge2Save ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "App").
By using our App, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our App.
2. Information We Collect
2.1 Account Information
When you create an account or sign in through our authentication provider (Auth0), we collect:
- Email address — Required for account identification and communication
- Name (optional) — First and/or last name if provided during registration
2.2 Charging Card Information
When you link charging cards to your account:
- Card identifier — We store a cryptographic hash of your charging card number, not the actual card number itself
- Card name — A friendly name you assign to identify your card
2.3 Charging Session Data
When you use a charging station linked to our platform:
- Session start and end times
- Energy consumed (in Wh/kWh)
- Credits earned from the session
- Location of the charging station used
2.4 Transaction Data
When you earn or spend credits:
- Credit balances
- Payment/redemption history
- Reward purchases
2.5 Device Permissions
Camera Access: Our App requests camera access solely for the purpose of scanning QR codes. We do not capture, store, or transmit any images or video. The camera is used in real-time to decode QR codes, and the decoded URL is used only to navigate within the App. No visual data from the camera is ever saved or sent to our servers.
Location Access (Optional): If you grant permission, we use your location to show nearby charging stations and partner organizations on a map. On Android, location permission is also technically required by the operating system to scan for available Wi-Fi networks (see Wi-Fi Access below). Your location data is not stored on our servers — it is used only in real-time to query nearby locations and display them in the App.
Wi-Fi Access (Kiosk Mode Only): When the App is deployed in kiosk mode on a dedicated device, it can scan for available Wi-Fi networks and connect to a selected network. During scanning, the App temporarily accesses a list of nearby network names (SSIDs) and signal strengths to display them to the administrator. This data is used only in real-time on the device to present connection options and is not stored or transmitted to our servers. Wi-Fi passwords entered by the administrator are used solely to establish a connection and are not sent to our servers.
NFC / RFID Access: Our App uses NFC (Near Field Communication) to read charging card identifiers when you tap your card on the device. Only the card's unique identifier is read — no other data stored on the card is accessed. The identifier is processed as described in section 2.2 (Charging Card Information).
Kiosk / Device Administration Mode: When deployed on a dedicated device, the App may operate as a device owner (device administrator) to enable kiosk mode. In this mode, the App is locked as the primary application on the device, launches automatically on boot, and can manage device settings such as Wi-Fi connectivity. This mode is configured by the device administrator and is not activated on personal devices. No additional personal data is collected through kiosk mode functionality.
2.6 Automatically Collected Information
When you use our App, we may automatically collect:
- Device type and operating system
- App version
- Anonymous usage statistics to improve the App
3. How We Use Your Information
We use the information we collect to:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide and maintain the App | Contract performance |
| Process your charging sessions and credits | Contract performance |
| Authenticate your identity | Contract performance |
| Show nearby charging stations | Consent (location permission) |
| Enable QR code scanning | Consent (camera permission) |
| Scan Wi-Fi networks and establish connections (kiosk mode) | Legitimate interest (device operation) |
| Read charging card identifiers via NFC | Contract performance |
| Operate in kiosk / device administration mode | Legitimate interest (device operation) |
| Communicate with you about your account | Contract performance / Legitimate interest |
| Improve our services | Legitimate interest |
| Comply with legal obligations | Legal obligation |
4. Data Sharing and Disclosure
We do not sell your personal information. We may share your information with:
4.1 Service Providers
- Auth0 — For secure authentication and identity management
- Cloud hosting providers — To store and process data securely
4.2 Partner Organizations
If you earn or redeem credits at a partner organization's location, that organization may receive limited information necessary to process the transaction (e.g., credit amount, transaction timestamp). They do not receive your personal account details unless required for the specific transaction.
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to valid requests by public authorities.
5. Data Retention
We retain your personal information for as long as:
- Your account is active
- Necessary to provide you with our services
- Required by applicable laws (e.g., for accounting or tax purposes)
You may request deletion of your account and personal data at any time by contacting us. Some data may be retained in anonymized form for statistical purposes.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Encryption of data in transit (HTTPS/TLS)
- Secure hashing for card identifiers
- Access controls and authentication for our systems
- Regular security assessments
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
Under the GDPR, you have the following rights:
- Right of Access — Request a copy of your personal data
- Right to Rectification — Correct inaccurate personal data
- Right to Erasure — Request deletion of your personal data
- Right to Restrict Processing — Limit how we use your data
- Right to Data Portability — Receive your data in a portable format
- Right to Object — Object to certain types of processing
- Right to Withdraw Consent — Withdraw consent at any time
To exercise any of these rights, please contact us using the information provided below.
8. Children's Privacy
Our App is not intended for use by children under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that we have collected personal information from a child under 16, we will take steps to delete that information.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
10. Third-Party Links
Our App may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy in the App and updating the "Last updated" date at the top of this page. We encourage you to review this Privacy Policy periodically for any changes.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:
Charge2Save
Email: [email protected]