Privacy policy
Cenit · Solar monitoring and stats
The short version: your solar readings, your consumption and your inverter passwords stay on your phone. I have no server to keep them on and no way to see them.
The only thing that can leave your phone is one anonymous piece of data, and only if you agree to it: which inverter brand you chose, whether it managed to connect and, when syncing fails, what kind of error it was. You can turn it off whenever you want in Settings.
Who is responsible
Hrvoje Matosic, independent developer. Contact: privacidad@hrvojematosic.com.
What stays on your phone
All of this lives only on your device and is never sent to me:
- Your inverter credentials (NEP, SolarEdge, Enphase, Growatt, APsystems). The system encrypts them: in the Keychain on an iPhone, and with an Android Keystore key that never leaves the phone on Android.
- Your generation readings, panel by panel, in an SQLite database inside the app.
- Your consumption, your tariffs and your CFE bill readings, which you enter for the DAC calculation.
- Your preferences: theme, type of home, vehicle name.
- The photo of your bill, if you scan one. The text is read on the phone itself and the photo isn't uploaded anywhere.
On Android, Cenit stays out of Google Drive backups. If you move to a new phone by cable or Wi-Fi, your settings and history come along, but your passwords don't: you enter those again.
One exception: if you search for your location in Settings, what you type goes to the system's map search (Apple's on an iPhone, Google's on Android) to find the place. It doesn't reach me.
When Cenit connects to your inverter's cloud, it goes straight from your phone to that brand's server, with your own credentials. I'm not in the middle and I don't see that data. What that brand does with it is governed by their privacy policy, not this one.
What can leave, and only if you agree
The app asks you once whether you want to send anonymous usage. If you say yes, every time you try to connect an inverter, and at most once a day when an account that's already connected stops syncing, exactly this is sent:
| Data | Example | What for |
|---|---|---|
| Brand | growatt | To know which brands people use |
| Result | ok, auth, shape | To know which ones are breaking |
| Stage, only when syncing failed | refresh, backfill | To know which part to fix |
| App version | 1.0.0 | To know from which version |
| Country | MX | To know which countries it works in |
If anonymous usage is off and syncing fails, the app offers a button to send that one report, with the same data. It only goes out if you tap it.
And nothing else. No identifier is sent: not your name, not your email, not your inverter account, not the IDFA, not the IDFV, not the Android advertising ID, not an install identifier, not your location any more precise than the country, and not the exact time. There's no way to link two of these events to each other, let alone to you. That's why the App Store shows it as “Not Linked to You”, and Google Play as optional app activity that isn't shared with anyone.
These counts arrive at a server of mine on Cloudflare Workers and delete themselves after three months.
How to turn it off
Settings → Privacy → Send anonymous usage. It comes switched off, and that same switch turns it off again. The whole app works the same, on or off.
What I don't do
- I don't sell or share data with anyone.
- There are no ads and no third-party trackers.
- There are no third-party analytics SDKs inside the app.
- I don't track you across apps or websites, so your phone never asks you for tracking permission: there's nothing to track.
- There are no Cenit accounts. I never ask you for an email or a password of mine.
Your rights
Under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares), you have ARCO rights: to access, rectify, cancel or object to the use of your personal data, and to revoke your consent.
In practice this is almost immediate, because your data is on your phone:
- Access and rectification: everything is inside the app.
- Cancellation: deleting the app deletes the database and the stored credentials. No copy is left anywhere.
- Objection and revocation: the switch in Settings.
If you'd still like to exercise them in writing, email me at privacidad@hrvojematosic.com and I'll reply. Keep in mind that the anonymous counts carry no identifier, so there's no technical way to find “yours” among them.
Children
Cenit isn't aimed at children under 13 and doesn't knowingly collect data from them.
Changes
If this changes, I update this page and the date below. If I ever were to collect something new, I'd ask you inside the app before doing it, same as now.