Privacy Policy
Effective & Last Updated: October 6, 2026
Core Privacy Principles
- • Local-First Control: Smart outlet credentials and IP addresses (for Tapo, Shelly, and Home Assistant) are processed exclusively on your local device and are NEVER transmitted to our servers.
- • Automated 24-Hour Purge: When your Fleet Monitoring subscription lapses, all telemetry logs, heartbeat records, and device associations are permanently erased within 24 hours.
- • Full GDPR Rights: You can request immediate manual erasure of your data at any time through our dedicated Data Deletion Request Form.
1. Introduction
This Privacy Policy governs the manner in which Online Battery ("we", "our", or "us") collects, uses, maintains, and discloses information collected from users ("User" or "you") of the Online Battery Android mobile application (the "App") and the website onlinebattery.app (the "Site").
The App is designed specifically for unattended IoT devices (such as repurposed Android smartphones and tablets) to monitor battery state of charge, regulate power via WiFi-connected smart power outlets, and protect against thermal hazards and battery pouch swelling.
2. What Data We Process
A. Free Tier (Local Operation)
When using the App for local battery cycling with your smart power outlets (TP-Link Tapo, Shelly, or Home Assistant):
- Smart plug local IP addresses, device keys, or tokens stay exclusively on your Android device.
- Battery charge percentages and battery temperature sensor data are read locally and never uploaded.
- No personal identifiers or account credentials are collected.
B. Fleet Monitoring Tier (Subscription Service)
If you subscribe to the optional fleet monitoring service, we process:
- Email Address: Used solely to transmit thermal threshold alerts, heartbeat drop notifications, and your assigned Device ID.
- Assigned Device ID: An anonymous pseudonymous token generated at subscription time (e.g.
OB-DEV-XXXXX) used to match heartbeat pings to your alert configuration. - Telemetry Pings: Periodic lightweight heartbeat signals containing battery charge level (%), battery temperature (°C), and timestamp, processed through our edge worker.
3. Third-Party Service Providers
We partner with trusted, GDPR-compliant service providers strictly to deliver necessary application functions:
Handles in-app purchase validation, billing, and subscription renewal status. We never see or store your credit card or financial payment details.
Processes edge heartbeat pings, cron schedules, and device offline detection with high-grade TLS 1.3 encryption.
Transactional email platform utilized to deliver critical temperature alerts, missed heartbeat notifications, and data deletion confirmations.
Hosts the public website, documentation, support portal, and data deletion handler atonlinebattery.app.
4. Data Retention & Automated Purge Policy
In strict compliance with GDPR Article 5(1)(e) (Storage Limitation):
5. Your GDPR Rights & How to Request Immediate Deletion
Under European data protection laws (GDPR), you hold specific rights regarding your personal data:
- Right to Erasure (Article 17): Request permanent deletion of all stored data at any time.
- Right of Access (Article 15): Request a copy of all information held associated with your Device ID.
- Right to Restriction of Processing (Article 18): Cease telemetry ingestion.
Exercise Your Right to Erasure
You do not need to wait for your subscription to expire. Submit your registered email address and assigned Device ID through our Self-Service Data Deletion Portal, or email us at support@onlinebattery.app.
6. Children's Privacy
The App and Site are not directed to persons under the age of 16. We do not knowingly collect personally identifiable information from children.
7. Contact the Data Controller
For questions regarding this policy or our data practices: