Privacy Policy

1Who we are

Sunpitch (“the app”) is a solar panel planner for Android. You describe a site and its panel arrays, and the app estimates the energy a typical year would yield, shows the Sun’s path against your horizon, and compares the numbers you enter for a string of modules with an inverter. It is developed and published by Zydeno (“we”, “us”, “the developer”), an independent developer. For anything related to privacy, write to support@zydeno.com. More about us: zydeno.com.

2Scope of this policy

This policy covers the Sunpitch Android app distributed through Google Play. It explains what the app stores, what it sends over the internet and to whom. It does not cover Google Play and Android themselves, the services the app contacts (they have their own policies, linked in §7), or the apps you choose to save a file to or open a file with (a cloud drive, a file manager, a PDF viewer). For Google, see the Google Privacy Policy.

Our Terms of Use describe the rules for using the app.

3What the developer does not collect

Zydeno has no servers for this app and no account system. The developer does not receive or store any personal data about you through the app. The only exception is an e-mail you choose to send us yourself (see §8). The two public services the app contacts are independent from us (§7); we do not receive copies of those requests or their logs. In particular, the app:

• has no account, sign-in, e-mail or phone-number field;
• never connects to a Zydeno server. The privacy and terms pages open in your browser; the app itself does not contact zydeno.com;
• contains no advertising, analytics, attribution or crash-reporting SDKs. The app has no ads and no analytics;
• does not use the Android advertising ID (the permission is removed from the app) and does not create or send any device or user identifier;
• does not track you across other apps or websites, and does not use cookies;
• does not use your camera, microphone, contacts or calendar, does not read the clipboard, and does not read your photos or files on its own;
• does not use precise (GPS) or background location;
• does not sell or rent personal information, and does not share it with anyone for advertising or for any purpose other than the data requests described in §5.

4Data on your device

Everything you create in Sunpitch lives in the app’s private storage on your phone:

• Sites: the site name you type or pick from a search result, its coordinates (rounded to three decimals, about 100 m) and time zone, obstacles you add to the horizon, and the variants you compare: panel arrays (power, tilt, direction, losses), inverters, string settings and the module and inverter values you type in;
• Cached solar and temperature data: the answers downloaded for each site (typical year, monthly means, terrain horizon, reference yield, temperature record), kept with the source, database name and download date so the app works offline afterwards. The cache is separate from your site data and is not part of your data export;
• Settings: units for each quantity, number format, app language, theme, paper size, haptics and similar preferences;
• An undo copy: after you import a data backup, the app keeps the previous state of its data in a private file so you can undo the import. It is removed when you undo, import again or use “Delete all data”.

The built-in demo site uses a small data snapshot bundled inside the app. Opening it makes no internet request.

To choose sensible defaults, the app reads the country code of your SIM card and mobile network (if any) and your phone’s region setting, and uses it on the phone only to preselect measurement units and paper size. This needs no permission, nothing is sent anywhere, and you can change every unit in Settings.

Sunpitch opts out of Android cloud backup and device-to-device transfer, so its data is not copied to your Google account or to a new phone automatically. To move your data to another phone, use “Export data” and “Import data” in Settings (§9). Haptic (vibration) feedback uses the phone’s standard touch feedback, needs no permission and collects nothing.

5Internet requests: what is sent, to whom

Sunpitch has the Android INTERNET permission and uses it for exactly the requests below. Every request is an HTTPS GET made by the app itself (not through a web view). Requests are made only when you act (create or open a site whose data is not cached yet, tap refresh, type in the place search, tap “Check with PVGIS”). The app makes no requests in the background and none on a schedule.

As with any internet request, the receiving servers also see your IP address and the request details your phone sends (for example the app name and version in the user-agent string, Sunpitch/<version> (Android), and the time). Sunpitch does not add any account, device or advertising identifier, and does not send site names, project names or your other settings. If a service is busy, the app waits and retries a few times.

The responses are stored in the cache on your phone (§4) so the app does not need to ask again.

Because these requests leave your phone and go to independent services, the app’s Google Play Data safety section lists location (precise and approximate) and in-app search history as data that is collected and shared, for app functionality only. That data goes to PVGIS and Open-Meteo as described above; none of it goes to Zydeno.

6Location

Sunpitch declares only the ACCESS_COARSE_LOCATION permission (approximate location). It is requested only when you tap “Use approximate location” on the New site screen, after the app explains why. If you decline, search and typing coordinates still work.

• The location fix is read from Android’s location service on the phone. The app uses it only to create the site, rounding it to three decimals. The raw fix is not stored, not sent anywhere and not logged by us.
• The site coordinates that result (whether from the button, a search result or typing) are then used for the requests in §5, rounded as stated there. Those coordinates are in effect the location of the place you are planning, which may be your home. Do not create a site at a place whose location you do not want the services in §7 to receive.
• Android itself, or the location provider your phone uses, may process your location according to your phone’s settings. That is outside the app and described in your phone maker’s and Google’s policies.
• The app never reads location in the background and never uses precise (GPS) location.

7The services the app contacts

These services receive the data listed in §5 when you use the matching feature. They act independently of Zydeno and under their own terms. We do not control them, and we cannot see, change or delete what they log.

According to Open-Meteo’s published terms, it may collect technical information such as IP addresses and request URLs to operate and protect its service. PVGIS is operated by an EU institution, which may log requests under its own privacy policy. Check their pages for current details; we do not receive these logs.

Data attributions shown in the app: solar data from PVGIS © European Union (JRC); weather data by Open-Meteo.com, which contains modified Copernicus Climate Change Service information; place names from GeoNames (CC BY 4.0). Neither the European Commission nor ECMWF is responsible for any use made of the Copernicus information it contains. These sources only supply data; none of them endorses Sunpitch.

8Files you export and import

Sunpitch hands a file to Android only after you tap an export action, and reads a file only after you pick it:

• PDF report: written to the place you choose in Android’s system “save as” picker. It contains what is in your site: the site name, coordinates rounded to three decimals and time zone, arrays and losses, monthly results, obstacles, the string check with the values you entered, source and date notes for the solar data, and a calculation disclaimer;
• CSV of hourly values: the hourly output of a typical year, computed by the app, with a header that carries the data attributions and the site name. It contains no coordinates and no raw PVGIS or Open-Meteo data series;
• Data backup (JSON): all sites, variants and settings in one file you keep yourself. It does not include the cached API answers;
• Import: importing a data backup reads only the one file you select. It replaces the current data; the previous state is kept as an undo copy (§4);
• Support e-mail: “Support” opens your e-mail app with a new message addressed to support@zydeno.com and the app name as the subject. Nothing is attached: no site, setting or device information. You write the message and it is sent only if you send it yourself;
• Links: Privacy, Terms and data-source links open in your web browser; from then on the browser handles the connection.

The app has no storage permission. The system file picker may offer locations provided by other apps, for example a cloud drive. If you save a file there, that app’s own privacy policy applies. Once a file leaves the app, we cannot see or control it, so think about who receives the files you export.

9Backup and deletion

• Export data (Settings, Your data) saves all sites, variants and settings in one file you keep; Import data restores it on this or another phone.
• Delete one site or variant inside the app at any time.
• Clear cached data (Settings) removes the downloaded solar and temperature answers. They are downloaded again the next time you open a site.
• Delete all data in Settings removes all sites, the undo copy and the cache, and resets the settings. The app offers to export a copy first. Deleted data cannot be recovered by us, because we never had a copy.
• Uninstalling the app removes its data from your phone. Files you exported yourself stay where you saved them; delete those separately.
• Requests already received by PVGIS or Open-Meteo cannot be deleted from inside the app. If you want to ask them about logs, use the contact details in their policies (§7).

10Legal bases for processing

Where the EU or UK GDPR, or a similar law such as the Swiss FADP or Brazil’s LGPD, applies, these are the legal bases for the limited processing described in this policy:

The app makes no automated decisions that have legal or similarly significant effects on you, does not build a profile of you and does not process special categories of personal data.

11Retention

Data in the app stays on your device until you delete it or remove the app. We keep nothing from the app, because we receive nothing from it. If you e-mail us, we keep your message only as long as needed to answer it and fix the problem, and you can ask us to delete it at any time. Retention by PVGIS and Open-Meteo is set by those services under their own policies.

12Your privacy rights

Privacy laws in many countries give you rights over your personal data. Because Sunpitch keeps your data on your phone and the developer does not receive it, most of these rights are in your own hands: you can view, correct, export and delete everything in the app (§9) and withdraw permissions in Android Settings. For data you have sent us, such as e-mails, write to support@zydeno.com.

Data that the app sends directly to the services in §7 is held by those services, not by us. We cannot see or delete it. To exercise your rights over it, contact them using the links in §7; we will help where we reasonably can.

EU and UK representative. The individual developer does not process personal data of people in the EU/EEA or the UK except occasional e-mails you choose to send to support. This occasional processing does not involve large-scale processing of special-category or criminal-offence data and is unlikely to result in a risk to your rights and freedoms. Under Article 27(2)(a) GDPR and Article 27(2)(a) UK GDPR, it does not require an EU or UK representative, so none is appointed. Contact us directly at support@zydeno.com; you can also complain to your local supervisory authority.

Rights by region. A summary; the law where you live decides the details.

• European Union, EEA, United Kingdom and Switzerland (GDPR, UK GDPR, Swiss FADP): access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, withdrawal of consent at any time, and complaint to a supervisory authority, for example in the country where you live or work (in the UK, the Information Commissioner’s Office).
• United States (California CCPA as amended by the CPRA, and the comprehensive privacy laws of other states such as Virginia, Colorado, Connecticut, Texas and Oregon): to know and access, delete, correct and port personal information; to opt out of its sale or sharing, of targeted advertising and of profiling; to limit the use of sensitive personal information; to appeal a refusal; to use an authorised agent; and not to be discriminated against for using these rights. Notice for California residents: in the last 12 months the developer has not collected personal information through the app, other than e-mails you chose to send us. Data the app sends directly from your device to the independent services described in §7 does not reach us. We have not sold or shared personal information, and we do not use sensitive personal information. Global Privacy Control signals are honoured where the law requires; today there is nothing to opt out of.
• Canada (PIPEDA and provincial laws, including Québec’s Law 25): access, correction and withdrawal of consent; complaints to the Office of the Privacy Commissioner of Canada or, in Québec, the Commission d’accès à l’information.
• Brazil (LGPD): confirmation of processing, access, correction, anonymisation, blocking or deletion, portability, information about sharing and revocation of consent; complaints to the ANPD.
• Japan (APPI): disclosure, correction, suspension of use or deletion; complaints to the Personal Information Protection Commission.
• South Korea (PIPA): access, correction, deletion, suspension of processing and withdrawal of consent; complaints to the Personal Information Protection Commission or the KISA privacy centre. The person responsible for personal information is the developer, reachable at support@zydeno.com.
• Australia and New Zealand (Privacy Act 1988, Privacy Act 2020): access and correction; complaints to the OAIC or the New Zealand Privacy Commissioner.
• Other countries (for example India’s DPDP Act, Singapore’s PDPA, South Africa’s POPIA or Türkiye’s KVKK): the rights your local law gives you. Write to us and we will respond in line with it.

How we respond. We answer within one month, or sooner or later where your local law sets another period (for example 45 days under the CCPA), and we may extend it where the law allows. We may ask for information to confirm that a request comes from you. Requests are free unless they are manifestly unfounded or excessive. If we cannot do what you ask, we explain why and how you can appeal or complain.

13International users

Sunpitch is available in many countries. The developer does not receive the data you keep in the app, so we do not transfer it anywhere. Requests the app makes go directly from your phone to the services in §7, which may process them on servers in other countries, including the European Union and the United States; their policies describe how they protect it.

If you e-mail us, your message is processed by our e-mail provider and may be stored on servers outside your country. Where the GDPR or UK GDPR applies to such a transfer, it relies on an adequacy decision, on standard contractual clauses offered by the provider, or on the transfer being necessary to answer your request.

This policy is written in English. If a translation is offered, the English version prevails unless your local law requires otherwise.

14Security

All requests use HTTPS; the app does not allow unencrypted connections. Your data is kept in the app’s private storage, which other apps cannot read on an unmodified Android device, and it is protected by your phone’s lock screen and device encryption. Exported files are as safe as the place you put them. Protect your phone with a screen lock and keep your Android version up to date.

15Ads, purchases and future versions

Today. The current version of Sunpitch is free of charge, shows no ads, has no in-app purchases or subscriptions, and contains no advertising, analytics or payment SDKs. This describes the app as it is now, not a promise about future versions. Future versions may introduce advertising, paid features, in-app purchases or subscriptions, or other optional services.

If ads are introduced. Ads would be supplied by a third-party ad network, for example Google AdMob. Ad networks typically process your device’s advertising ID, IP address, approximate location derived from the IP address, device and app information and your interactions with ads, in order to show ads, limit repetition, measure performance and prevent fraud, and, only where you allow it, to personalise ads.

If purchases or subscriptions are introduced. They would be processed by Google Play’s billing system. Google handles your payment details under the Google Privacy Policy. We would receive only what is needed to deliver and verify a purchase, such as a purchase token, the product, its status, the country and the currency, never your full card or bank details.

Before any such change we will update this policy with a new effective date and version, describing what data is processed, by whom, why and how you can control it; update the Google Play Data safety section; mention the change in the release notes; ask for your consent where the law requires it (for example for personalised ads and non-essential access to your device in the EEA, the UK and Switzerland, through a consent tool that meets Google’s requirements); and offer the opt-outs the law requires (for example under US state privacy laws). The change applies only from the app version that introduces it. Data already stored in the app will not be used for advertising without telling you first and, where required, getting your consent. We will not knowingly show personalised ads to children (§16).

16Children

Sunpitch is a planning tool for adults. It is not directed to children under 13 and we do not knowingly collect any information from children. Through the app, the developer receives no information from anyone. If you are under the age of majority where you live, use the app with the involvement of a parent or guardian. Work on roofs and electrical equipment is not for children.

17Changes to this policy

We may update this policy when we change the app (including any change described in §15), when the services the app uses change, or when the law changes. The effective date and version at the top of this page show which version applies, and the version history (§18) summarises every change.

For a material change, for example new data leaving your device, ads or purchases, we update this page and the Google Play Data safety section before the app version with that change is published, describe it in the release notes, and ask for your consent in the app where the law requires it. Changes do not apply retroactively to data processed before them. Earlier versions are available on request from support@zydeno.com.

18Version history

19Contact

• Developer (controller): Zydeno, the developer of Sunpitch on Google Play
• E-mail for privacy questions and requests: support@zydeno.com
• Website: zydeno.com

We aim to answer within 30 days. If you are not satisfied with our answer, you can contact your local data-protection authority.

See also the Terms of Use.