Privacy Policy

Last updated: 2026-10-20 Version: 1.27

This policy explains what personal data Walteris collects, why, and what you can do about it. We have tried to write it in plain language rather than legal boilerplate. If anything here is unclear, email us at hello@walteris.com and we will explain it.

Who we are

Walteris is operated by MB Energijos Ekspertai, company code 307141622, registered at Eduardo Andrė g. 14-5, LT-02232 Vilnius, Lithuania. We are the data controller for the personal data described here.

“Walteris” is a trade name of MB Energijos Ekspertai. The company, not the product, is the controller and the party you deal with.

Contact for any privacy question or request: hello@walteris.com.

The short version

  • Walteris charges your electric car during the cheapest hours of the day. To do that we need to know a little about your car and your routine.
  • The only location we use is your car’s, not your phone’s. The app uses no location services on your phone and never asks for location permission — your phone does not tell us where you are. The position comes from your car, through your car manufacturer’s interface and with your permission there, and we use it to answer one question: is the car at home, so that charging can start? If it is somewhere else, Walteris leaves it alone. The position itself is used and discarded; we keep no record of where your car has been — section 4 explains exactly what that means.
  • We do not sell your data, show you ads, or share your data with advertisers.
  • We ask before recording what you look at in the app. What you do in it is recorded unless you switch that off, and one switch in Settings turns off both.
  • Our website sets no cookies, so there is no cookie banner to dismiss.
  • If you use the energy calculator on our website, we read 12 months of your meter data (in some cases also the previous calendar year’s monthly totals) from ESO with your consent, build your report, and delete the data and the report 7 days later. Three unlinked things remain: how many euros a year the dearest and the cheapest offer for your home differ by, whether the object had a solar plant and, when your bill is known, how many euros a year the cheapest bill is below yours. Section 14 says exactly what that involves.
  • You can delete everything from inside the app, and ask us for a copy of it by email.

1. Your account

What: your email address, whether it is verified, your time zone, and which version of the Terms of Service you accepted and when.

Why: to create your account, sign you in, contact you about the service, and be able to show that the agreement between us was made.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).

How long: for as long as your account exists.

One email about how it went. During or after your free trial we may send you one message inviting you to a short interview about how Walteris has worked for you. It goes to the address on your account, and it is about the service you are already using rather than a marketing message: our basis is our legitimate interest in learning whether a new product works (Art. 6(1)(f)), and you can object by replying, in which case we do not ask again. If taking part comes with a reward, the Terms of Service, section 8, describe it.

2. Your charging preferences and routine

What: your usual departure time, your maximum charge level, your weekly schedule (which days you work from home, when you leave and return, roughly how far you drive), any one-off “big trip” or “staying home today” adjustments, your electricity tariff and its rates.

Why: this is what the optimiser needs in order to work out when to charge. If we do not know when you need the car, we cannot know which cheap hours are usable.

Legal basis: performance of our contract with you.

How long: for as long as your account exists.

Worth being direct about: taken together, this information describes your weekly routine — when you are usually at home and when you are not. We treat it accordingly: it is never shared, never sold, and never used for anything except planning your charging.

3. Your vehicle

What: your car’s identification number (VIN) and vehicle identifier, its make, the name you gave it in your manufacturer’s app, battery size and charging characteristics, and — sampled roughly every 15 minutes while your car is connected — its charge level, estimated range, odometer reading, whether it is plugged in, whether it is charging, and at what rate.

Why: to know whether charging is possible right now, how much energy is still needed, and whether a command we sent actually took effect. The odometer is read so the app can tell you how far you drove between charges and what that cost per 100 km; it is the total on your dashboard, not where you went or how you drove.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR): Walteris cannot schedule charging without reading the car. You connect it through your car manufacturer’s own permission screen, which shows exactly which categories of data you are sharing, and you can withdraw that access at any time — from inside Walteris, or directly in your manufacturer account. If you withdraw it, Walteris can no longer manage your charging. We record which permissions were granted, and when, so that we can show what you agreed to.

How long: these readings are kept for a limited period and then deleted — see Data Retention. The day-by-day history you can look back at in the app is built from them, so it reaches back as far as they do. Walteris manages one car, chosen when you link it. Disconnecting that car deletes its history and readings along with it, and that cannot be undone — changing to a different car means disconnecting and linking again.

What we do not collect: your driving behaviour, speed, media, or cabin data. Your car’s position we do read, for one narrow purpose and without keeping a history of it — that is the next section.

If you also connect a home battery, what we read from it is described in section 13.

4. Where your car is parked

What: your car’s position, read from your car through your car manufacturer’s interface — never your phone’s. The app uses no location services on your phone and holds no location usage description, so your phone reports nothing. From the car’s position we keep two things: whether the car is at home right now, and one saved point for where “home” is.

Why: so that Walteris only takes charge of charging at home — knowing the car is at home is what lets a planned charge start. Your schedule is built around your home charger; without knowing where the car is, Walteris would apply that schedule anywhere — and it has stopped a charge at a public rapid charger for exactly that reason. Knowing the car is elsewhere is how it steps back and leaves you to it.

Legal basis: your explicit consent (Art. 6(1)(a) GDPR) — the same permission screen at your car manufacturer where you choose what to share. Location is listed there as its own category, and you can withdraw it at any time. We record which permissions were granted, and when, so this consent is something we can show rather than assert. If you connected your car before we started asking for it, we will ask you to reconnect: we cannot quietly add something to a permission you already gave.

How little of it we keep, specifically:

  • Your car’s position is read about every 15 minutes, used to answer one yes/no question — is the car at home? — and then discarded. All that is written down is the yes or no. There is no record of where your car has been, because we never create one.
  • We store two coordinates at most: your home point, and — if you have told us that a place is not your home — that one rejected place, kept only so we do not ask you about it again. Both are stored deliberately wrong: shifted about 50 metres in a direction worked out from your account and a secret held outside the database, so the shift is never itself written down. The same shift is applied to the live reading before the two are compared, so they cancel out and the check stays exact.
  • Being straight about what that is worth: it protects the point against someone reading our database, and it is not anonymisation. A 50-metre circle on a residential street still points at a handful of houses. So we treat your home point as personal data of the same sensitivity as your address, and nothing else in this policy is relaxed because of the shift.
  • You confirm your home; we never just decide it. When we first see where your car charges, we ask you whether that is home, and nothing is treated as home until you say so. If you say it is not, that place is never used as your home; it is remembered only so that we do not ask about it again, and it is cleared with your account or when you reset your home.
  • The app still requests no location permission on your phone, and holds no location usage description. The only device reporting a position is your car.

How long: your home point, and any place you told us is not home, for as long as your account exists, or until you reset it. The at-home yes/no is stored alongside the other 15-minute vehicle readings and is deleted with them after 13 months.

In your data export: the home point you get back is the shifted one, because that is the value we hold. We do not have the exact one to give you.

5. Your solar panels (optional)

What: if you add a solar array, its tilt, orientation and capacity. Nothing about where it is: we do not ask, and the array carries no location of its own.

Why: to forecast how much your panels will generate, so charging can prefer your own solar energy over grid electricity.

Legal basis: performance of our contract with you. This feature is optional — if you do not add an array, we hold none of this.

Note on where the forecast is made for: your panels are assumed to be where your car parks, so the forecast uses the home point described in section 4 — the one deliberately shifted by about 50 metres. Until your car has reported a position, only your country is used, and the forecast is a plausible shape rather than one for your roof. The position is sent to our weather forecasting provider and never with any information identifying you.

How long: for as long as the array exists on your account. Delete the array and the coordinates go with it.

6. Your charging history

What: nothing beyond the readings described in section 3. The app’s History screen shows a day at a time — your charge level, the electricity price and your solar output through that day — drawn from those same 15-minute readings.

Why: so you can see what Walteris did for you, and check it against what you expected.

Legal basis: performance of our contract with you.

How long: as long as the readings behind it — see Data Retention. We do not keep a separate, longer-lived summary of your charging on top of them.

7. How you use the app

Walteris is new, and we cannot see which parts of it are working. This is how we find out. There are two halves to it, and they work differently — the honest version is that one of them you switch on, and the other you can switch off.

What: two categories of event, and nothing outside them.

  • What you look at — which screens you open, when you open the app, and which explanations you read (such as “How does Walteris work?”).
  • What you do, and what the service did for you — setting up and changing your account and its settings (such as linking a car, editing your weekly schedule or planning a trip), turning things on and off (such as pausing Walteris or enabling notifications), how you answered a question we put to you, what happened to your charging (such as a charge starting or stopping, or Walteris standing down because the car was not at home), and the state of your subscription (such as it starting or lapsing).

Events carry your account identifier, so we can tell one person’s twenty visits from twenty people’s one visit. They also carry your device type, operating-system version, app version and a random device identifier created by the analytics library — the same identifier that goes with the feature-flag request described below. The list of individual events changes as the app changes; what does not change are the two categories above, the purposes below, and the list further down of what is deliberately never included.

Why: to know which parts of Walteris earn their place, which confuse people, and which nobody uses. Later, to compare two versions of a screen and keep the better one.

Legal basis — the part you switch on: your consent (Art. 6(1)(a)). What you look at inside the app — screens, explanations, how often you open it — is only collected if you agree. We ask once, inside the app, and nothing is sent before you answer. You can change your mind at any time in Settings.

One detail we would rather spell out than gloss over. The ask cannot be the first thing you see — you would have nothing to judge it on — so a few things happen before it: the app opens, you create an account, you see your first screen. Those few events are held on your phone, in memory only, while we wait for your answer. If you agree, they are sent, with the times they actually happened. If you decline, they are deleted and never sent, and so is anything held after that. If you close the app without answering, they go with it — nothing is written to your phone’s storage, and nothing leaves it until you say yes. We do this because the beginning of your first visit is exactly the part we most need to see, and asking you before you have seen anything would not be a fair question.

Legal basis — the part you can switch off: our legitimate interests (Art. 6(1)(f)) for the actions you take that our servers already handle. When you edit your schedule, your phone asks our server to save it; recording that the edit happened adds nothing on your device and tells us nothing we did not already process to do the job. You have an absolute right to object: turn the same Settings switch off and it stops, for your account, everywhere. We have written down the balancing test we did.

What is deliberately not included: your email address, your name, your car, your VIN, your coordinates, your address, your home point, whether your car was at home, your notification address, or the contents of your schedule. “You confirmed your home” is recorded; where it is never leaves our own database. Analytics events carry an internal account identifier — a random identifier we generate, meaningless outside our systems — and never your email. We have also disabled the provider’s IP-based location lookup.

If you try the demo before signing up: the demo runs entirely on your phone, so there is no account yet and those events are held under an identifier for the installation. If you go on to create an account, that earlier activity is recorded against it — that is how we learn whether the demo actually helps people decide.

Feature rollouts: we also use the same provider to decide which version of a feature your app shows — to release something to a small group first, to compare two versions of a screen, or to switch a feature off remotely if something is wrong with it. Your app asks for that assignment whether or not you have turned analytics on, because a feature we need to switch off has to switch off for everyone. That request carries the same internal account identifier (or the installation identifier before you sign in), your device type and app version, and — like any request over the internet — reaches the provider from your IP address. Nothing else about you goes with it, and the answer is cached on your device.

To be clear about the difference: the assignment is how the app knows what to show you, and happens either way. Recording that you saw it is analytics, and happens only if you have turned analytics on. Until then the analytics component is switched off and sends nothing at all — it is loaded, because switching a broken feature off has to work for everyone, but it is loaded muted.

Where: Mixpanel, on their European infrastructure, for 13 months. If you delete your account, your analytics data is erased from Mixpanel too, as part of handling your deletion request.

8. Notifications

Walteris can put its questions to you on your phone, by email, or both. The two are separate switches in Settings -> Notifications & email, and neither is on unless you have said so.

What: if you turn on notifications on your phone, the address your phone’s operating system gives us so we can send it one — plus whether it is an iPhone or an Android phone, and which language it is reading in. If you turn on the email channel, we send the question to the email address on your account instead of, or as well as, your phone. We also keep a note of which questions we have put to you and what you answered.

Why: some things are worth asking about rather than guessing at — such as whether you are staying home today. The note of what we asked is what stops us asking the same thing twice.

Legal basis: your consent for both channels. On your phone it is the notification permission in your phone’s settings: we hold nothing here until you grant it, and turning notifications off — in the app or in your phone’s settings — removes it. For email it is the switch in Walteris, which starts off; turning it off stops us sending questions there. Keeping the record of what we asked and what you said is part of running the service for you (Art. 6(1)(b)).

Who sees it: notifications on your phone are delivered through the Expo push service and then Apple’s notification service. They receive the notification’s text, the device address and a reference number for the question, and nothing else: no account of yours, no email address, no coordinates. Emailed questions go out through AWS — the same provider, in the same EU region, that hosts the rest of Walteris. Either way the text is a short fixed question in your language.

How long: the device address until you turn notifications off, remove the app, or delete your account. Your email address is kept for as long as your account exists whatever you do with this switch — it is how you sign in — and turning the switch off stops us using it for questions. The record of questions: 90 days.

9. Running and securing the service

What: technical logs containing internal identifiers, error messages and the IP address each request came from, plus your IP address held briefly in memory for rate limiting.

Why: to keep the service working, diagnose faults and prevent abuse.

Legal basis: our legitimate interests (Art. 6(1)(f)) in operating a reliable and secure service. We have assessed this against your interests and limited it accordingly: logs use internal identifiers rather than your email or your car’s VIN, and are deleted after 14 days.

10. Your subscription

What: whether your subscription is currently valid and when it runs to, the identifier Apple gives the subscription itself, and when we last checked it with Apple. If your subscription lapses we also note that we have handed your car back.

Why: Walteris manages your car on a schedule, whether or not the app is open, so our own servers have to know whether you are subscribed — a paywall in the app alone would not be one. The identifier is how we ask Apple whether the subscription is still valid, and how we recognise it again if you come back after cancelling. And if you do lapse, we set your car’s charge limit and charging speed back to your own settings before we stop, so that it is never left unable to charge.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).

What we never see: your payment relationship is with Apple, not with us. Apple is the merchant of record, and we never see your card details, your billing address or your full name. Apple’s handling of your payment is covered by Apple’s own privacy policy.

Who sees it: Apple, and nobody else. When you subscribe, your app tells Apple our internal identifier for your account, so the purchase reaches your account and not somebody else’s. When we check that the subscription is still valid, we send Apple that subscription’s identifier and nothing else about you — and only when our stored answer is close to running out or is more than a day old. The identifier describes a subscription rather than a person, and means nothing outside Apple.

How long: for as long as your account exists; it is erased when you delete your account. We keep the subscription’s identifier for that whole time even if you cancel, so that resubscribing picks up your existing subscription instead of stranding it.

11. The website and the waitlist

What: if you register for early access at walteris.com, we collect the details you type into the form: your email address, the make of your car, whether you use an iPhone or Android phone, the type of electricity tariff you are on, whether you have solar panels or a home battery and, if you do, the brand of the inverter or battery, and your phone number, if you choose to give it. We also record which campaign link brought you to the page, if any, and which language you were reading in.

Why: to contact you about early access, to ask about your own setup and what you need from it, to call or message you about early access and your setup, if you gave a number, to keep those details on file so that we can write to you when the app works with your equipment, to decide which car makes and inverters to support next, and to understand which of our own links people arrive through.

Legal basis: your consent. You type the address in yourself, and our email provider sends you a confirmation message — you are only added to the list once you click it. Every message we send has an unsubscribe link.

How long: until you unsubscribe, or 24 months after the launch announcement, whichever comes first.

Who sees it: MailerLite, a Lithuanian company, holds the list, and your phone number, if you gave one, lives there with the rest of your registration, under the same retention. We also count the signup in Mixpanel — but the identifier attached to that count is a one-way hash of your address, not the address itself.

We also count page views. We record which pages are opened — the savings write-up, the blog, this policy — in which language, and which site you arrived from. The page tells our own server, and our server counts it.

Worth being direct about: the website sets no cookies and stores nothing on your device to count or follow you — no cookie, no tracking pixel, no third-party script, no session recording. Visitors are counted using a one-way fingerprint that our server computes and that changes every day, so the same person on two days cannot be recognised as the same person, and nothing can be traced back to you. The one thing your browser keeps, and only while the tab is open, is what you type into the energy calculator’s form, so that a reload does not empty it (section 14). That is why there is no cookie banner: nothing is stored on your device except what the service you asked for needs to work, and that needs no consent. Legal basis: our legitimate interests in knowing whether anyone reads what we write.

Two separate things happen on that form. Registering is itself the request to be contacted: about early access, about your own equipment, and again when the app supports it. Being contacted is the only thing the form provides, so submitting it is the consent, and the date you registered is our record of it.

Separately, the form offers news and tips about the app. That box starts unticked and is entirely optional: leaving it alone changes nothing about your registration or your place on the list, and we keep the date if you tick it. Both kinds of message carry an unsubscribe link.

The waitlist and the app’s own marketing list (section 12) are kept apart: they are two separate lists at MailerLite, with different retention, and neither one adds you to the other. Signing up to the waitlist creates no account, and the analytics setting in the app has nothing to do with it.

12. Product news and tips, if you ask for them

What: your email address, whether you have asked for these messages, and the date you asked. We also note which language you read the app in, so we write to you in it.

Why: to tell you about new features and how to get more out of the cheap hours. Nothing else. We do not sell or rent the list, and nobody else advertises through it.

Legal basis: your consent, and nothing arrives unless you give it. The box on the sign-up screen starts unticked and is deliberately separate from accepting the Terms — you can create an account without it, and refusing changes nothing about the service. You can also turn it on later in Settings → Notifications & email. We keep the date you agreed, because we should be able to show when you did.

Turning it off: either the same switch in Settings, or the unsubscribe link at the bottom of every message — they control one thing, so either works and neither is slower than the other. Using the link stops the messages immediately; the switch in the app catches up within a day.

Who sees it: MailerLite, who send the messages. This is a different list from the website waitlist, held separately from it.

How long: until you turn it off. After that MailerLite keeps you on a suppression list rather than forgetting you, because that is what stops you being added again by mistake. Our own record that you agreed, and when, lasts as long as your account and is erased with it — including from MailerLite.

If you never turn it on, none of this exists: no list membership, and nothing sent.

13. Your home battery (optional)

This applies only if you connect a home battery. If you do not, we hold none of it.

What: the identifier your inverter manufacturer uses for your inverter or battery, its make and model, its capacity and charge and discharge limits, and — sampled at the same rhythm as the rest of the plan — its state of charge and the power flowing in and out of it: how much is going into or out of the battery, how much your solar array is producing, and how much is being drawn from or sent to the grid. We also keep a record of the charge and discharge commands we sent and how the inverter answered.

Why: to plan and carry out charging. A battery is only worth controlling if we know how full it is, how fast it can take energy, and what the house and the panels are doing around it. The record of commands is how we can tell whether an instruction actually took effect.

Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR) — we cannot schedule a battery without reading it. You connect it through your inverter manufacturer’s own account or permission screen, and you can withdraw that access at any time, from inside Walteris or with the manufacturer. If you withdraw it, we can no longer manage the battery.

Who sees it: your inverter manufacturer, whose interface the readings come from and the commands go to. Which company that is depends on the equipment you own; our Sub-processors page says so, and how they handle your data is governed by their own terms and privacy notice, not ours. Nobody else receives it, and we do not use it to build a profile of you.

What we do not collect from it: no location, and no breakdown of what the individual appliances in your home are doing. We read totals at the meter and at the battery, not a picture of your household.

How long: the battery and its settings for as long as it is connected to your account — disconnect it and they are deleted. The readings and command records are kept on the same terms as the ones from your car: see Data Retention.

14. The energy calculator (Energijos skaičiuoklė)

This applies only if you use the calculator at walteris.com/lt/skaiciuokle, which is in Lithuanian and needs no account. If you do not, we hold none of it.

What: your name, surname and email address, your ESO object number (8 digits, the first line in the „mano.eso“ self-service) and your date of birth. If you do not know the object number, your personal code takes the place of both it and the date of birth: ESO lists your objects under it, you pick one, and the code is used for that lookup and for the access right, then deleted. The access right is ESO’s permission for us to read your object’s data for up to 7 days. We never store it, log it or show it back to you. If you type your electricity price and the supplier’s monthly fee into the report, we keep them, with the supplier you pick from the list beside them.

Why: the name, surname and date of birth (or personal code) are what ESO, the electricity distribution operator, requires before it lets us read the metering data of the object you name; we pass them to ESO together with the statement that you consented. The email address is where we send the link to your report. ESO then gives us the object’s card (its tariff plan, permitted power, the date its smart meter was installed, its address and, if there is one, the solar plant and how ESO settles its export), 12 full calendar months of 15-minute import and export readings and, for a solar plant, the monthly totals of what you sent to the grid and what you got back. From these we compute your report. We also send the object number, and nothing else, to ESO’s pasirinkitetiekeja.lt service, which answers whether public supply (visuomeninis tiekimas) is open to your object; we keep only that answer, so that the report can show public supply where you may take it. If that service does not answer, we work the answer out from ESO’s data instead. The object’s card we already have shows who supplies you and whether your ESO plan is one for vulnerable customers. If you have an independent supplier and an ordinary plan, we ask ESO once more under the same access right, for the previous calendar year’s monthly totals; we add up the electricity you took from the grid that year only to learn whether it was under 1 000 kWh, below which public supply is open to you, keep that answer and drop the totals as soon as it is worked out. We keep the price and fee you typed and the supplier you picked so that your report shows them again when you come back to the link; the supplier’s name also labels your own row in the report.

Legal basis: your consent (Art. 6(1)(a) GDPR): the box you tick on the form, beside the line „Sutinku, kad Walteris gautų iš ESO mano skaitiklio duomenis šiai ataskaitai.“ (I agree that Walteris may receive my meter data from ESO for this report.), with the line under it „Sutikimas galioja 7 dienas. Atšaukti galite el. paštu hello@walteris.com.“ (The consent is valid for 7 days. You can withdraw it by email to hello@walteris.com.). The meter data are the object’s card, the readings and the totals described above. Nothing is sent to ESO before it is ticked, and we record the time and the version of the wording you agreed to.

The access right at ESO: we register an access right to your object in our name, valid for up to 7 days. We cancel it when your report is built, when ESO cannot serve your object, or when you tell us the object is not your home. What ESO records about that right is ESO’s own record; ESO is an independent controller.

What we keep, and what we strip: ESO’s answers carry your name, surname, personal code, the consumer code ESO gave you and your address. We drop them as soon as ESO’s answer arrives; what remains is the readings and the object’s card. We do not store the object number: what remains is a one-way fingerprint of it, from which the number cannot be recovered, and, inside the report, the number with its middle digits hidden; the address is kept only as the street, the first digit of the house number and the city. The full number and address are shown to you in your own browser and are never stored by us. Your report record holds the report’s link, your email address, whether you ticked the news box, the time of your consent, ESO’s reference numbers for our access right and the data requests, the object’s card, the readings with your details removed, whether public supply is open to you (the answer from ESO’s pasirinkitetiekeja.lt service or worked out from ESO’s data), how many euros a year the dearest and the cheapest offer for your home differ by and, if you typed them, your electricity price, the supplier’s monthly fee and the supplier you picked. Once the report is built, it also holds the number of the statistics row described under How long below.

Who sees it: ESO receives your name, surname, date of birth or personal code, the object number and our statement of your consent; its pasirinkitetiekeja.lt service receives the object number alone. AWS hosts the record and sends the one email with your report’s link, from the same EU region that holds all our other data. Cloudflare passes the form to our servers and stores nothing. If you tick the news box, MailerLite (Vilnius), which sends our email, receives your address too (section 11). Nobody else.

The link is the key. For 7 days your report opens for anyone who has its link, with no password. It shows no name, no full address and no full object number, but it does show your consumption, the price and fee you typed and the supplier you picked. Do not forward the link unless you mean to.

How long: 7 days from your consent. Then an automatic job deletes the record, the readings, the report and the link, all at once. One statistics row per report survives it in our database: how many euros a year the dearest and the cheapest offer for your home differ by, whether the object had a solar plant and, when your bill is known (you typed your price, or you are on public or guaranteed supply), how many euros a year the cheapest bill is below yours, in whole euros as the report showed it. Your price and your bill are not on it. Until your record is deleted, it is linked to this row, so that the bill comparison stays up to date; once the record is deleted, the row cannot be traced back to you. If ESO cannot serve your object, no record is created.

In your browser: while you fill in the form, this browser tab keeps what you have typed in its session storage (the browser’s temporary memory for that tab), so that a reload does not empty the form: your name and surname, your email address, the object number, your date of birth until the request is sent, whether you chose the object number or the personal code, the step you are on, whether you ticked the news box and, once ESO has answered, your report’s link and the object’s card (the address and the number you see at the „Ar tai jūsų namai?“ step). Your personal code is never kept. The browser deletes it when you close the tab, and none of it leaves your browser except what you send with the form’s own buttons.

Analytics and feedback: the calculator’s pages and buttons are counted the same cookieless way as the rest of the website (section 11), with the report’s link attached so that we can see where people stop, and never your email or your object number. How many people reach each step of the form is counted without the report’s link. When a report is built, we record it once for statistics: whether the object has a solar plant and the difference per year as a range (for example 50 to 150 EUR), never the figure itself. That record carries a code from which the report’s link cannot be recovered. If you answer the questions under your report, your answers and the report’s link are emailed to hello@walteris.com and stored in no system of ours.

News by email: when you tick „Taip pat noriu gauti naujienas el. paštu“ or press „Gauti naujienas el. paštu“, your address and the date you asked go at once to MailerLite, onto the calculator’s own news list, as unconfirmed for the time being: MailerLite sends you an email with a confirmation link, and the news comes only once you click it. It is a separate list from the website waitlist (section 11) and from the app’s list (section 12); neither adds you to it, and it adds you to neither. We use it only to write to you about the calculator and what Walteris builds next. Every message has an unsubscribe link, and once you have confirmed, your address stays on the list until you use it. If you never click the confirmation link, we delete your address 30 days after you asked. Leaving the box alone changes nothing about your report.

Withdrawing and deleting: at the „Ar tai jūsų namai?“ step, „Ne, tai ne mano namai“ cancels the access right at ESO and deletes your report record at once. At any point in the 7 days, email hello@walteris.com with your report’s link and we delete the record and cancel the access right if it is still open. After 7 days there is nothing left to delete, except your address on the news list if you asked for news: the unsubscribe link in any message, or an email to hello@walteris.com, removes it.

Who we share data with

We share only what is necessary, only with the providers listed on our Sub-processors page, and never with advertisers or data brokers. We do not sell personal data.

The main ones: AWS hosts everything in the EU (Stockholm); Tesla receives the commands and identifiers needed to control your car; your inverter manufacturer, if you connect a home battery, receives the commands and identifiers needed to control it; Open-Meteo receives your solar array coordinates to return a forecast; Mixpanel receives pseudonymous analytics events, keyed to your internal account identifier; Expo and Apple’s notification service deliver notifications, if you turn them on; Apple handles distribution and billing, and tells us whether your subscription is still valid; MailerLite holds our email lists and sends the product news and tips, if you have asked for them; ESO, the electricity distribution operator, receives what it needs to let us read your meter data for the calculator, with your permission (section 14).

Your data is processed in the European Union. Where a provider operates outside the EEA, we rely on an adequacy decision or the European Commission’s standard contractual clauses.

We may also disclose data where the law requires it, or to establish or defend legal claims. If our business is ever sold or transferred, your data may move with it, and we will tell you before that happens.

How long we keep things

The rule: we keep your account data for as long as your account exists. When you delete your account, we erase it.

Readings from your car, and the history built from them, are kept for a shorter, fixed period:

Data Kept for
Account, preferences, schedule, tariffs, solar arrays Life of your account
Your home point, and any place you told us is not home Life of your account, or until you reset it
Vehicle readings, and the charging history shown from them, including whether the car was at home 13 months, or until you disconnect the car
Home battery and inverter details Life of your account, or until you disconnect the battery
Home battery readings — state of charge and power flow 13 months, or until you disconnect the battery
Command and diagnostic records 90 days
Expired trip and stay-home adjustments 90 days
Solar and weather forecasts 14 days
Technical logs 14 days
Notification device address Until you turn notifications off, remove the app, or delete your account
Record of questions we asked you 90 days
Subscription status and Apple’s identifier for your subscription Life of your account
App and website usage analytics 13 months; erased sooner if you delete your account
Website early-access registration: email address, phone number if given, and the form answers Until you unsubscribe, or 24 months after launch
Product news and tips: your place on the list Until you turn it off; a suppression record is then kept so you are not added again by mistake
Product news and tips: our record that you agreed, and when Life of your account
Our record of which Terms you accepted, and when Life of your account
Energy calculator: your report record, the readings from ESO, the report and its link 7 days from your consent
Energy calculator: how many euros a year the dearest and the cheapest offer differ by, whether the object had a solar plant and, when your bill is known, how many euros a year the cheapest bill is below yours Indefinitely; once your report record is deleted (7 days), it cannot be traced back to you
Energy calculator news list: your email address and the date you asked Until you unsubscribe; 30 days from asking if you never confirm

Copies of deleted data can survive in our encrypted database backups for a short time afterwards — currently up to 7 days. Backups exist so that we can recover from a failure; they are never used to bring a deleted account back. If a dispute or claim is open when you delete your account, we may keep what is needed to resolve it, for as long as that takes, and nothing more.

Your rights

Under the GDPR you can:

  • See your data — email us at hello@walteris.com and we will send you everything we hold about you in a machine-readable format, within one month.
  • Correct it — most of it is editable directly in the app.
  • Delete it — Settings → Delete account. This erases your data and revokes our access to your car. It cannot be undone.
  • Withdraw consent — disconnect your vehicle, turn analytics off, or turn product news and tips off, at any time. Each is one switch, and turning something off is no harder than turning it on. For the energy calculator, section 14 says how. Withdrawing consent does not affect processing that already happened.
  • Object to, or restrict, processing based on our legitimate interests.
  • Take your data elsewhere (portability).

Email hello@walteris.com for any of these. We will respond within one month.

If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, ada.lt).

How we protect your data

Everything is hosted in the EU on AWS, in a private network, encrypted in transit and at rest. The credentials that let us talk to your car are additionally encrypted with a dedicated key, and the commands we send are cryptographically signed. On your phone, your sign-in tokens are held in the operating system’s secure keychain.

No system is perfectly secure. If a breach ever affects your rights and freedoms, we will notify the supervisory authority within 72 hours and tell you directly where required.

Children

Walteris is a service for adults: the Terms of Service require you to be at least 18. Walteris is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

We will update this policy when the service changes. The version and date are at the top, and if a change materially affects you we will tell you in the app or by email. Previous versions are available on request.

Contact

MB Energijos Ekspertai Eduardo Andrė g. 14-5, LT-02232 Vilnius, Lithuania Company code 307141622 · VAT LT100017885218 hello@walteris.com