Privacy Policy
SpotGrid · Last updated: September 2026
The SpotGrid app helps you track current electricity spot market prices and shift your power usage to cheaper times, so you can save money and use energy more consciously.
SpotGrid collects no personal data. No user accounts are created and no tracking is performed. The only data leaving your device is the push registration token created by Google (and, on iOS, Apple) for the optional day-ahead notification — it never reaches Smettly and says nothing about you.
1. Responsible
Smettly GmbH
Betriebsstraße 21,
4224 Wartberg ob der Aist
Austria
Email: datenschutz@smettly.com
2. What data is processed?
SpotGrid is an app for displaying European electricity spot prices. The app processes only the following data:
- Settings (local): Selected country, language, display mode (light/dark), daily consumption – stored exclusively on the user's device. This data never leaves the device.
- Widget data (local): Price data for the iOS and Android widget is synchronized locally via app-internal mechanisms. No external transfer.
- Price alerts (local): The threshold you set and the reminder for a cheap time window are checked and triggered exclusively on your device. These notifications are produced offline, with no server involved.
- Day-ahead notification (push): As soon as the exchange prices for the following day are published, the app tells you. This uses Firebase Cloud Messaging by Google, and on iOS additionally the Apple Push Notification service.
When the app starts, the Firebase SDK generates a registration token on your device and holds it at Google (on iOS built on a device token from Apple). The app uses that token to subscribe to a topic for your market area, for exampleprices_AT. Google therefore receives the token and the subscribed market area; Apple receives the device token.
That token is not transmitted to Smettly and is neither stored nor evaluated by us. We keep no list of recipients and cannot address individual devices: our server sends one identical message to a market area, not to a person. The token contains no information about you and allows no conclusion as to your identity.
Turning it off: withdraw the app’s notification permission in your device settings and nothing will be displayed. The token itself is created when the app starts; it is removed entirely by uninstalling the app. - Electricity price data (anonymous): The app does not query the data sources directly. All requests are routed through an intermediary proxy server operated on behalf of Smettly. The original sources are
energy-charts.info(spot prices) andopen.er-api.com(exchange rates). These requests contain no user identifiers.
Because the app obtains price data exclusively through the proxy server, no user IP addresses are transmitted to the data sources named above. The day-ahead notification is the exception: it runs through Google (Firebase Cloud Messaging) and, on iOS, Apple, which may involve processing in the United States. The legal basis is our legitimate interest in providing this core function of the app (Art. 6(1)(f) GDPR); the transfer relies on the Standard Contractual Clauses and/or the EU-US Data Privacy Framework. Beyond this, no personal data is transferred to third countries.
3. No collection of personal data
SpotGrid does not collect, store or process any of the following:
- Names, email addresses or other contact details
- Location or GPS data
- Advertising IDs or comparable identifiers used for advertising purposes
- Usage behavior or analytics
- Push tokens — the token generated for the day-ahead notification never reaches our servers and is not stored by us (see section 2)
4. Data sources (third parties)
The data displayed originates from:
- energy-charts.info (Fraunhofer ISE) – public energy market data.
- open.er-api.com – exchange rates for currency conversion.
Both sources are queried exclusively via the intermediary proxy server. No user data is transmitted to these services.
For the day-ahead notification we additionally use Firebase Cloud Messaging (Google Ireland Limited / Google LLC) as a processor, and on iOS the Apple Push Notification service (Apple Inc.). See section 2 for details.
5. Server communication
The app communicates exclusively with Smettly's proxy server. Its server logs may contain IP addresses for up to 24 hours (technical requirement) but are not analyzed or stored.
6. Data sharing with third parties
There is no sharing of data with advertising networks, analytics services or any other external parties. The only exception is the services used to deliver the day-ahead notification, Google and — on iOS — Apple; see section 2.
7. Data security
All communication between the app and server is encrypted via HTTPS. All settings are stored exclusively on the user's device.
8. User rights (GDPR)
Since SpotGrid does not collect personal data, there is no personal data to access, correct or delete. All app data can be completely removed at any time by uninstalling the app.
For questions, contact: datenschutz@smettly.com. You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).
9. Children
SpotGrid is not directed at children under the age of 13. No data is collected from children.
10. Changes to this policy
Changes will be published in the app and on this page.
11. Supplement: visiting this website
Sections 1 to 10 concern the SpotGrid app. In addition, the following applies when visiting the website spotgrid.smettly.com:
- No cookies, no tracking, no analytics. No cookies are set and no usage statistics are collected.
- No external resources: Fonts, images and stylesheets are served exclusively from our own server. No connections to Google Fonts or other third-party CDNs are established.
- Server log files: For technical reasons (operational security, error analysis) the web server briefly logs IP address, date and time, requested page and user agent. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure operation). These logs are not merged with other data and are deleted automatically.
- External links: When you follow the links to the Apple App Store or Google Play, the privacy policies of the respective providers apply.