Utilify Privacy Policy

1. Introduction

Adelyons Software LLC ("we," "our," or "us") operates the Utilify mobile application (the "App"), a smart utility meter tracking and analytics platform. This Privacy Policy explains how we collect, use, store, and protect your sensitive meter consumption data and personal information.

Our Privacy Commitment: Your utility meter data reveals intimate details about your daily habits and lifestyle. Utilify is designed with privacy-by-default: meter data is processed locally on your device, encrypted before cloud sync, and never shared with utility companies or third parties without your explicit consent.

2. Information We Collect

Smart Meter Data:

• Consumption Readings: Electric (kWh), gas (therms/cubic feet), and water (gallons) consumption data read from your smart meter(s) via software-defined radio (SDR).
• Meter IDs: The unique identifier assigned by your utility company to your meter(s).
• Timestamps: Date and time each reading is recorded (typically hourly or more frequent).
• Utility Type: Which utility each meter tracks (electric, gas, water).

Property & Account Information:

• Property Details: Address(es) of properties you monitor.
• Account Name: Name associated with your Utilify account (optional nickname).
• Rate Plan: Optional information about your utility provider's rate structure (TOU, fixed, tiered).

Authentication & Profile:

• OAuth Token: If you log in via Google, Apple, or other OAuth provider, we store a secure authentication token (not your password).
• Email: Your email address (optional, for account recovery and notifications).

What We DO NOT Collect:

• Location data beyond the optional property address you provide
• Device identifiers for advertising (GAID, IDFA)
• Behavioral analytics or app usage telemetry
• Payment card information (handled by Stripe; we only see successful subscription confirmations)
• Contacts, photos, or other personal files on your device
• Your utility company account username or password

3. How We Collect Data

• SDR (Software-Defined Radio): Your device with Utilify must have an SDR receiver (e.g., RTL-SDR dongle) connected via USB-OTG. Utilify reads unencrypted meter broadcasts from your utility company. This is a local, passive process—we do not hack, spoof, or alter meter data.
• Manual Entry: You can manually enter meter readings if SDR is unavailable.
• Meter Metadata: When you add a property, you provide the meter ID(s) associated with that location.
• Optional Location Services: If you opt-in, we may request approximate location to correlate with weather data and help identify your utility provider's region.

4. How We Use Your Data

• To Provide the App: Meter readings are displayed, graphed, and analyzed to generate consumption insights, forecasts, and alerts.
• To Generate Analytics: We compute aggregates (daily/monthly totals, average hourly usage) and create visualizations (heatmaps, weather correlation charts).
• To Forecast Bills: We estimate your monthly utility bill based on your consumption pattern and your utility provider's rate structure (if provided).
• To Detect Anomalies: We monitor for unusual spikes (e.g., water leak detection) and notify you of potential issues.
• To Improve the App: Aggregated, anonymized usage patterns help us improve the algorithm accuracy and UX (no individual data).
• No Commercial Use: We never sell meter data to utility companies, marketers, researchers, or third parties. Your consumption history is your private data.

5. Data Storage & Security

• Local Storage (Device): Meter readings are stored locally in an encrypted SQLite database on your device. This data persists until you delete it.
• Cloud Sync (Supabase): Your meter data is encrypted end-to-end before syncing to our Supabase cloud backend. This enables multi-device access. Encryption keys are never shared with Adelyons.
• Encryption Standards:
  • At-rest: AES-256 encryption
  • In-transit: TLS 1.3 for all API communication
• Supabase Security: Supabase uses PostgreSQL with row-level security policies. Your meter data is accessible only by your authenticated account. See Supabase Security.
• SDR Processing: Smart meter broadcasts are read locally on your device. Raw meter data is not transmitted anywhere during the SDR reading process—only you see it. Processed readings are sent to cloud sync only after you approve.
• No Backup Copies: Adelyons does not maintain secondary backups of your meter data beyond Supabase's redundancy (for disaster recovery). If you delete your Supabase account, all data is permanently removed.

6. Third-Party Services

Supabase (Cloud Backend):

• What's Shared: Encrypted meter readings, property information, and account metadata.
• Purpose: Cloud storage, authentication, and multi-device sync.
• Data Location: US-based servers (configurable per Supabase region).
• See: Supabase Privacy Policy

OAuth Providers (Google, Apple, etc.):

• What's Shared: Your email address and a unique authentication token.
• Purpose: Secure login without password management.
• Note: Adelyons never receives your OAuth provider password.

Weather API (Optional):

• What's Shared: Your optional property location (city/zip code) to fetch weather data.
• Purpose: Correlate consumption with temperature for usage insights.
• Opt-In: This feature is optional. You can disable it anytime.

Stripe (Payment Processing):

• What's Shared: Subscription tier and renewal dates. Credit card data is never stored by Adelyons.
• Purpose: Billing for premium subscriptions.
• See: Stripe Privacy Policy

No Utility Company Sharing:

• Important: We do not share your meter data with your utility company unless you explicitly request an export or contact them directly.
• Your utility company already has access to your aggregate meter data through their own systems. Utilify provides granular, real-time insights without utility company involvement.

7. Permissions & Why We Need Them

• USB Access (SDR): To communicate with the SDR receiver (RTL-SDR dongle) via USB-OTG.
• Storage: To save meter readings in the local encrypted database.
• Internet: To sync data to Supabase and fetch weather data.
• Location (Optional): To correlate your consumption with local weather. You can deny this permission; the app will function without weather correlation.
• No Background Activity: Utilify does not access SDR, location, or collect data when closed (unless scheduled notifications are enabled).

8. Data Retention & Deletion

• Local Deletion: Delete individual meter readings or entire properties from within the app. Data is immediately removed from your device.
• Account Deletion: Delete your entire Utilify account. This removes all meter data from Supabase permanently. Local device data is also cleared.
• App Uninstall: Uninstalling Utilify removes all local meter data. Your Supabase account remains unless you delete it separately.
• Retention Period: Meter data persists until you delete it. Adelyons does not auto-delete old readings.
• Compliance: Upon request, we can delete your account and all associated data within 30 days.

9. Your Privacy Rights

• Data Access: Request a download of all your meter data in CSV format. Contact us anytime.
• Data Correction: Correct meter readings, property information, or account details within the app.
• Data Deletion: Delete specific readings, properties, or your entire account anytime. No waiting period, no justification required.
• Opt-Out of Analytics: Disable cloud sync to keep all data local-only (multi-device access disabled).
• Opt-Out of Weather Correlation: Disable location-based weather data anytime in settings.

10. Children's Privacy

Utilify is not intended for children under 13. We do not knowingly collect personal information from children. If we discover a child under 13 has created an account, we will delete it and notify the parent/guardian. For users 13–17, parental consent is recommended.

11. International Privacy Laws

GDPR (EU/EEA Users):

• Data Processing: Smart meter data is a form of personal data under GDPR. We process it only with your consent (via account creation) and on the basis of contractual necessity.
• Your Rights: You have rights to access, correct, delete, and port your data. Contact dev@adelyons.com to exercise these rights.
• Data Transfer: Meter data is stored in Supabase, which may be hosted in the US. By using Utilify, you consent to this transfer. We rely on Standard Contractual Clauses (SCCs) for data protection.
• Data Protection Officer: Contact us if you have GDPR questions or wish to file a complaint with your local data protection authority.

California Consumer Privacy Act (CCPA):

• Right to Know: Request what personal information we collect. We will provide a detailed report of your meter data.
• Right to Delete: Delete your account and all meter data anytime in-app.
• Right to Opt-Out: Utilify does not sell personal information, so this right is not applicable. However, you can opt out of cloud sync to limit data sharing.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

US State Laws (CPRA, CPA, VPDPA, etc.):

• Utilify complies with evolving state privacy laws. If your state has specific privacy rights (e.g., Colorado, Connecticut, Virginia), you have the right to know, delete, and opt-out of data sales. Contact us for state-specific requests.

12. Security & Breach Notification

• Security Measures: Encryption at rest (AES-256) and in transit (TLS 1.3), secure authentication, and regular security audits.
• Vulnerability Disclosure: If you discover a security flaw, contact security@adelyons.com. We commit to responding within 48 hours and crediting you if appropriate.
• Breach Notification: If unauthorized access to your meter data is discovered, we will notify you and affected users within 30 days, and notify relevant authorities as required by law.
• No Liability Waiver: We take reasonable security measures, but no system is 100% secure. We will be transparent about any incidents.

13. Disclaimer: SDR & Legal Considerations

Important: Utilify uses software-defined radio (SDR) to read unencrypted meter broadcasts from your utility company. In most jurisdictions, receiving and recording these broadcasts is legal because:

• The broadcasts are unencrypted and publicly available in your area.
• You are collecting data from your own meter(s) for your own benefit.
• Utilities transmit this data via radio waves they know are interceptable.

However: SDR and meter reading regulations vary by jurisdiction. We recommend reviewing your local utility company's terms of service and applicable laws before using Utilify. Adelyons assumes no liability for misuse of this technology or violations of local regulations.

14. Policy Updates

We may update this Privacy Policy to reflect new features, legal requirements, or security best practices. Material changes will be communicated via app notification. Your continued use of Utilify constitutes acceptance of updates.

15. Contact Us

Questions or concerns about your privacy or Utilify's data practices?

Adelyons Software LLC
Email: dev@adelyons.com
Contact Form: adelyons.com

Summary: Your Data, Your Control

• ✅ Local-First: Meter data processed on your device
• ✅ Encrypted Sync: Cloud data encrypted end-to-end
• ✅ Never Sold: Your consumption data is never sold or shared with utilities
• ✅ Easy Deletion: Delete readings or entire account anytime
• ✅ No Tracking: Zero behavioral analytics, zero ad networks
• ✅ Transparent: This policy clearly explains what we do and don't do with your meter data