Privacy Policy
Last updated:
In short
PrecioLuz asks for no account, no name, no email address and no location. There are no ads and no cross-app tracking. Electricity prices are fetched through our own server, which keeps no record of who asked, and your settings stay on your iPhone.
Who processes your data
PrecioLuz is developed by ApSD, an independent studio based in Spain (European Union). For anything concerning this policy or your data: support.apsd@gmail.com.
What data is processed
The app works without registration. There is no profile that identifies you as a person. This is everything involved:
| Data | Purpose | Processor |
|---|---|---|
| Anonymous installation identifier | Telling one installation apart from another so the app can work. It is a random identifier with no personal data attached | Firebase Authentication (Google) |
| Notification token | Sending you the daily price alert, only if you turn it on | Firebase Cloud Messaging (Google), Apple (APNs) |
| Usage and performance data | Knowing which screens are used and detecting failures, always in aggregate | Firebase Analytics and Crashlytics (Google) |
| Premium purchase state | Remembering that you bought premium and restoring it on your devices | RevenueCat, Apple (App Store) |
| Device attestation | Verifying that whoever requests the data is a genuine copy of the app and not a program impersonating it | App Attest (Apple), Firebase App Check (Google) |
| Your preferences (alert thresholds, display settings) | Making the app behave the way you want | Kept on your device, and in your private iCloud if you have it enabled |
What is NOT processed
- Your location. The app never requests location permission and does not use it; the PVPC tariff is the same across mainland Spain.
- Your identity. No sign-up, no name, no email, no phone number.
- Your actual consumption. PrecioLuz does not connect to your meter or to your energy retailer.
- Advertising and tracking. No ads, no ad networks, no tracking across apps or websites. The app declares
NSPrivacyTracking = falseto Apple.
How prices are fetched
The app does not talk to the official sources directly: it goes through our own server (a Cloudflare Worker) that queries them, normalises the response and caches it for a while. That server receives the app’s request — not your identity — and keeps no record of who asked for what. The only thing it applies is a per-IP request limit to prevent abuse, and that check is momentary.
The data comes from Red Eléctrica de España (ESIOS and REData), PVGIS (European Commission) and AEMET. It is displayed with its update timestamp and with no sponsorship relationship with those bodies.
Legal basis
- Performance of the service you request (GDPR art. 6.1.b): the anonymous identifier, device verification and purchase state are essential for the app and its premium features to work.
- Your consent (GDPR art. 6.1.a): notifications. They are only sent if you enable them, and you can turn them off at any time from the app or from iOS settings.
- Legitimate interest (GDPR art. 6.1.f): aggregate usage statistics and crash reports, used to fix bugs and improve the app without identifying you.
How long data is kept
Diagnostic and usage data follows Firebase’s retention periods (up to 14 months for Analytics events, 90 days for crash reports). Your purchase state is kept for as long as it exists, since that is what allows it to be restored. Your preferences live on your device until you delete them or uninstall the app.
Transfers outside the European Union
Google (Firebase) and RevenueCat operate servers in the United States. Both rely on the Standard Contractual Clauses approved by the European Commission and on the EU-US Data Privacy Framework.
Your rights
You may exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to support.apsd@gmail.com. Bear in mind that, since there is no account and no identifying data, it may not be possible to link a request to a specific installation; in that case we will explain it to you and tell you how to erase the data yourself.
The most direct and complete way to erase everything is to uninstall the app: that removes your preferences, the anonymous identifier and the notification token.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es) or with your own supervisory authority.
Children
PrecioLuz is not directed at children under 14 and does not knowingly collect data from them.
Changes to this policy
If this policy changes, this page will be updated along with its revision date. Significant changes will also be announced inside the app.