Version 1.0 · See also the beta terms
Suntide privacy policy
Version 1.0 · Effective 7 September 2026 · Updated 28 September 2026
The short version
Suntide reads your home energy system and, when you ask it to, controls it. That means we hold detailed data about how your household uses electricity. We treat that seriously.
The position, plainly: we can see your energy system, but not your secrets, and you stay in control of your data and your hardware.
Your data is used to provide and improve Suntide as described below. It is never sold, and never shared for advertising.
Suntide’s main database is in the United Kingdom, in Amazon Web Services’ London region. Some of the services we rely on handle parts of your data elsewhere; section 3 lists every one of them.
The keys and passwords you give us for other services (your inverter, supplier, meter, charger and similar) are encrypted, and are never shown in plaintext through the product.
Five-minute readings are kept for 400 days, and most other history for as long as you have an account. Deleting your account removes your data from our main database straight away. Section 6 lists exactly what is kept after that, and why.
This summary is for convenience; the full policy below is what applies.
1. Who is responsible for your data
Weftworks Limited (company number 17439248, registered office 2 Ravenscroft Gardens, Trowbridge, Wiltshire, BA14 7JU) is the data controller for Suntide, which is a Weftworks product. The company was called Suntide Limited until 16 September 2026; only its name changed.
We are registered with the Information Commissioner’s Office, registration ZC241086.
Contact: support@suntide.energy.
2. What we collect, and why
Your account: your email address, your name if you give it, your password (held by our identity provider in hashed form; we never see it), and your stated goals.
Why: to run your account and tailor the analysis. Basis: contract.
Your home and household: country, timezone, language, currency and how you came to sign up; your address and its map coordinates, which for a UK home come from its postcode (the address search only suggests addresses as you type); and what your home has, such as solar panels, a battery, a heat pump or gas heating, an electric car, its charger and its tariff, and the cost and install date of your system if you tell us.
Why: correct times and money, weather and sunshine forecasts for your location, and analysis that fits your home. Basis: contract.
Your supplier, tariff and meter: your electricity supplier, your tariff and its codes, your supplier account number, your meter point numbers (MPAN), your smart meter’s identifier, smart-meter readings if you connect them, and any bill you upload or email to us. Bills are read automatically to find your tariff.
Why: to price your energy correctly and check your bills. Basis: contract.
Keys and passwords for your other services: the API keys, tokens or sign-ins you give us for your inverter manufacturer, your energy supplier, the Glow meter service, your electric car charger’s service, Shelly, and Axle.
How held: encrypted with a dedicated key using envelope encryption. They are decrypted only inside the automated processes that read your system, control it when you have asked Suntide to, run grid-services events you have joined, or disconnect a service. They are never shown in plaintext through any user-facing system, and they are deleted from our main database when you disconnect that service or delete your account.
Basis: contract.
Energy readings: power flows (solar, battery, grid and house) about every five minutes, or more often from a Suntide Link; battery charge; half-hourly and daily energy totals; a daily snapshot of your inverter’s settings; car charging sessions; readings from a Suntide Plug or a Shelly device; and the status of Suntide devices (identifier, firmware, signal strength, and battery level for a Glance frame).
Why: this is the service: dashboards, health checks, statements and control. Basis: contract.
We’re explicit about this one. Five-minute energy data is revealing: patterns in it can indicate when people are home, asleep or away. We use it to provide and improve the service as this policy describes. We do not sell it, share it with advertisers, or use it to profile you for anything other than the analysis you signed up for.
Changes Suntide makes to your equipment: when you ask it to (applying a fix, changing a schedule, letting Suntide steer your battery, grid services or the battery guard), Suntide writes settings to your inverter or charger, through the manufacturer’s service or your Suntide Link. We record each change, what it replaced, and your own settings so they can be put back.
Basis: contract.
Findings and health history: the scores, findings and fix outcomes the Service works out.
Basis: contract.
Billing: your Stripe customer and subscription identifiers, your plan and its status, and a record of each payment (its date, amount and plan). Card details do not touch Suntide; payment information is handled by Stripe.
Basis: contract; keeping payment records is also required by law.
Referral: a gift code you redeem and, where relevant, who it came from.
Basis: contract.
Support and customer records: messages and attachments you send to support; a support ticket we open when you sign up, holding your email, country, address and coordinates, and the equipment and supplier you told us about; a ticket noting who left when an account is deleted; and a customer record (name, email, country, how far set-up has got, your equipment and your address) in our own customer-relationship system, so we can help you.
Basis: contract, and legitimate interests in running a support service.
Marketing: your email address if you agree to marketing, such as the monthly note about what your home is not using yet. Marketing is based on consent, which you can withdraw at any time through the unsubscribe link in every message or in Settings. Service messages about your account continue regardless, because they are needed to run the Service.
Basis: consent.
Phone notifications: if you use the phone app and allow notifications, your device’s notification token, and the content of each notification as it passes through Expo, and then Apple (on an iPhone) or Google (on an Android phone), on its way to your phone.
Basis: contract.
Technical logs: operational records of what our systems did, which include internal account and household identifiers. Email addresses appear only as one-way hashes, and credentials are never recorded. Our own systems do not record your IP address, but some of our providers see it as part of delivering the service (section 3).
Why: security, debugging and fraud prevention. Basis: legitimate interests.
Aggregated improvement: anonymised and aggregated readings that cannot identify you, used to improve device support, benchmarks and analysis for everyone.
Basis: legitimate interests.
For processing based on legitimate interests, we consider the purpose, necessity and potential impact on individuals, and keep that assessment under review.
3. Where your data lives, and who processes it
Suntide’s main database is in the United Kingdom, in Amazon Web Services’ London region. Our support desk, customer-relationship system and mailing list run on servers Suntide operates in the United Kingdom.
Where a provider below processes personal information outside the UK, we rely on a transfer mechanism permitted by UK data protection law, such as an adequacy regulation or appropriate contractual safeguards (the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU-US Data Privacy Framework where it applies).
Providers who process data on our behalf:
| Who | Purpose | What they handle | Where |
|---|---|---|---|
| Amazon Web Services | Hosting, database, sign-in, sending and receiving email, reading uploaded bills, messages to Suntide devices, encryption keys, storage | Everything described in section 2 | London region; AWS’s content delivery network serves the website worldwide |
| Stripe | Payments and subscriptions | Your email, a household reference, and payment details you enter at checkout | United States and Ireland |
| Cloudflare | Secure connections and web addresses for the support desk, customer-relationship system and mailing list | Everything sent to and from those sites, including your IP address | Worldwide network |
| Backblaze | Encrypted backups of the support desk, customer-relationship system and mailing list | Copies of what those systems hold | The Backblaze data region for our account; with safeguards where it is outside the UK |
| Fastmail | The support@suntide.energy mailbox | Emails you send to support | Australia and the United States |
| Mapbox | The address search as you type | The address text you type and your IP address | United States |
| postcodes.io (Ideal Postcodes) | Finding a UK home’s location from its postcode | Your postcode, sent by our servers, not your device | United Kingdom |
| Open-Meteo | Weather and sunshine forecasts | Your home’s coordinates, to about 11 metres | European Union |
| Expo | Delivering phone notifications | Your notification token and the notification’s content | United States |
| Apple | Delivering notifications and live updates to iPhones | Your device token and the content shown | United States |
| Delivering notifications to Android phones, through Firebase Cloud Messaging | Your device token and the notification’s content | United States and other countries where Google operates | |
| GitHub | Our private code repository | Internal project notes that name some early testers | United States |
Services you connect, which are separate from Suntide: your inverter manufacturer’s platform (for example SolisCloud, GivEnergy, Fox ESS or Sigenergy), your energy supplier (Octopus Energy, E.ON Next or EDF), the Glow meter service from Hildebrand, your electric car charger’s service (such as myenergi, Ohme, Hypervolt or Pod Point), Shelly, and Axle. For Ohme and Pod Point, the sign-in passes through Google’s Firebase service. When you connect one of these, Suntide uses your own account with them to read your data and, when you ask it to, to send instructions. Each is a separate company responsible for its own processing, under its own privacy notice and terms. We are responsible for what we do with your information inside Suntide, not for their independent processing.
4. Cookies and similar technologies
We use no third-party analytics and no advertising trackers.
We count visits to our public pages and presses of the sign-up buttons, as daily totals by page. The count holds no identifier, no IP address and no cookie, so it cannot be tied to you.
We do not use any non-essential cookies or similar technologies. The browser storage we use is limited to what is strictly necessary to operate the Service, such as your sign-in session and preferences like theme.
That’s why there is no cookie consent banner. If that changes, we’ll update this policy and ask for consent where the law requires it.
5. Adding providers
If we add a provider that processes your personal information, we’ll update the list in section 3 before it does so, where the law requires us to.
6. How long we keep things
| Data | Kept for |
|---|---|
| Five-minute readings, and Suntide Plug readings | 400 days, then deleted automatically |
| Half-hourly and daily energy, smart-meter data, findings, settings history, car charging sessions, grid-services events, and the account’s activity record | The life of your account |
| Account, household, tariff and supplier details | The life of your account |
| Keys and passwords for your other services | Until you disconnect that service or delete your account, encrypted throughout |
| Records of changes Suntide made to your equipment: which setting, when, what it was before and after, and who asked | 6 years from each change, including after you delete your account (see below); the battery plans Suntide worked out, 180 days |
| Bills you upload or email to us | The image is deleted when you confirm or abandon it, and within 30 days at most; the tariff read from it is kept for the life of your account |
| Phone notification tokens | Until you sign out of the app or delete your account |
| Old waitlist entries | Unconfirmed entries 30 days; confirmed entries until we retire the list, which closed on 14 September 2026 |
| Support tickets | 2 years after the ticket is closed, then deleted automatically |
| Customer-relationship records | The life of your account; removed when you delete it |
| Mailing list | While you are subscribed; removed within an hour of unsubscribing or deleting your account |
| Technical logs | 90 days, then deleted automatically |
| Payment records | Kept after your account is deleted, for tax and accounting law: the date, amount and plan of each payment, without your name, email or address |
| Backups | Our main database can be restored to any point in the last 35 days. The support tools are backed up nightly, with four nights kept; the customer-relationship system’s database copies are kept for up to about three months |
We may also keep limited records where needed to meet legal, accounting, security or fraud-prevention obligations.
If your plan ends
When a trial or plan ends and no plan is chosen, Suntide pauses. Before it pauses, it puts your inverter back on its own settings. We keep collecting your readings for six months, so your history has no gap if you come back; after that, no new readings are stored. Nothing is deleted because a plan ended, and you can still sign in, choose a plan, download your data or delete your account.
Deleting your account
Settings → Data → Delete this account. Any subscription is cancelled first. If Suntide is still putting your equipment back on its own settings, deletion waits until that is done, usually a few minutes. Then your account, keys and passwords, readings, history, household and tariff are deleted from our main database, along with everything held against a Suntide device or a Shelly connection you used, such as Plug readings. A Suntide device itself keeps only its own identifier and firmware record, with nothing linking it to you. Your customer-relationship record and mailing-list entry are removed.
What remains after deletion:
- Payment records, as described above. They are linked to Stripe’s reference for each payment rather than to you by name, and Stripe keeps its own records as the law requires.
- Records of changes Suntide made to your equipment, for 6 years from each change: which setting changed, when, what it was before and after, and whether it was you, Suntide’s plan, a grid event or Suntide support, without your name, email or address. We keep them so that we can show what happened to your equipment if there is ever a dispute or a claim (UK GDPR Article 17(3)(e)).
- Support tickets, including the ticket noting that you left, which holds your name and email, for 2 years after they close.
- Backups and logs, for the periods above.
7. Your rights
You have the right to access your data, have inaccurate data corrected, request deletion, restrict or object to processing, take your data with you where the right to portability applies, and withdraw consent where consent is the basis for processing.
In Suntide, some of these are self-service: you can download your data and delete your account from Settings.
For anything else, email support@suntide.energy.
We’ll normally respond within one month of receiving your request. Where the law allows, we may extend that for complex or multiple requests, and we’ll tell you if we need to.
If you’re unhappy with how we handle your information, you can complain to the Information Commissioner’s Office, although we’d appreciate the chance to put it right first.
8. Automated analysis and control
Suntide uses algorithms and statistical models to find patterns in your energy data, work out estimates and make recommendations. That’s the product.
Suntide also acts automatically in two ways:
- It controls your equipment when you have asked it to. With steering, the battery guard, grid services or a schedule you applied, it writes charge and discharge settings to your inverter or charger without a further click each time. You can switch these off in the app.
- It pauses access when a trial or plan ends without a plan being chosen, as described in section 6.
No decision with legal or similarly significant effect is made about you solely by automated processing. If you think an automatic action was wrong, email support@suntide.energy and a person will look at it.
9. Security
We maintain technical and organisational measures designed to protect your information.
These include encryption of every key and password you give us, least-privilege access, UK-region storage for Suntide’s main database, and operational logs designed not to contain your email address or credentials.
No internet-based service can guarantee absolute security, but we design the Service to keep access to personal information to what is necessary to operate it.
If a personal data breach occurs and the law requires us to tell you or the Information Commissioner’s Office, we will.
10. Children
Suntide is for household energy account holders and is not directed at anyone under 18.
11. Changes to this policy
We’ll update this policy as the Service grows. It is versioned and dated at the top.
Material changes will be emailed before they take effect where appropriate, and the version currently published on suntide.energy will always show the policy that applies.
Postcode locations: contains OS data © Crown copyright and database right 2026; contains Royal Mail data © Royal Mail copyright and database right 2026; source: Office for National Statistics, licensed under the Open Government Licence v.3.0.
Suntide is a product of Weftworks Limited · Registered in England and Wales · Company number 17439248 · Registered office 2 Ravenscroft Gardens, Trowbridge, Wiltshire, BA14 7JU · ICO registration ZC241086