Privacy Policy

Last updated: 28 July 2026

Ventaurio is a local-first app for controlling heat-recovery ventilation units (Vallox, Enervent, Komfovent, Pluggit, Systemair, Helios) and reading smart power meters. We do not run our own servers, do not show ads, and do not sell or share your data.

What the app processes, and where it goes

• Ventilation and device data (temperatures, CO₂, humidity, energy, device settings) is read from your unit and meters over your local network or their vendor clouds, and stored only on your phone.
• Home profile (floor area, rooms, occupants, schedules) and the optional photo of your house stay on the device. The photo is never included in backups.
• Location is used, with your permission, for two optional features: geofencing and local weather. Your saved home coordinates never leave the device, except that latitude and longitude are sent to the Open-Meteo weather API — no account, no identifiers — to fetch the forecast.
• Vendor cloud accounts (MyVallox Cloud, Shelly Cloud) and meter accounts (TP-Link/Tapo, FRITZ!Box) are optional. Credentials are stored in the device's secure storage (Keychain / Keystore) and used only to talk to those services.
• AI features are bring-your-own-key. Your API key is stored in the device's secure storage and never leaves it except to authenticate your own requests. When you use an AI feature, the app sends the relevant statistics and a home-profile summary directly from your phone to the provider you configured, under your account and their terms. We never see these requests — there is no middleman server.
• Google account is optional and used only for backups: the app writes a single file to a hidden app-data folder of your own Google Drive. We cannot read anything else there. Backups contain settings and statistics — never passwords or API keys.
• Purchases are handled entirely by the App Store and Google Play. We never see your payment details.
• Face ID / Touch ID checks happen on-device via the system; biometric data never reaches the app.

Analytics and crash reports

The app uses Firebase Analytics for anonymous usage events — which screens and features are used, never credentials, locations, room names or any personal data — and Firebase Crashlytics for crash reports (stack traces and device model). The data is processed by Google Firebase under its own terms.

Retention and deletion

Everything lives on your device: delete the app to delete the data. A Drive backup can be removed in the app or via Google Drive → Settings → Manage apps. Cloud and meter accounts can be disconnected in Settings at any time; disconnecting deletes the stored credentials.

Your rights under the GDPR

Because the app keeps your data on your own device and we operate no servers, we hold no personal data about you to disclose, correct or erase — deleting the app does all three. The exceptions are the anonymous analytics and crash data above, processed by Google Firebase. To exercise a right, or simply to ask, write to [email protected]. You may also complain to a supervisory authority; in Poland that is the President of the Personal Data Protection Office (UODO).

Children

The app is not directed at children and collects nothing that would identify one.

Changes

If this policy changes materially, the app will say so before the change takes effect rather than quietly updating this page.

Affiliation

Ventaurio is an independent app, not affiliated with, endorsed by or supported by Vallox Oy or any other manufacturer. Brand names identify compatible devices only.

Who we are

Full company details are on the legal page. Contact: [email protected].