Privacy Policy

Last updated: 28 July 2026

Ventaurio is a local-first app for controlling heat-recovery ventilation units (Vallox, Vents/Blauberg, Enervent, Komfovent, Pluggit, Systemair, Helios) and reading smart power meters. We do not run our own servers, do not show ads, and do not sell or share your data.

What the app processes, and where it goes

• Ventilation and device data (temperatures, CO₂, humidity, energy, device settings) is read from your unit and meters over your local network or their vendor clouds, and stored only on your phone.
• Home profile (floor area, rooms, occupants, schedules) and the optional photo of your house stay on the device. The photo is never included in backups.
• Location is used, with your permission, for two optional features: geofencing and local weather. Your saved home coordinates never leave the device, except that latitude and longitude are sent to the Open-Meteo weather API — no account, no identifiers — to fetch the forecast.
• Vendor cloud accounts (MyVallox Cloud, Shelly Cloud) and meter accounts (TP-Link/Tapo, FRITZ!Box) are optional. Credentials are stored in the device's secure storage (Keychain / Keystore) and used only to talk to those services.
• AI features are bring-your-own-key. Your API key is stored in the device's secure storage and never leaves it except to authenticate your own requests. When you use an AI feature, the app sends the relevant statistics and a home-profile summary directly from your phone to the provider you configured, under your account and their terms. We never see these requests — there is no middleman server.
• Google account is optional and used only for backups: the app writes a single file to a hidden app-data folder of your own Google Drive. We cannot read anything else there. Backups contain settings and statistics — never passwords or API keys. Ventaurio's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Purchases are handled entirely by the App Store and Google Play. We never see your payment details.
• Face ID / Touch ID checks happen on-device via the system; biometric data never reaches the app.

How Ventaurio uses your Google account

Signing in with Google is optional and serves one purpose: backing up your settings and statistics so you can restore them on a new phone.

When you turn backup on, the app asks for the Google Drive application data permission (drive.appdata) and writes a single file into the hidden, app-specific folder of your own Google Drive. That permission covers only that folder: Ventaurio cannot see, open or list any other file in your Drive. The backup never reaches us — we run no servers — and it contains app settings and ventilation statistics, never passwords or API keys. You can delete the backup inside the app, or revoke access at any time in your Google Account settings.

Ventaurio's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Full detail is in our privacy policy and terms of use.

Analytics and crash reports

The app uses Firebase Analytics for anonymous usage events — which screens and features are used, never credentials, locations, room names or any personal data — and Firebase Crashlytics for crash reports (stack traces and device model). The data is processed by Google Firebase under its own terms.

This website

ventaurio.com uses Cloudflare Web Analytics: it counts page views, referrers and country, without cookies, without storing anything on your device and without building a profile that follows you between sites. That is aggregate traffic measurement and nothing more — which is also why you see no cookie banner here: there is no cookie to consent to. The site sets no cookies at all and loads no third-party fonts, advertising or tracking scripts.

Retention and deletion

Everything lives on your device: delete the app to delete the data. A Drive backup can be removed in the app or via Google Drive → Settings → Manage apps. Cloud and meter accounts can be disconnected in Settings at any time; disconnecting deletes the stored credentials.

Your rights under the GDPR

Because the app keeps your data on your own device and we operate no servers, we hold no personal data about you to disclose, correct or erase — deleting the app does all three. The exceptions are the anonymous analytics and crash data above, processed by Google Firebase, and the aggregate, cookieless website statistics processed by Cloudflare. To exercise a right, or simply to ask, write to [email protected]. You may also complain to a supervisory authority; in Poland that is the President of the Personal Data Protection Office (UODO).

Children

The app is not directed at children and collects nothing that would identify one.

Changes

If this policy changes materially, the app will say so before the change takes effect rather than quietly updating this page.

Affiliation

Ventaurio is an independent app, not affiliated with, endorsed by or supported by Vallox Oy or any other manufacturer. Brand names identify compatible devices only.

Who we are

Full company details are on the legal page. Contact: [email protected].