Privacy Policy
Version 31 October 2026
This translation has the same content as the Dutch version.
BoilerBuddy shows you what your solar water heater is doing. To do that, we process a limited amount of data. This policy explains which data, why, how long we keep it and what rights you have.
Who is responsible
BoilerBuddy is a trade name of Peters Development, Bijsterhuizen 2414, 6604 LL Wijchen (the Netherlands), registered with the Chamber of Commerce (KvK) under number 77119185. We are the controller within the meaning of the General Data Protection Regulation (GDPR).
Questions about privacy: info@boilerbuddy.eu.
What data we process
Your account
- name and email address;
- your password, only as a hash that cannot be reversed (we cannot read it);
- if you turn on two-factor authentication: the secret key and recovery codes, stored encrypted;
- your language choice and whether you want to receive alerts by email.
Your devices and readings
- the name you give a device, the chosen circuit and the installation details you enter (such as the tank volume and the gas price);
- the readings your device sends (the BoilerBuddy Alpo, or hardware you build yourself): temperatures, the state of the pump and valve, and the time;
- technical data about the device: software version, the hardware serial number, when it last made contact, how long it has been running, its IP address on your home network, the Wi-Fi signal strength, how many readings are still waiting, and errors when reading and sending. A device you build yourself only sends what you let it send.
The BoilerBuddy Alpo only reads the controller of your solar water heater. Apart from its own IP address and signal strength, it sends nothing about your network, and nothing about other devices or your household.
Sharing, organisations and locations
When you share a device, we store with which account, with which role and whether that person gets alerts. If you work in an organisation, such as an installation company, we also store the details of that organisation (name, address, Chamber of Commerce and VAT number), who its members are and with which role. A location you give a device is stored with the address you enter.
An installer's customers
An installer can record their customers in the portal: name, email address, phone number, address and notes, and which devices belong to that customer. The installer manages this data; only they and the people in their organisation see it. If they invite you to view along, we keep the invitation with your email address until you accept it or it expires.
Subscription and payments
For your subscription, we keep the subscription, the devices you pay for, your payments and, if you enter them, your billing details. You pay through Mollie: they process your payment details (such as your account number or credit card) as an independent controller. We only receive the status of a payment and the payment method from Mollie, not your full account or card number.
Your agreement to the terms
As evidence of what we agreed, we keep which version of the terms you accepted and when: when you create your account, and when you take out a subscription also your consent to start right away. With a subscription comes a code calculated from your IP address and browser, which cannot be reversed. An installer who applies also accepts, on behalf of the company, the terms for installers and the data processing agreement; we keep that with the company.
Alerts
The alerts the system creates (for example "pump not running"), with the time and whether they were sent by email.
Logging in and security
For logged-in sessions, we keep your IP address, the browser type and the time of your last activity. This lets you see in your profile where you are logged in and log out other sessions. We also briefly keep track of how often someone logs in or submits a form from an IP address, to limit misuse.
Contact form
Your name, email address and message. We forward these to ourselves by email; we do not store them in the database.
Request to an installer
Through an installer's profile in the installer directory, you send a request: your name, email address and, if you enter them, your phone number, town and country, with your message. We forward these by email to that installer, and we keep them so the installer can find them again in the portal. What the installer then does with them falls under their own privacy policy.
Installers in the directory
For an installer in the directory, we show what they put on their profile themselves (company name, town, country, description, services, service area, certifications, contact details, logo and photos), as long as they have their listing switched on and have paid for it. We store photos without the data that was in the file, such as the place where they were taken.
Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Your account, your devices, charts, alerts and the savings estimate | performance of the contract |
| Email for an alert | performance of the contract; you can turn this off in your profile or per device |
| Security, preventing misuse, tracking down errors in the connection | legitimate interest |
| Answering your question via the contact form | legitimate interest |
| Forwarding your request to the installer you choose | consent, which you give when sending it |
| Showing an installer in the directory | performance of the contract with that installer |
| Your subscription and payments | performance of the contract |
| Keeping your agreement to the terms as evidence | legitimate interest |
| Statutory retention obligation, for example for the accounts | legal obligation |
We do not use your data for advertising, do not sell it and do not create profiles.
How long we keep data
- Readings: the individual readings (per minute) for 30 days. After that we keep summaries: per 5 minutes for 180 days, per quarter of an hour for 2 years, per hour for 10 years and per day for as long as your account exists. This keeps your charts available over the years without storing every individual reading.
- Account, devices and alerts: for as long as your account exists.
- Sessions: until you log out or the session expires.
- Pairing codes for a new device: one hour after they have expired.
- Contact messages: for as long as needed to handle your question, after which we delete the email.
- Requests to an installer: one year, after which we delete them automatically.
- Payments and invoices: seven years, because tax law requires it. We keep your agreement for a subscription for as long.
If you delete your account (in your profile), we erase your account, your own devices with all their readings, and the alerts. Devices someone else had shared with you stay with the owner. We keep payments and invoices for the statutory seven years. We keep backups for fourteen days; after that, your data is gone from them too.
Who we share data with
- Hosting: the website and the database run on a server from LumaDock in Germany. Encrypted backups are also kept with a second storage service in the EU.
- Email: alerts and account emails go through the mail server of PM Networking, in the Netherlands.
- Mollie, for paying your subscription (see above).
- People you share with: whoever you invite sees that device's data according to the role you choose.
- The installer you send a request to: receives your request by email and in their portal.
We have a data processing agreement with the hosting and email providers; Mollie is itself responsible for the payments. Your data stays in the European Union. We do not give data to others, unless the law requires us to.
Cookies and local storage
We only use what is needed to make the site work:
- a session cookie, to keep you logged in;
- a security cookie (XSRF-TOKEN) against misuse of forms;
- a "remember me" cookie, only if you tick that box when logging in;
- a language cookie with your language choice;
- your choice of light or dark theme, stored in your browser (localStorage).
No advertising cookies, no analytics and no trackers. Fonts and scripts come from our own server. That is why we do not ask for consent for cookies.
Security
Connections are encrypted (https). We only store passwords and device API keys as a hash. You can turn on two-factor authentication. Access to the admin area is limited to a small number of administrators, all with two-factor authentication. They can see your account and devices to help you or to fix a fault.
Your rights
You can ask us to access, correct, delete or transfer your data, or object to processing. You can do a lot yourself in your profile: change your name and email address, turn off alerts, delete your account. For anything else, email info@boilerbuddy.eu; we respond within a month.
If you don't agree with how we handle your data, you can file a complaint with the Autoriteit Persoonsgegevens, the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl). You can also complain to the data protection authority in your own country.
Changes
If we change this policy substantially, we will let you know in advance by email or in the portal. The date of the latest version is at the top.