Privacy Policy

This policy explains what Sundial (“Sundial,” “we,” “us”) collects, why, and what you can do about it, when you use the Sundial app and SundialEV.com (the “Service”). We’ve kept it short and plain.

The short version

Sundial collects the account, vehicle, and energy data it needs to optimize your EV charging — and our goal is to collect nothing beyond that. We don’t sell your data, and you can disconnect any integration or delete your account at any time.

What we collect

• Account information — your name and email address, provided when you sign in (for example, through Google).
• Vehicle and charging data — information from your connected vehicle account, such as charge level, whether the car is plugged in or charging, and enough location context to tell whether it’s at home. Sundial may also send charging commands to your vehicle on your behalf.
• Energy data — solar production, home-battery level, and related readings from your connected solar or battery system.
• Provider credentials — where a solar, battery, charger, or utility provider offers no official API for you to authorize, and you choose to connect it anyway, the username and password you enter for that provider. We collect these only when you enter them, only for providers connected this way, and only to sign in on your behalf and read your own data. See How we handle provider credentials below.
• Usage and device data — basic logs, settings, and diagnostic information that help us run and improve the Service.

How we use it

We use this information to run the core optimization (deciding when and how fast to charge), show you status and savings estimates, provide support, keep the Service secure, and improve how it works. We don’t use your data for advertising.

Third-party integrations

Sundial connects to a small number of services to do its job. With each, we share only what’s needed for that purpose:

• Tesla — to read your vehicle’s charging status and send charging commands.
• Ford — to read your vehicle’s battery level so charging decisions work from the real number.
• Enphase — to read your solar production and home-battery data.
• SolarEdge and Emporia — to read your solar production and charger data. These providers offer no official API for you to authorize, so they connect with the username and password you supply — see How we handle provider credentials.
• OCPP wall chargers (such as Wallbox, Emporia, and ChargePoint) — to read charging status and start, stop, or adjust charging at the charger.
• Google — to sign you in and verify your identity.
• Anthropic (Claude) — to power in-app assistance and natural-language features; when you use them, the text of your request and limited related context may be processed to generate a response.

Each of these services has its own privacy policy that governs how it handles your data.

Sharing

We don’t sell your personal information. We share data only: with the integrations above to provide the Service; with service providers who help us operate it (for example, hosting); when required by law; or as part of a business transfer, with notice.

Retention

We keep your information while your account is active and as needed to provide the Service. When you delete your account, we delete or de-identify your personal data within a reasonable period, except where we’re required to keep some of it to meet legal obligations.

How we handle provider credentials

Most integrations connect through an official API, where you authorize Sundial through the provider’s own login and we never see your password. Some providers offer no such interface. For those, you can choose to give Sundial the username and password for that account so it can sign in on your behalf and read your data. When you do:

• They are encrypted before they are stored, using field-level encryption with a key held in a managed secret store, separate from the database itself.
• They are used only to sign in to that provider on your behalf and retrieve your own data. They are never sold, never shared with anyone else, and never sent anywhere except to the provider they belong to.
• They are never written to our logs in readable form.
• They are deleted when you disconnect that integration, and when you delete your account.

You are never required to connect a provider this way. If you’d rather not store a password with us, you can skip that integration and Sundial will work with whatever else you have connected.

Security

We use reasonable technical and organizational measures to protect your data, including encryption of sensitive credentials and tokens. No system is perfectly secure, but we work to keep yours safe and to limit what we collect in the first place.

Your choices

• Disconnect any integration (Tesla, Enphase, SolarEdge, and others) from the app or the provider’s settings to stop further data access. Disconnecting also deletes any credentials you supplied for that provider.
• Delete your account to remove your data.
• Revoke Sundial’s access directly with Tesla, Ford, Enphase, or Google through their own account controls. Providers you connected with a username and password have no such control — for those, disconnecting in Sundial deletes the credentials, and you can change your password with that provider if you want to be certain.

Children

Sundial isn’t intended for anyone under 18, and we don’t knowingly collect data from children.

Changes

If we update this policy, we’ll post the new version here and update the date above; significant changes will be communicated through the Service.

Contact

Questions or requests about your privacy? Email sundialev@gmail.com. See also our Terms of Service.