GridSentinel Privacy Policy

Last updated: 25 April 2026

Effective date: 22 March 2026


GridSentinel is operated by Foundry05 Pty Ltd (ACN 696 646 769) ("we", "us", "our"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights.

GridSentinel is operated by Foundry05 Pty Ltd. We are committed to handling your personal information in a manner consistent with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

Contact: hello@gridsentinel.app


1. What Information We Collect and Why

We collect only the information necessary to operate the service. This section serves as our collection notice under APP 5.

Information you provide directly

InformationWhy we collect it
NameAccount creation and communications
Email addressAccount creation, service notifications, and updates
Battery typeConfiguring the correct driver and API connection
Amber Electric API keyConnecting to the Amber API to read live electricity prices
Battery OAuth tokens (Tesla) or credentials (Sigenergy, FoxESS)Sending automation commands to your battery
NEM regionCorrect timezone handling for your account

Consequence of not providing information: If you do not provide your name, email, and API credentials, we cannot create your account or operate the automation service.

Information collected automatically

InformationWhy we collect itRetention
Engine decisions (mode, price, SoC, reason)Transparency log for your review in-app and operational records24 months, then auto-deleted
Battery state of chargeIncluded in each decision record24 months (part of decision record)
Import and export price at time of each cycleIncluded in each decision record24 months (part of decision record)
Application error logsDebugging and service improvement30 days
API request timestamps and user identifiersService operation and debugging30 days
Push notification device tokensSending mode change notifications to your device(s)Until you uninstall the app or token expires

Error logs may contain technical data including your user ID and anonymised request information. These are used only for debugging and are not shared with third parties.

Information we do not collect


2. How We Use Your Information

We use your information only for the purposes described in §1. Specifically, we do not:


3. Who We Share Your Information With

We share limited information with the following parties to operate the service:

Amazon Web Services (AWS)

All GridSentinel infrastructure runs in the ap-southeast-2 (Sydney) region. Your data is stored and processed in Australia. AWS acts as a data processor on our behalf and is bound by its own privacy commitments. AWS Privacy Policy

Amber Electric

GridSentinel connects to the Amber Electric API using your API key to fetch live electricity prices and (in future) your metered usage data. Your API key is stored encrypted. We do not share your name, email, or other personal information with Amber. Amber Privacy Policy

Tesla / Sigenergy / FoxESS / other battery providers

GridSentinel connects to your battery's cloud API using credentials you authorise. These credentials are stored encrypted. We do not share your name, email, or other personal information with battery providers. The connection is entirely credential-based.

Google Firebase Cloud Messaging (FCM)

GridSentinel uses Firebase Cloud Messaging to deliver push notifications to your device (e.g. mode change alerts). A device-specific registration token is sent to Google's FCM service to route notifications. No personal information (name, email, battery data) is shared with Google via this service. You can disable notifications in Settings. Firebase Privacy Policy

Google Firebase Crashlytics (diagnostic data)

GridSentinel uses Firebase Crashlytics to collect crash reports and unexpected error events from the mobile app. Each report includes device model, OS version, app version, an anonymised user identifier, the screen and high-level state the app was in when the error occurred (battery type, whether Amber is connected, current operating mode, network type), and recent navigation / action events leading up to the failure. No email address, no payment data, no battery credentials, and no API keys are included. This data is used solely to diagnose bugs and improve reliability. Diagnostic collection only occurs in production builds. Firebase Privacy Policy

No other third parties. We do not use third-party analytics, advertising platforms, or data brokers. We do not share your personal information with any party not listed above.

Overseas transfers: Push notification delivery tokens and crash diagnostic data are processed by Google's Firebase services, which may process data outside Australia. No personal information is included beyond what is described above. All other data is stored and processed in AWS ap-southeast-2 (Sydney).


4. How We Store and Protect Your Information

Despite these measures, no system is completely secure. We cannot guarantee the absolute security of your information.


5. Data Breach Notification

In the event of a data breach involving your personal information, we will notify you and, where required, the Office of the Australian Information Commissioner (OAIC) as soon as practicable and in any event within 30 days of becoming aware of the breach. The notification will describe what information was involved, what we are doing to address the breach, and what steps you can take to protect yourself.


6. Your Rights

You have the right to:

Access: Request a copy of the personal information we hold about you. We will respond within 30 days.

Correction: Request that we correct personal information that is inaccurate, incomplete, or out of date.

Deletion: Request deletion of your account and associated personal information. We will action deletion within 30 days. Operational records (decision logs and the minimal deletion record we retain to identify them) are retained for 24 months and then automatically deleted. If you require earlier deletion of these operational records, email hello@gridsentinel.app and we will purge them on request, subject to any overriding legal obligations.

Complaints: If you believe we have not handled your personal information appropriately, contact us first at hello@gridsentinel.app. We will respond within 30 days. If you are unsatisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

To exercise any of these rights, email hello@gridsentinel.app.


7. Cookies and Tracking

GridSentinel does not use cookies or web tracking technologies in the mobile app. The GridSentinel website (gridsentinel.app) does not use analytics or advertising cookies. The only information collected via the website is what you voluntarily submit through the waitlist form.


8. Children's Privacy

GridSentinel is not directed at anyone under 18 years of age. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal information, please contact us at hello@gridsentinel.app and we will delete it promptly.


9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notification before they take effect. The "Last updated" date at the top of this document reflects the most recent revision.


10. Contact and Complaints

GridSentinel Privacy

Foundry05 Pty Ltd (ACN 696 646 769)

New South Wales, Australia

Email: hello@gridsentinel.app

Office of the Australian Information Commissioner (OAIC)

Website: oaic.gov.au

Phone: 1300 363 992