Privacy policy

What the app sends

The app sends structured measurements, site details, household inputs and eligibility inputs to the Indevolt API when it calculates an estimate. Manual measurement works too and sends the structured values you enter; it does not require camera or AR capture.

Raw camera and live video, depth maps, AR world points and full AR frames stay on your device. They are not sent to the Indevolt API. If you accept an AR preview, its JPEG is kept in the app-private local storage on your device.

Google Play Services for AR on Android

Location and coordinates

Your full postcode is sent transiently to the Indevolt API and Postcodes.io for a lookup, then it is cleared from the app flow. Saved and sent coordinates are rounded to 3 decimal places. Device location is optional.

PVGIS/JRC receives rounded coordinates and the roof, orientation and model inputs needed for the generation estimate.

Local storage

The app stores site, surface, evaluation, cache and pending-evaluation data in app-private SQLite storage. It also stores settings, a random installation ID and an accepted preview JPEG in app-private storage. Local data has no automatic expiry; use Delete all data in Settings to remove it from the device.

Indevolt API storage and diagnostics

The Indevolt API persists an HMAC hash of the installation ID, along with the IDs and structured request and result data needed to provide the service. Request IP addresses are used to partition in-memory rate limiting. The Indevolt API logs request IDs and error diagnostics; it does not intentionally log request-body fields, other than the diagnostic reports described below.

Microsoft Azure hosts the API. Azure/Log Analytics diagnostic data is retained for 30 days.

Diagnostics

When the app hits an error or crashes, it sends a technical description of the problem to the Indevolt API: the error code, message and stack trace, the screen it happened on, the app version, the phone model and operating-system version, and the hashed installation ID. The API keeps these reports in its Azure diagnostic logs for 30 days so the fault can be fixed. No camera images, measurements, postcode or contact details are included.

Emailed reports

If you ask for a report, the app sends your email address, any first name you enter, your separate marketing choice and the result you are viewing, including any storage option you chose. The Indevolt API makes a PDF of that result and emails it to you through Microsoft Azure Communication Services.

The API keeps your contact details, consent choices and the PDF so it can deliver the report, show its status and send it again if you ask. Asking for a report does not sign you up for marketing.

The API also adds your email address and any first name to Indevolt's Shopify store as a customer, tagged as coming from this app, so Indevolt can follow up on your report. You are only subscribed to Indevolt's marketing emails if you tick the separate marketing box. The customer record stays in Indevolt's Shopify store until Indevolt removes it.

Draft orders

If you ask for a draft order, the app sends the products and quantities you chose, and the Indevolt API creates an unpaid draft order in Indevolt's Shopify store. If you asked for a report first, the draft order is linked to your customer record in that store. Your measurements, location, household answers, savings and report are not sent to Shopify. A draft order does not take payment or sign you up for marketing.

So that a repeated request cannot create a second order, the API keeps a record of each request: the products, quantities and shop prices, an HMAC hash of the installation ID, the Shopify draft order number and status, and a link to your report while the report is kept. The record holds no contact details and has no set deletion date. The draft order itself stays in Indevolt's Shopify store until Indevolt removes it.

Retention

Evaluation and site records become eligible for deletion after 365 days. PVGIS cache records become eligible for deletion after 30 days. An automated cleanup sweep is scheduled every 24 hours. Report requests, including contact details and consent choices, are deleted after 365 days and report PDFs after 365 days, or sooner when the related evaluation record is deleted. These are eligibility and schedule settings; they do not promise an exact deletion time.

Other services

• Microsoft Azure hosts the Indevolt API and its diagnostic services.
• Postcodes.io provides postcode lookup.
• PVGIS/JRC provides the historical solar data used for modelling.
• Google Play Services for AR provides ARCore on supported Android devices.
• Microsoft Azure Communication Services sends report emails.
• Shopify hosts Indevolt's shop, including product prices, draft orders and the customer records created for report requests.

Indevolt Solar Scan does not provide user accounts, show ads or run its own analytics. This privacy-policy page does not use cookies. The Niantic integration is disabled and is not a live recipient of your data.

Your choices and contact

You can use Delete all data in Settings to clear the app's local data and request deletion of matching Indevolt server records while the installation ID is available. Server deletion also removes this installation's report requests, report PDFs and draft-order records. Customer records and draft orders already in Indevolt's Shopify store stay with Indevolt.

For privacy inquiries, use the developer contact details shown on the exact public Google Play listing.