Privacy Policy

Effective Date: 12 October 2026 | Last Updated: 12 October 2026

This Privacy Policy explains what information iVamp ("we", "us" or "our") collects, why, how long we keep it and the choices you have. It covers the iVamp application on Windows, macOS, iOS and Android (the "Application"), the iVamp website and the iVamp for Trade subscription service for installers. iVamp is made by Flowenergi, Lymington, Hampshire, United Kingdom.

We follow the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where it applies, the EU GDPR. We do not sell personal data, we do not show adverts and we do not build advertising profiles.

1. Using the Application without an account

The Application talks directly to the energy-monitoring devices on your own network. The readings it shows are processed on your device and are not sent to us, unless you use one of the features below that is described as sending them.

Licence checks: when you activate or check a licence, the Application sends us the licence key and an identifier for the device it is activated on, so we can confirm the licence is valid and limit it to the permitted number of devices.
In-app purchases (such as iVamp Pro) are made through the Apple App Store, Google Play or the Microsoft Store. The store handles payment; we never see or store your card details.

2. Your iVamp account

If you create an account on our website, we hold:

your name and email address;
your password, stored only in a scrambled (hashed) form that we cannot read;
the licences you hold and the devices they are activated on.

We use these to sign you in, provide your licences, and contact you about your account or purchases.

3. iVamp for Trade (installers)

iVamp for Trade is a subscription service for installers. When you sign in to Trade with your iVamp account, we store the following on our servers so you can use it from any of your devices:

Account details: your name and email address from your iVamp account, and when you first and last used Trade.
Sites: the details you enter for each installation, which can include your customer's name and contact details, the site address, its map location and your notes.
Devices: the name, model, network address and hardware (MAC) address of each monitoring device you add.
Monitoring data: readings from those devices (for example power, voltage and energy), device health checks, the alert rules you set up and the alerts they raise.
Snapshots: diagnostic reports you import, which can include the customer's name, a description of the problem and a screenshot.
Notification settings: the email address alerts are sent to and whether email alerts are switched on.
Sharing records: the invitation codes and live-sharing links between you and your customers, and when they were accepted, used or stopped.
Subscription record: which store you subscribed through, the store's reference for the purchase, which plan it is, and when it started and ends. We send that reference to the store to confirm your subscription is active. We never receive your payment details.

4. If you are an installer's customer

If your installer uses iVamp for Trade, they may store your name, contact details, site address and readings from the devices at your property. Your installer decides what is stored and why (they are the "controller" of that data). We store and process it on their behalf (as a "processor"), only to provide the Trade service to them, and we do not use it for anything else.

Live sharing: if you choose Share with my installer in the Application, readings from the devices you pick are sent to our servers while sharing is switched on, so your installer can see them. You can stop sharing at any time in the Application, and your installer can stop it too.

For questions about the data your installer holds about you, please contact your installer first. You can also contact us and we will pass your request on or help where we can.

5. Alert emails and phone notifications

Alert emails are sent to the address the installer chooses. They contain the site name and details of the alert (for example which device and what was detected). They are sent through our email service provider. Installers can switch email alerts off at any time.
Phone notifications are delivered straight from our servers to the Application. We do not use a third-party push-notification service.

6. Website, cookies and analytics

Our website uses only the cookies it needs to work, such as keeping you signed in. These are essential and do not track you across other sites.
Where we measure visits to the website, we use privacy-friendly, cookie-free analytics that count page views without identifying you or building a profile of you.
Our servers keep short-term technical logs (including IP addresses) to keep the service secure and to investigate faults or abuse.

7. Why we use your data (legal bases)

To provide what you have asked for (Art. 6(1)(b), contract): your account, licences, and the iVamp for Trade service, including storing your sites and readings and sending alerts.
Legitimate interests (Art. 6(1)(f)): keeping the service secure, preventing abuse, confirming subscriptions with the app stores, and fixing faults.
Legal obligation (Art. 6(1)(c)): keeping records we are required to keep, such as for tax and accounting.
On an installer's behalf: customer data held in iVamp for Trade is processed on the installer's instructions; the installer is responsible for having a lawful basis to hold it.

8. Who we share data with

We only share personal data with organisations that help us run the service, and only as much as they need:

Apple, Google and Microsoft, to process purchases and confirm whether a subscription is active.
Our email service provider, to deliver account and alert emails.
Hosting and infrastructure providers that run our servers.
Authorities, where the law requires it.

Some of these providers (in particular the app stores) may process data outside the UK. Where they do, they use safeguards recognised under UK data-protection law, such as adequacy regulations or standard contractual clauses.

9. How long we keep data

Monitoring readings and closed alerts: deleted automatically after 400 days (about 13 months).
Sites, devices, alert rules, snapshots and notification settings: kept until the installer deletes them in the Application or their account is closed.
Live-sharing data: sharing stops as soon as either side stops it. Unused invitation codes expire automatically. Readings that were shared follow the 400-day rule above.
Subscription records: kept while your account exists and deleted with it. (The app store keeps its own record of your payments.)
Your iVamp account: kept until you delete it. You can delete it at any time in the iVamp app (iVamp for Trade → Account → Delete account) or at ivamp.co.uk/delete-account, which deletes your account and all its Trade data straight away. If you ask us by email instead, we do it within 30 days. Records we are legally required to keep (such as website orders) are kept but no longer linked to you.
Technical logs: kept for a short period for security and fault-finding, then deleted.

If your Trade subscription ends, your Trade data is kept so that you can pick up where you left off if you subscribe again. If you would rather it was deleted, contact us.

10. Your rights

Depending on your location, you may have the following rights regarding your data:

Right of Access (Art. 15) — obtain a copy of your personal data
Right to Rectification (Art. 16) — correct inaccurate data
Right to Erasure (Art. 17) — request deletion ("right to be forgotten")
Right to Restriction (Art. 18) — limit how we process your data
Right to Data Portability (Art. 20) — receive data you gave us in a commonly used format
Right to Object (Art. 21) — object to processing based on legitimate interests
Right to Lodge a Complaint — contact your local supervisory authority (the ICO in the UK, or your national authority in the EU)

To exercise any of these rights, contact us at enquiries@ivamp.co.uk. We will respond within one month (or as required by applicable law). We may need to verify your identity before processing your request.

11. Security

Data sent between the Application, the website and our servers is encrypted in transit (HTTPS). Access to Trade data requires a signed-in account, and each installer can only see their own sites and the devices their customers have chosen to share. No method of transmission or storage is 100% secure, but we take reasonable technical and organisational measures to protect your data.

12. Children's privacy

The Application and iVamp for Trade are not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the Application or a prominent notice on our website, and the "Last Updated" date above will change.

14. Contact us

If you have questions, concerns or requests about this Privacy Policy, please contact us:
Flowenergi, Lymington, Hampshire, United Kingdom
Email: enquiries@ivamp.co.uk

If you are in the UK or EEA and believe your data-protection rights have not been addressed, you have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office, ico.org.uk).