1. Information We Collect

1.1 Information You Provide Directly

• Account registration: Email address used to create your AmpNest account.
• Building setup: Apartment building name, floor/unit reference (optional), and charging spot information you enter manually.
• Utility setup: Your selected electricity provider and rate plan (e.g., SCE TOU-D-PRIME). We do not connect to your utility account or access your utility bills.
• Support communications: Any messages you send to our support email.

1.2 Information Collected via Tesla OAuth Authorization

If you choose to connect your Tesla account (Pro and Pro+ plans only), you authorize AmpNest through Tesla's official OAuth 2.0 protocol. We receive and store:

• An OAuth Access Token and Refresh Token issued by Tesla
• Vehicle charging state (charging / not charging)
• State of Charge (battery percentage)
• Energy added per session (kWh)
• Charging power (kW) and estimated completion time
• Vehicle location (used solely for route planning features)

1.3 Information Collected Automatically

• Device information: Device model, operating system version, and unique device identifiers (used for Push notification delivery).
• Usage data: Feature interactions, session timestamps, and crash reports collected anonymously via Apple's standard crash reporting.
• Location data: Approximate GPS location, collected only when the app is in use and only if you grant location permission. Used to auto-detect your electricity provider and plan charging routes.
• Push notification tokens: Browser or device Push tokens generated when you enable notifications. No phone number is ever required or collected.

1.4 Web (QR Code) Users

Neighbors who access AmpNest via a shared QR code without downloading the app may optionally provide an email address to receive waitlist notifications. No account is created. This email is used solely to send a single charging-spot availability notification and is deleted from our active records after the notification is delivered or after 72 hours, whichever comes first.

2. How We Use Your Information

Purpose	Data Used	Legal Basis
Deliver core charging features (spot status, booking, notifications)	Account info, Push tokens, building data	Performance of contract
Calculate charging cost estimates	Tesla API kWh data × locally stored rate	Performance of contract
Send Push notifications (spot available, booking reminders, off-peak alerts)	Push token, booking records	Performance of contract / consent
Auto-detect electricity provider	GPS location (one-time, on setup)	Consent
Plan weekly charging routes	Location, calendar access (if granted)	Consent
Process subscription payments	Handled entirely by Apple App Store — we never see payment card data	Performance of contract
Improve the Service and fix bugs	Anonymized usage and crash data	Legitimate interest
Respond to support requests	Email address, support message content	Legitimate interest

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We do not share your data with advertisers. We may share data only in the following limited circumstances:

• Service providers: Infrastructure providers (e.g., cloud hosting, database services) who process data on our behalf under confidentiality agreements. These providers may not use your data for their own purposes.
• Apple Inc.: Subscription and payment processing is handled entirely by Apple through the App Store. We receive only anonymized transaction confirmations — no payment card information.
• Tesla, Inc.: When you authorize Tesla OAuth, data flows between Tesla's servers and our servers under Tesla's Terms of Service. AmpNest does not re-sell Tesla data to any third party.
• Legal obligations: We may disclose information if required by law, court order, or to protect the rights and safety of users or the public.
• Business transfer: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you via in-app notice or email before any such transfer occurs.

4. Data Retention

• Active accounts: Data is retained for as long as your account remains active.
• Account deletion: Upon your request to delete your account, we will permanently delete all personally identifiable data within 30 days, except where retention is required by law.
• Tesla tokens: OAuth tokens are deleted immediately upon you revoking authorization in the Tesla app or upon account deletion.
• QR web visitor emails: Deleted within 72 hours of notification delivery or expiration.
• Anonymized analytics: May be retained indefinitely as they cannot be used to identify you.

5. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher.
• Tesla OAuth tokens are stored encrypted at rest using AES-256 encryption.
• Access to production systems is restricted to authorized personnel only.
• We conduct regular security reviews of our infrastructure.

6. Your Rights and Choices

6.1 Access and Correction

You may request access to the personal data we hold about you and ask us to correct any inaccuracies by contacting us at the email below.

6.2 Deletion

You may request deletion of your account and all associated personal data at any time. Submit your request via the in-app Settings screen or by emailing us. We will complete deletion within 30 days.

6.3 Tesla Authorization Revocation

You may revoke AmpNest's access to your Tesla account at any time through the Tesla mobile app under Connected Services → Authorized Apps. Revoking access will immediately disable Tesla-dependent features.

6.4 Notifications

You may disable Push notifications at any time through your device's system settings or through the AmpNest Settings screen.

6.5 Location

Location access can be disabled at any time through your device's system settings. Disabling location will prevent automatic utility provider detection and route planning features.

6.6 California Residents (CCPA)

California residents have the right to know what personal data we collect, the right to delete personal data, the right to opt-out of the sale of personal data (we do not sell personal data), and the right to non-discrimination for exercising these rights. To exercise any CCPA rights, contact us at the email below.

6.7 European Residents (GDPR)

If you are located in the European Economic Area, you have the right to access, rectify, erase, restrict processing, object to processing, and request data portability. You also have the right to lodge a complaint with your local supervisory authority. Contact us to exercise these rights.

7. Children's Privacy

AmpNest is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it immediately. If you believe a child has submitted information to us, please contact us.

8. Third-Party Services and Links

The Service integrates with third-party services including Tesla's Fleet API and Apple App Store. Your use of those services is governed by their respective privacy policies. AmpNest is not responsible for the privacy practices of third-party services.

The Service may contain links to external websites. We are not responsible for the privacy practices of those sites.

9. Goodwill Compensation

If you contact us regarding a support issue and it remains unresolved after 5 business days (one calendar week of business days) from our first response — through no fault of your own — you may be eligible for goodwill compensation under our Goodwill Compensation Policy. Please see our End User License Agreement (Section 8.3) and Technical Support page for full details.

Processing a goodwill compensation request requires us to verify your subscription status and the nature of the unresolved issue. For this purpose we will use your account email address and support correspondence. This data is used solely for compensation verification and is not shared with third parties.

To initiate a request, email ampnest@familymedvault.com with the subject line "Goodwill Compensation Request."

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through an in-app notification or by email at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

11. Contact Us