Heksametrica Kamil Góra
ul. Wiatrakowa 11a, 42-240 Kościelec, Poland
Tax ID (NIP): 9492201417
Data protection contact: support@blask.io
Blask operates in two modes — for owners of a solar PV installation ("Blask Solar") and for owners of an electric vehicle or home energy storage ("Blask Charge"). Depending on the mode you use, we collect:
Account data (all users):
PV installation data (Blask Solar mode):
Charging profile data (Blask Charge mode):
Automatically calculated data:
What we do NOT collect:
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the service (forecasts, recommendations, notifications) | Art. 6(1)(b) — performance of a contract |
| Sending push notifications | Art. 6(1)(a) — consent (you may disable at any time) |
| Improving forecast quality (Forecast Quality Engine) | Art. 6(1)(f) — legitimate interest (improving the service for all users at a given location) |
| Handling account deletion requests, audit logging | Art. 6(1)(c) — legal obligation / accountability |
Legitimate Interest Assessment (Art. 6(1)(f) GDPR): we have carried out a Legitimate Interest Assessment to verify that processing aggregated production data to improve forecast quality (the Forecast Quality Engine) does not unduly override your rights and freedoms. In particular:
– we use only aggregated per-location data and do not disclose individual user profiles to third parties,
– this processing is not used for marketing profiling and does not result in decisions producing legal effects for you,
– you may object to this processing at any time by contacting support@blask.io; if you do, your installation will be excluded from the forecast-calibration aggregate without affecting your access to other app features.
We do not sell data. We use the following processors, solely to deliver the service:
| Party | Role | Data location |
|---|---|---|
| Google Firebase (Authentication + Firestore) | Authentication, database | EU (Firestore Europe region) |
| Render.com | Backend hosting | Frankfurt, Germany (EU) |
| Expo (Expo Push API) | Push notification delivery | per Expo's policy |
| forecast.solar / Open-Meteo | Weather/satellite forecast providers — receive only location, tilt and installation size, never data that identifies you | per providers' policies |
| PSE (Polish Power Grid) | Public energy market price data — Blask fetches price data from PSE; no user data is ever sent to PSE | Poland |
Transfers outside the European Economic Area (EEA): some providers (in particular Expo, Inc., a US company operating the Expo Push API) may process data outside the EEA. Where this happens, data transfers rely on Standard Contractual Clauses (SCCs) approved by the European Commission, combined with appropriate technical and organisational safeguards on the providers' side (including encrypted transmission and limiting the data to the device push token and metadata strictly necessary to deliver notifications). Firebase (Google) and Render.com process data in the EU region (Firestore Europe, Render Frankfurt). forecast.solar and Open-Meteo receive only installation parameters (location, tilt, size) — never user-identifying data — so even where their infrastructure sits outside the EEA, we do not transfer personal data within the meaning of GDPR to them.
Account and installation data is kept for as long as you use the app. Historical production data (pv_actuals) is kept for a maximum of 90 days. After account deletion, we retain a minimal deletion audit record (user ID, email address, request date) for as long as legally required for accountability purposes only — no other profile data is retained.
Under GDPR you have the right to:
Deleting your account in the app triggers deletion of: your profile, installations, production history, forecast accuracy data, and charging profile. This process is irreversible.
Handling your requests: we respond to requests regarding the above rights within 30 days of receipt; in justified cases this period may be extended by a further 60 days, and we will inform you of the reason for any extension. Requests can be submitted to support@blask.io.
Blask is not directed at individuals under the age of 16 and we do not knowingly collect data from them.
We will notify you in the app of material changes to this policy. The "last updated" date at the top of this document reflects the latest version.
Questions about data protection: support@blask.io
Draft generated from source code review (routes/users.js, evProfiles.js, installations.js, docs/ARCHITECTURE.md) — July 2026. Before publishing: obtain legal review (controller details are filled in).