Privacy Policy

Last updated: January 31, 2026

General

This privacy notice describes how Amps AI Ltd ("Amps AI", "we", "us") processes your personal data in connection with your use of our platform for connecting

and managing smart energy devices including smart thermostats, heat pumps, solar inverters, and home batteries and related information services (jointly

"Amps AI Services").

Amps AI Services are provided to you through our collaboration partners ("Partners"). For the majority of personal data processed through our platform, Amps

AI acts as a data processor meaning we process your data on the instruction of you and our Partners, who are the data controllers. Each Partner is responsible

for its own data processing and how it uses your data. Please refer to the relevant Partner's privacy policy for more information.

The one exception is your Amps AI account data collected via Google Sign-In, for which Amps AI acts as a data controller. This is explained further below.

Our role in processing your data

Amps AI operates primarily as a data processor. This means we only process your personal data including data from your connected smart energy devices

when you or your Partner instructs us to do so. We do not use your device data for our own purposes and we do not sell it or share it with any party other than

those you have authorised.

For your Amps AI account (created via Google Sign-In), Amps AI acts as a data controller. In this limited capacity we are responsible for how your account data

is handled. Our contact details in this regard are:

Company name: Amps AI Ltd Company address: Arquen House, 4-6 Spicer Street, St. Albans, AL3 4PQ Company email: admin@amps.ai

How we collect your data

From you directly. We collect information from you that is necessary to operate your account and connect your devices, such as your address or device login

credentials.

From your devices. When you connect a smart energy device, we collect data from it such as energy readings, charge state, and operating status on the basis

of your consent and in order to pass that data to you or your authorised Partner.

From Partners. In some cases Partners provide us with information about you that is necessary to deliver the Amps AI Services, such as your address. This is

information you have already provided to the Partner.

From Google Sign-In. When you authenticate using Google, we receive your name, email address, and profile picture solely to create and manage your Amps AI

account. This data is not used for advertising and is not shared with Partners.

The type of data we process and why

The personal data we process varies depending on which Amps AI Service is being used. In all cases relating to device data, we act on your instruction and that

of your Partner.

Device connection. We process your device credentials and identifiers to establish and maintain the connection between your devices and the platform. Login

credentials are stored securely and are not shared with any Partner.

Device monitoring and control. On your instruction, we process data such as device location, operating mode, energy consumption, generation output, charge

rate, and charge state. This data is made accessible only to you and the Partners you have authorised.

Statistics. We process location information, energy readings, and device status data to provide usage and performance statistics to you and your authorised

Partners.

How we use your data and the legal basis for processing

As a data processor, we process device data only on your instruction and that of your authorised Partners. The legal basis for this processing rests with the

relevant data controller either you or your Partner. You should refer to your Partner's privacy policy for their lawful basis.

For account data (Google Sign-In), where we act as controller, we process your data on the basis of our legitimate interest in providing you with a secure and

functional account, and where required, your consent. Where we rely on consent, you may withdraw it at any time.

How long we store your data

Device data is retained only for as long as necessary to deliver the relevant service, or as directed by your Partner as the data controller. Account data is

retained for as long as your account is active and deleted within 30 days of account closure. All data is deleted or anonymised as soon as possible after its

purpose has been served, generally within 3 months.

Where your data is stored

We process your data within the UK and EU/EEA. Where we engage IT providers outside this region, we ensure appropriate safeguards are in place, for example

the UK International Data Transfer Agreement or EU Standard Contractual Clauses.

With whom your data is shared

Your device data is shared only with the Partners you have explicitly authorised. We do not share your data with any other party unless instructed by you or

required by law.

Amps AI uses software and data storage providers who process your data strictly on our behalf and under our instruction. They may not use your data for their

own purposes.

We do not sell your personal data. We do not share Google user data with Partners or third parties, and we do not use it for advertising purposes.

Google API Services

Amps AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use

requirements (see developers.google.com/terms/api-services-user-data-policy). Google user data is used solely to authenticate you and is not used for any

purpose other than providing access to the Amps AI platform.

Data protection rights

As a data subject, you have the following rights regarding your personal data. For device data processed on behalf of a Partner, you may need to exercise these

rights directly with the Partner as the data controller. For account data, you can exercise these rights directly with us.

Right to access information collected about you

Right to rectify or update any information about you that is inaccurate or incomplete

Right to request that we restrict processing of your personal data

Right to delete data about you

Right to withdraw consent that you may have given

Right to receive data about you in a structured, commonly used and machine-readable format so it can be transferred to another provider

Right to lodge a complaint about the processing of your personal data with a supervisory authority

To exercise any of these rights in relation to your account data, please contact us at admin@amps.ai

More information

If you have any questions about how we process your personal data, please contact us at admin@amps.ai