Privacy Policy for DynafApp

Last Updated: October 10, 2025

Effective Date: October 10, 2025

1. Introduction

Welcome to the DynafApp mobile application ("App") provided by Dynaf N.V. ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services. We respect your privacy and are committed to protecting your personal data in compliance with applicable data protection laws and Google Play Store requirements.

2. Information We Collect

2.1. Personal Information

We collect personal information that you voluntarily provide when creating an account and using our App, including:

• Account Information: Name, email address, phone number, password (encrypted)
• Profile Information: Profile pictures, user preferences, notification settings
• Contact Information: Address, billing information, company details
• Communication Data: Support tickets, messages, feedback, and correspondence with our team

2.2. Energy System Data

To provide our core services, we collect and process data related to your energy systems:

• Solar Production Data: Energy generation statistics, panel performance metrics
• Battery Status: Charge levels, battery health, discharge rates
• Generator Information: Runtime hours, fuel consumption, maintenance schedules
• UPS System Data: Power consumption, backup status, system alerts
• EV Charging Data: Charging sessions, energy usage at DPoint stations

2.3. App Permissions & Why We Need Them

Our App requires the following permissions to provide you with the best experience. We only access these features when you actively use them:

• 📷 CAMERA Permission:
  • Taking photos for support tickets to document energy system issues
  • Capturing profile pictures for your account
  • Scanning QR codes for equipment identification
  • Photos are only taken when you explicitly choose to use the camera feature
• 🎤 RECORD_AUDIO Permission:
  • Recording voice messages for customer support communications
  • Providing audio feedback for technical issues
  • Audio is only recorded when you actively use the voice message feature
• 📁 READ_EXTERNAL_STORAGE Permission:
  • Selecting photos and documents from your device gallery
  • Uploading images for support tickets and profile pictures
  • Attaching files to service requests
• 💾 WRITE_EXTERNAL_STORAGE Permission:
  • Saving energy reports and documents locally on your device
  • Caching app data for offline access
  • Storing downloaded invoices and certificates
• 🖼️ READ_MEDIA_IMAGES / READ_MEDIA_VIDEO / READ_MEDIA_AUDIO:
  • Accessing media files from your device for uploading to support tickets
  • Selecting photos and videos to document equipment issues
  • Only accessed when you choose to attach media to messages
• 🌐 INTERNET ACCESS:
  • Connecting to our servers for real-time energy monitoring
  • Syncing your data across devices
  • Receiving push notifications and alerts
• 📍 LOCATION Permission (Optional):
  • Finding nearby DPoint charging stations
  • Providing location-based services and support
  • You can choose to deny this permission and still use core features

2.4. Device Information & Analytics

We automatically collect certain information about your device and app usage:

• Device Data: Device type, operating system version, unique device identifiers, mobile network information
• Usage Analytics: App features used, session duration, error logs, crash reports
• Performance Data: App loading times, network connectivity status, feature engagement
• This data helps us improve app performance and fix technical issues

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide Energy Monitoring Services: Display real-time data from your solar panels, batteries, generators, and UPS systems
• Process Support Requests: Handle technical support tickets, troubleshoot issues, and provide customer service
• Improve App Performance: Analyze usage patterns, fix bugs, and enhance features based on user behavior
• Send Notifications: Alert you about system status, maintenance requirements, energy production milestones, and important updates
• Communicate with You: Send service updates, newsletters, promotional offers (you can opt-out at any time)
• Maintain Security: Detect and prevent fraudulent activity, abuse, and security threats
• Billing and Payments: Process transactions for services, equipment, and charging sessions
• Compliance: Meet legal obligations and enforce our terms of service
• Research and Development: Develop new features and improve existing energy management solutions

4. Third-Party Services We Use

To provide our services effectively, we integrate with the following third-party service providers:

4.1. Firebase (Google)

We use Google Firebase for critical app infrastructure:

• Firebase Authentication: Secure user login and account management
• Cloud Firestore Database: Store your energy data, user preferences, and app information
• Firebase Cloud Storage: Store uploaded images, documents, and support ticket attachments
• Firebase Cloud Messaging: Deliver push notifications and alerts
• Firebase Analytics: Track app performance and usage statistics
• Firebase Crashlytics: Monitor app stability and fix crashes

Firebase services are subject to Google's Privacy Policy: https://policies.google.com/privacy

4.2. Analytics Services

We use analytics tools to understand how users interact with our App:

• Google Analytics: Track user behavior, popular features, and app performance metrics
• Analytics data is anonymized and aggregated to protect your privacy
• You can opt-out of analytics tracking in the app settings

4.3. Communication Services

• Email Services: We use email service providers to send notifications, support responses, and updates
• SMS Services: For urgent system alerts and two-factor authentication (with your consent)

4.4. Payment Processors

If you make purchases through the App, payment information is processed by secure third-party payment processors. We do not store your complete credit card information on our servers.

5. Data Storage, Security & Protection

5.1. Where Your Data is Stored

• Cloud Storage: Your data is stored on secure Firebase/Google Cloud servers located in multiple regions for redundancy and performance
• Data Centers: Our infrastructure uses industry-leading data centers with physical and digital security measures
• Local Storage: Some data may be cached locally on your device for offline access and improved performance
• Backup Systems: Regular automated backups ensure your data is protected against loss

5.2. How We Protect Your Data

We implement multiple layers of security to protect your information:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols
• Password Protection: Account passwords are hashed and encrypted using industry-standard algorithms
• Access Controls: Strict access controls limit who can view your data internally
• Secure Authentication: We use Firebase Authentication with support for multi-factor authentication
• Regular Security Audits: We conduct regular security assessments and updates
• Monitoring: 24/7 monitoring for suspicious activity and security threats

Please note: While we implement strong security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but we continuously work to protect your data.

5.3. Data Retention

• Active Accounts: We retain your data for as long as your account is active and you continue using our services
• Deleted Accounts: After account deletion, most personal data is permanently removed within 30 days
• Legal Requirements: Some data may be retained longer to comply with legal obligations, resolve disputes, or enforce agreements
• Backup Systems: Data in backup systems may take up to 90 days to be completely removed
• Energy System Data: Historical energy production data may be retained for analytics and reporting purposes (anonymized after account deletion)

6. How We Share Your Information

We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.

We may share your information only in the following limited circumstances:

• Service Providers: Third-party vendors who provide services on our behalf (hosting, analytics, customer support, payment processing). These providers are contractually obligated to protect your data.
• Dynaf Group Companies: With affiliated companies within the Dynaf family for providing integrated energy solutions.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity.
• Legal Requirements: When required by law, court order, or government regulation, or to protect our rights, your safety, or the safety of others.
• With Your Consent: When you explicitly authorize us to share your information with specific third parties.

7. Your Privacy Rights & Control Over Your Data

You have complete control over your personal data. Depending on your location and applicable laws (GDPR, CCPA, etc.), you have the following rights:

7.1. Access Your Data

• Request a copy of all personal information we hold about you
• View your data directly in the app under Settings → Account → My Data
• Download your energy system data and reports
• How to request: Email privacy@dynaf.com with "Data Access Request" in the subject line

7.2. Correct or Update Your Data

• Update your profile information, email, phone number directly in the app
• Request correction of any inaccurate or incomplete information
• How to update: Go to Settings → Account → Edit Profile, or contact support@dynaf.com

7.3. Delete Your Account & Data

You can permanently delete your account and data at any time:

• Option 1 - In-App Deletion:
  1. Open DynafApp and log into your account
  2. Go to Settings → Account Settings
  3. Scroll down and tap "Delete Account"
  4. Confirm your decision and enter your password
  5. Your account and associated data will be deleted within 30 days
• Option 2 - Email Request: Send an email to privacy@dynaf.com with "Account Deletion Request" in the subject line. Include your registered email address and phone number for verification.
• Option 3 - Contact Support: Call us at +599 9 736 3299 during business hours

What happens when you delete your account:

• Your profile, photos, and personal information will be permanently deleted
• Your energy monitoring data will be anonymized and disassociated from your identity
• Support tickets and communications will be retained for legal and quality assurance purposes (with personal identifiers removed)
• You will no longer receive notifications or communications from us
• This action is irreversible - you cannot recover your account after deletion
• If you have active service contracts or equipment warranties, please contact us before deletion

7.4. Opt-Out of Communications

You can control what communications you receive:

• Push Notifications: Disable in Settings → Notifications within the app, or in your device's app settings
• Marketing Emails: Click "Unsubscribe" at the bottom of any marketing email, or manage preferences in Settings → Communication Preferences
• SMS Messages: Reply "STOP" to any promotional SMS, or manage in Settings → Notifications
• Note: You cannot opt-out of essential service notifications (system alerts, security updates, account-related messages)

7.5. Export Your Data (Data Portability)

• Request a copy of your data in a machine-readable format (JSON, CSV)
• Transfer your energy production data to another service
• How to request: Email privacy@dynaf.com with "Data Export Request"
• We will provide your data within 30 days of request

7.6. Withdraw Consent

• You can withdraw consent for data processing at any time
• This may limit or prevent access to certain app features
• How to withdraw: Contact privacy@dynaf.com or adjust permissions in your device settings

7.7. Lodge a Complaint

• If you believe we have not handled your data properly, you can file a complaint with your local data protection authority
• We encourage you to contact us first so we can address your concerns

Response Time: We will respond to all privacy requests within 30 days. For complex requests, we may extend this period by an additional 30 days with notification.

8. Children's Privacy

Our App is not intended for children under the age of 13. We do not knowingly collect, use, or share personal information from children under 13 years of age.

• If you are under 13, please do not use this App or provide any personal information
• If we learn that we have collected personal information from a child under 13, we will delete that information immediately
• Parents who believe their child has provided personal information can contact us at privacy@dynaf.com to request deletion

9. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your information:

• We use Firebase/Google Cloud services which comply with international data protection standards
• Data transfers are protected by standard contractual clauses and encryption
• We ensure all service providers maintain adequate data protection measures

10. Links to Third-Party Websites

Our App may contain links to third-party websites, services, or applications that are not operated by us:

• We are not responsible for the privacy practices of third-party websites
• We encourage you to review the privacy policies of any third-party sites you visit
• These links do not imply endorsement of the third-party site's content or practices

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

• Notification: We will notify you of significant changes via email or push notification
• Last Updated Date: The "Last Updated" date at the top of this policy indicates when it was last modified
• Continued Use: Your continued use of the App after changes constitutes acceptance of the updated policy
• Review Regularly: We encourage you to review this Privacy Policy periodically
• Material Changes: For material changes, we may require you to explicitly accept the new policy

12. Contact Us - Privacy Questions

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

Specific Privacy Requests:

• Data Access Request: Email privacy@dynaf.com with "Data Access Request" in subject
• Account Deletion: Email privacy@dynaf.com with "Account Deletion Request" in subject
• Data Export: Email privacy@dynaf.com with "Data Export Request" in subject
• Privacy Complaint: Email privacy@dynaf.com with "Privacy Complaint" in subject
• Marketing Opt-Out: Click unsubscribe in any email or email privacy@dynaf.com

We take your privacy seriously and will respond to all inquiries within 30 days.

13. Legal Compliance & Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of Curaçao. We comply with:

• Local data protection laws in Curaçao and the Caribbean region
• European Union General Data Protection Regulation (GDPR) principles
• California Consumer Privacy Act (CCPA) standards where applicable
• Google Play Store privacy requirements
• International data protection best practices

14. Your Consent

By creating an account and using the DynafApp, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

• You consent to the collection, use, and processing of your data as described in this policy
• You confirm that you are at least 13 years of age
• You understand your rights regarding your personal data
• You can withdraw consent at any time by deleting your account or contacting us