Independent App
SunFlow is an independent third-party application developed by Sebastian Guerrero. It is not affiliated with, endorsed by, or officially connected with Growatt or any of its subsidiaries. The Growatt name is a trademark of its respective owner.
What We Collect
SunFlow is designed with privacy in mind. We collect the minimum data necessary to provide the service:
- Crash reports and anonymous usage analytics (via Firebase Crashlytics) to improve app stability
- Subscription status (via RevenueCat) to determine feature access
- Device push token stored on our servers solely to deliver widget update notifications to Premium subscribers
Your Growatt Credentials
Your Growatt username, password, and API token are stored exclusively in the iOS Keychain on your device. They are never sent to our servers. SunFlow communicates directly with Growatt's servers using your credentials.
For Premium subscribers, your Growatt API token is encrypted and stored on our servers solely to enable cloud-based widget data refresh.
Data Stored on Our Servers
For Pro and Premium subscribers, the following data is stored on our servers to power widget updates:
- Your plant's live energy data (solar, battery, grid) — refreshed every 5–15 minutes
- Your device push token — used only to send widget refresh notifications
- Your RevenueCat customer ID — used to verify subscription status
Plant energy data is publicly readable (it contains no personally identifiable information). All other data is private and accessible only by our backend services.
Data Sharing
We do not sell or share your personal data with third parties. We use the following services:
- Firebase / Google Cloud — backend infrastructure for widget data and push notifications
- RevenueCat — subscription management
- Firebase Crashlytics — anonymous crash reporting
Free Tier
Free tier users' data is processed entirely on-device. No data is sent to our servers beyond anonymous crash reports.
Your Control
- Use Demo Mode to explore the app without providing any credentials
- Cancel your subscription at any time — server-side data deletion follows within 30 days
- Contact us to request deletion of your data at any time
Contact
If you have questions about this privacy policy, please contact us at: seb@sguerrero.dev
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be reflected in this document with an updated date.