Official Privacy Policy

GridWatch Field Console (developed by Kaliblip) is engineered on a "Zero Knowledge, Local-First" architecture. We do not operate remote user accounts, we do not require registration, we do not run marketing trackers, and we never collect, monetize, or broker personal user information.

2.1 Overview & Core Commitment

GridWatch ("we," "us," or "our"), developed by Kaliblip, is an industrial telemetry and diagnostic monitoring field console engineered for utility operators, field engineers, and electrical technicians to monitor transformer health metrics (such as voltage, current, temperature, humidity, and oil levels) across electrical power grids.

Your privacy is paramount. GridWatch is designed from the ground up on a "Zero Knowledge, Local-First" architecture. We do not operate remote user accounts, we do not require registration, we do not run marketing trackers, and we never collect, monetize, or broker personal user information.

2.2 Data Collection & Handling Practices

We categorize the data handled by GridWatch as follows:

• A. Personal Identifying Information (PII): GridWatch does NOT collect names, email addresses, phone numbers, home addresses, or financial information. No remote user profiles or cloud accounts are created or maintained by GridWatch.
• B. Location Information: Precise and coarse GPS coordinates of your current device location are collected strictly while the application is in active use. This is used to calculate geographical proximity to field transformer nodes, compute driving route distances, generate road polylines via Open Source Routing Machine (OSRM), and open turn-by-turn navigation in Apple Maps or Google Maps. Location data is ephemeral, held strictly in volatile device memory while the map screen is open, and is never logged to a remote database, uploaded to our servers, or retained once the app is closed.
• C. Telemetry & Hardware Channel Configurations: Handles public or private ThingSpeak Channel IDs, Read API Keys, and IoT sensor metrics (phase voltage, load current, winding/oil temperature, ambient humidity, oil level percentages, and device operational status). All channel identifiers, custom node names, and Read API Keys are stored strictly on your physical device via private application sandboxed storage (AsyncStorage). We do not host or duplicate these keys on any proprietary central server.
• D. Biometric Authentication Data: Face ID, Touch ID, or iOS Device Passcode prompts interact directly with Apple's standard LocalAuthentication APIs. All biometric verification occurs strictly within the hardware-isolated Secure Enclave of your Apple device. GridWatch never receives, processes, transmits, or stores your biometric characteristics or face data.

2.3 Device Permissions & Explanations (iOS Info.plist)

GridWatch requests only the minimum permissions necessary to deliver its core industrial utilities:

• 1. NSLocationWhenInUseUsageDescription: "GridWatch needs your location to display your position and calculate directions to transformer nodes." Displays your location pin relative to nearby transformers on the interactive MapKit map, calculates driving distance/time estimates, and initiates turn-by-turn navigation. You may enable or revoke location permissions at any time in iOS Settings > GridWatch > Location.
• 2. NSFaceIDUsageDescription: "GridWatch requires Face ID / Passkey authentication to secure transformer monitoring data." Secures the field console against unauthorized physical access to critical infrastructure monitoring channels. Can be managed or bypassed using the device passcode or via the on-screen Demo Mode.

2.4 Third-Party Network Services & Data Sharing

GridWatch communicates over encrypted TLS/HTTPS connections with the following third-party technical services:

• 1. MathWorks ThingSpeak REST API (https://api.thingspeak.com): Queries the ThingSpeak REST API using user-provided Channel ID and Read API Key to retrieve live and historical telemetry feeds sent by IoT transformer sensors. Only requested Channel ID and Read API Key are sent; no personal user identity or device identifiers are transmitted. (ThingSpeak Privacy Policy)
• 2. Open Source Routing Machine (OSRM) (https://router.project-osrm.org): Coordinates of origin and destination points are sent to the OSRM routing engine to retrieve road geometry. No personal identifiers or device metadata are included.
• 3. Apple Maps / MapKit (Apple Inc.): Native iOS map rendering, cartographic display, and external turn-by-turn navigation hand-off. (Apple Privacy Policy)

We do not sell, rent, lease, trade, or share any user data with commercial brokers, advertisers, or third-party analytics platforms.

2.5 Data Storage, Caching & Deletion Rights

• Local Storage: Channel configurations and custom labels are stored locally in the app's sandboxed storage.
• Telemetry Caching: To optimize battery life and cellular data usage, historical telemetry charts (24H, 7D, 30D feeds) are cached locally with an automatic 30-minute expiration window.
• Immediate Deletion:
  • Instantly purge all cached historical feeds by tapping Settings > Clear Cache in the app.
  • Remove individual channels and associated API keys by tapping Settings > API Keys and deleting the desired channel.
  • Uninstalling GridWatch permanently erases all locally stored keys, cached telemetry, and user preferences from your device.

2.6 Tracking, Analytics & Advertising Policy

• No Tracking: GridWatch does not track users across third-party apps or websites for targeted advertising.
• No Advertising SDKs: Zero third-party advertising SDKs, zero banner ads, and zero affiliate tracking scripts exist in the application.
• No IDFA / AdSupport: GridWatch does not access the Apple Advertising Identifier (IDFA).

2.7 Account Creation & Biometric Security

• No Account Registration Required: You do not need to register an account, create a password, or provide an email address to use GridWatch.
• Demo Channel Provided: GridWatch includes a pre-configured live demo channel ("ECG Transformer Health Monitoring System", Channel ID: 3413128) so users and App Store reviewers can immediately inspect all capabilities without manual provisioning.

2.8 Children's Privacy (COPPA & GDPR-K)

GridWatch is an industrial engineering and utility telemetry application intended for professional engineers, grid operators, and students. We do not knowingly collect or solicit personal data from children under the age of 13 (or 16 in the European Union).

2.9 User Rights Under International Laws (GDPR & CCPA/CPRA)

Under applicable data protection regulations (including the EU General Data Protection Regulation and California Consumer Privacy Act):

• Right of Access / Portability: Since all channel data is stored locally on your device, you have direct, immediate access to your data at all times.
• Right to Erasure: You can erase all telemetry data and saved credentials immediately via the "Clear Cache" button or by uninstalling the application.
• "Do Not Sell or Share My Personal Information": We do not sell or share personal data under any circumstances.

2.10 Changes to This Policy & Contact Inquiries

We may update this Privacy Policy periodically to reflect technological updates or legal requirements. Updates will be posted on our website with a revised "Last Updated" date.

For questions, feedback, or inquiries regarding this Privacy Policy:

• Email: support@gridwatch.app (or contact@kaliblip.com)
• Developer / Entity: Kaliblip Development Team