Privacy Policy

Amp: Tesla Costs & Mileage Log (“Amp”, “we”, “our”) is an iOS app from TIT, based in the Netherlands, that shows your car’s live status, lets you control it remotely, and keeps a history of your drives and charging sessions. To do that, our server receives data from your car through Tesla’s official Fleet API. This policy explains exactly what that data is and what we do with it.

Amp is an independent app. It is not made, endorsed or supported by Tesla, Inc.

You sign in on Tesla’s own login page; we never see your Tesla password. Tesla then gives our server access tokens for the permissions you approve: vehicle information, vehicle location, vehicle commands and charging management. We do not request access to your Tesla profile, so we do not receive your name, email address or phone number. Your Tesla account is identified to us only by an opaque account ID.

• Tesla account ID and access tokens. Used to call Tesla’s Fleet API on your behalf and to keep you signed in.
• Vehicle telemetry. While your car is awake it streams data to our server: battery level and range, charging state and power, climate and cabin temperatures, lock, door and window state, Sentry Mode state, tyre pressures, gear, speed, odometer, software version and precise location.
• History derived from telemetry. Drives (start and end place and time, distance, energy use and the route as GPS points), charging sessions (place, energy added, power, cost from the prices you enter), and battery health over time.
• Vehicle details. VIN, factory options, vehicle configuration and warranty dates, fetched from Tesla to show on the Vehicle Info screen.
• Fast-charging bills. For fast charging billed to the car’s Tesla account, the session from Tesla’s charging history: the amount billed, any idle fee, the currency, the site’s name and a reference to the invoice. An invoice is fetched from Tesla when you open it; we don’t store it.
• Things you enter. Home location and saved places, electricity prices and price area, smart-charging and climate schedules, automations, notification preferences, trip rules, business/private tags and notes on drives, trips you add by hand (with their addresses), who drove a drive, expenses, a licence plate if you add one, and the optional display name described under Shared Cars.
• Data you import. Drives and charging sessions from a CSV file you choose. We keep the rows as history and discard the file itself.
• API tokens and webhooks. Personal API tokens you create (we store only a hash of each; the Apple Watch app connects with one) and, if you set one up, your webhook address and its signing secret.
• Push tokens. Your device’s Apple Push Notification and Live Activity tokens, used only to send the alerts you enable and to update the charging Live Activity.

Car names you set in Amp, and addresses shown for places, are handled on your device. To show an address, your device sends coordinates to Apple’s geocoding service.

• To show your car’s status and send the commands you choose.
• To build your drive, charging and battery history and statistics.
• To send the notifications and run the automations you set up, including smart charging.
• To fetch the weather forecasts and electricity prices those automations and your cost figures need.
• To show the live location links and battery reports you publish.
• To know whether your account, or a car you share, has Amp Pro.
• To keep the service secure and working, including backups.

The legal basis is the performance of our agreement with you (GDPR art. 6(1)(b)) and, for security and backups, our legitimate interest in running a reliable service (art. 6(1)(f)).

• We don’t receive your name, email address, phone number or Tesla password. The only name we store is the display name you can choose to show to a shared car’s other users.
• We don’t use analytics, advertising or tracking SDKs. The only third-party SDK in the app is RevenueCat’s, used solely to process Amp Pro purchases; it does not track you across apps or websites.
• We don’t see or store your payment details.
• We don’t sell your data or share it for advertising.
• We don’t wake your car to collect data. It is only woken when you ask, or when something you set up runs: a climate schedule, a smart-charging window, or closing the windows before rain.

A Tesla can be shared between an owner and drivers. Anyone who signs in to Amp with a Tesla account that has access to the car can see that car’s status, history and shared car settings in Amp. Notification preferences stay personal.

If you set a display name, the car’s other users see it next to the drives assigned to you, in a drive’s change history and in the cost split. If another user of the car sets up a webhook, the car’s alerts and its drive and charging summaries, including start and end locations, are also sent to the address they chose.

A live location link shows anyone who has it the car’s current position, its speed while driving, the battery level, and the destination and arrival time while navigating, with the name you give the link — until it expires (after 24 hours at most) or you stop it. The page loads its map from OpenStreetMap, which sees the viewer’s IP address and the map area.

A published battery report shows anyone who has its link the car’s VIN, model, odometer, battery and charging figures and battery warranty, for a year or until you unpublish it — also after you sell the car.

• Tesla. Supplies the vehicle data and carries out commands through the Fleet API. Tesla’s privacy notice.
• Hostinger. Hosts our server in Frankfurt, Germany.
• Cloudflare. Provides DNS and stores our database backups, encrypted at rest, in its European region. Cloudflare’s privacy policy.
• RevenueCat, Inc. (United States). Processes Amp Pro purchases for us: it receives your App Store subscription status and purchase history, linked only to the random billing ID of your Amp account, and tells our server whether your subscription is active. Transfers to RevenueCat are covered by the European Commission’s Standard Contractual Clauses. RevenueCat’s privacy policy.
• Apple. Handles all payments for Amp Pro, delivers push notifications and Live Activity updates, and provides maps and address lookups on your device. Apple’s privacy policy.
• MET Norway (the Norwegian Meteorological Institute). Receives the car’s position rounded to about 1 km, and nothing else, to return the weather forecast we use for rain warnings when a window is open and to start climate schedules early on frosty mornings.
• RDW (the Dutch vehicle authority). If you add a licence plate, we look it up in the RDW’s open data to show the car’s registration and APK (MOT) expiry date, and check it again weekly. Only the plate is sent.

Electricity prices come from ENTSO-E and, for UK regions, from Octopus Energy’s public Agile Octopus rates; exchange rates come from the European Central Bank. Those requests contain no personal data: a request to Octopus Energy names only the region and the time period, and Amp never connects to your Octopus Energy account. If you set up a webhook, we send your car’s events to the address you chose; what happens to them there is up to you.

Your vehicle data is stored and processed in the European Union, wherever you use Amp. If you live outside the EU, using Amp means your data is transferred to the EU, where the GDPR protects it. Subscription status and purchase history (only, never vehicle data) are also processed by RevenueCat in the United States, as described above.

• Raw telemetry is deleted after 30 days.
• Drive, charging and battery history is kept for as long as you use Amp, so you can look back on it.
• Delete your account any time in Settings → Account → Delete Account. This immediately removes your account and display name, your Tesla tokens, push tokens and API tokens, your webhook, live location links and published battery reports. For cars no one else uses in Amp, it also removes all their history and stops the car streaming data to us. On cars others still use, drives, changes and expenses you added stay with the car but are no longer linked to you.
• Removing a licence plate deletes it and its RDW data. Unpublish a battery report or stop a live location link at any time in the app.
• Subscription status and purchase history are kept while you subscribe, and afterwards only as long as required for tax and accounting purposes. Deleting your account removes the subscription record and billing ID from our server; an App Store subscription itself is not cancelled by this, cancel it in iOS Settings → your name → Subscriptions.
• Backups roll over: deleted data disappears from them within 60 days.

You can also revoke Amp’s access at any time in your Tesla account settings under third-party apps.

Under the GDPR you can ask to access, correct, export or delete your data, and you can object to or restrict how we process it. Email us and we’ll respond within one month. You can also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Amp is not directed at children under 16. We do not knowingly collect data from children.

We may update this policy. Changes are reflected in the “Last updated” date above, and we’ll tell you in the app about material changes.