Menu
ShopBlogSign in

Privacy Policy

Battery Remote app & mismo-tech.com  |  Developer: MISMOtech Minos Eigenheer  |  Last updated: 14 October 2026

This Privacy Policy explains how MISMOtech – Minos Eigenheer ("we", "us", or "our"), as the data controller, collects, uses, and protects your personal data when you use the Battery Remote mobile application ("the App") and the mismo-tech.com website and webshop ("the Site"). It applies to users in the European Economic Area (EEA) and other jurisdictions, and is written in accordance with the EU General Data Protection Regulation (GDPR) and the Dutch implementation thereof (Uitvoeringswet AVG).

1. Who Is Responsible for Your Data (Controller)

MISMOtech – Minos Eigenheer
the Netherlands
KvK: 89884817  |  BTW/VAT: NL004768272B74
[email protected]

2. Data We Collect and Legal Basis

The table below summarises the categories of personal data we process, why we process them, and the legal basis under GDPR / nDSG.

Category Examples Purpose Legal Basis (GDPR Art. 6)
Account & identity data Email address, display name, profile photo; Apple may supply a relay address Authentication and account management Art. 6(1)(b) – performance of a contract
Device location data Satellite (GNSS/GPS) coordinates recorded by the tracker, with their accuracy, speed and heading. They are sent to us together with the battery log and stored in our own Firestore database for 90 days, after which they are deleted automatically by a retention (TTL) policy. The most recent position is additionally kept alongside, so the map can show it without reading the whole history Displaying live and recorded device location on the map Art. 6(1)(b) – performance of a contract
Nearby network identifiers (transient) When the tracker has no satellite fix — in a garage or underground, for example — it collects the identifiers of nearby mobile cell towers and WiFi networks (BSSIDs) that it can observe, and these are sent to Google LLC (Google Geolocation API) to obtain an approximate position. The tracker does not connect to those WiFi networks: it only observes information they broadcast publicly, and never learns who they belong to. The identifiers themselves are not stored. They exist in the tracker's message and in the memory of the Cloud Function that handles it, are sent to Google, and are then discarded. What we keep is the resulting coordinate (with the location history above) plus a one-way hash of the scan, held for 30 days so that an unchanged parking spot is not looked up repeatedly Showing an approximate position when satellite reception is unavailable Art. 6(1)(b) – performance of a contract
Geofence zone Centre coordinates (latitude/longitude) and radius of any geofence zones you configure, stored in Firestore as part of device settings Triggering entry/exit notifications when the tracker crosses the defined boundary Art. 6(1)(b) – performance of a contract
Device telemetry Battery voltage, state of charge, charging state, temperature, warnings, motion events; stored in Firestore for 90 days Dashboard, historical logs, and alert delivery Art. 6(1)(b) – performance of a contract
Push notification token Firebase Cloud Messaging (FCM) token linked to your account Delivering push notifications (e.g. charge complete, warnings) Art. 6(1)(b) – performance of a contract
Camera (transient) Camera viewfinder frames used to decode a serial-number barcode or QR code when adding a device. No images are captured or stored by the app. Filling in the device serial number automatically during pairing Art. 6(1)(b) – performance of a contract
Phone location (transient) Your phone’s current location, accessed once when you open the map to configure a geofence zone, so the map can centre on your position. Not stored by the app. Providing a convenient starting point when drawing a geofence on the map Art. 6(1)(a) – consent (iOS/Android permission prompt)
Technical & diagnostic data Crash reports, app version, operating system version Diagnosing errors and improving app reliability Art. 6(1)(f) – legitimate interests (product quality)
App & website usage analytics Anonymous, aggregated usage events collected via Google Analytics — in the app: which sections you open (dashboard, charging, location, logs, settings), how often you change charge or device settings, how many device data-refresh requests you make, session frequency, app version and device/OS type; on the website: which pages are viewed, which products are opened, and shop and portal actions such as adding to the cart, starting a checkout, signing in or selecting a graph period. No advertising identifiers (IDFA/AAID) are collected and no cross-app or cross-site tracking is performed, and the website measurement sets no cookies at all. Understanding how the App and website are used so we can improve features and reliability Art. 6(1)(f) – legitimate interests (product improvement)
Service usage records Counts of the requests made to your tracker and of the messages it sent back, together with which screen of the app or website made each request, which app build or website version it came from, and the cellular data your tracker's SIM used. Recorded per device and per month with a per-day breakdown, and linked to your account — unlike the analytics row above, these are not anonymous, because their purpose is to tell us what a specific device and account actually cost to run. They are kept for 24 months and then deleted automatically. We do not use them to build marketing or behavioural profiles. Billing accuracy and fair use, planning capacity, and spotting a malfunctioning or abusive device Art. 6(1)(b) – performance of a contract; Art. 6(1)(f) – legitimate interests (service integrity)

We do not sell, rent, or share your personal data with third parties for marketing or advertising purposes.

3. How We Use Your Information

  • To authenticate you and protect access to your account and devices.
  • To display real-time and historical battery and device data on your dashboard.
  • To show where your device is now and where it has been, on the map.
  • To send push notifications about your device's status.
  • To enable you to grant other users access to your devices.
  • To improve app reliability and diagnose technical issues.
  • To bill your subscription accurately, check fair use, plan capacity, and notice when a device is malfunctioning or being abused.

4. Data Storage, Security & Retention

Your data is stored in Google Firebase (Firestore, Authentication, Cloud Functions, and Cloud Messaging), hosted in Google's European Union region (europe-west3, Frankfurt, Germany). Access is restricted by Firestore security rules so that only you and users you have explicitly authorised can read your device data. All data in transit is protected by TLS/HTTPS encryption. We apply reasonable technical and organisational measures to safeguard your information.

  • Account data – retained until you delete your account.
  • Device telemetry logs – retained for 90 days, then automatically deleted.
  • Geofence zone data – retained as part of device settings until you delete the zone or delete the device.
  • Camera frames – processed on-device in real time for barcode decoding; never stored or transmitted.
  • Phone location (geofence map) – used transiently on-device to centre the map; never stored or transmitted to our servers.
  • Device location – recorded positions – stored in our own Firestore database and retained for 90 days, then automatically deleted by a retention (TTL) policy. The single most recent position is kept alongside the history and is overwritten each time a newer one arrives.
  • Nearby cell-tower and WiFi identifiers – never stored. They are held only while in transit and in the memory of the Cloud Function that resolves them into a position, and are then discarded. The resulting coordinate is kept with the location history above (90 days); a one-way hash of the scan is kept for 30 days so an unchanged parking spot is not looked up again.
  • Particle device vitals – connectivity diagnostics retained by Particle for up to 1 month (outside our control).
  • FCM tokens – deleted when you sign out or delete your account.
  • App & website usage analytics – aggregated event data held by Google Analytics for a limited period (up to 14 months).
  • Service usage records – retained for 24 months, then automatically deleted by a retention (TTL) policy. If you delete your account we remove the link to you immediately: the per-account figures are erased, and what remains is the per-device total, which names nobody.

5. International Data Transfers

Your core account and device data is stored within the European Union (Google's europe-west3 region, Germany). However, some of the providers we rely on are companies headquartered in the United States and may, for support, security or auxiliary functions, process limited data outside the EEA. Where that happens, transfers are protected by appropriate safeguards, including the EU Standard Contractual Clauses (SCCs) as adopted by the European Commission:

6. Children's Privacy

Battery Remote is not intended for children under the age of 16 (or the minimum age required by the applicable law of your country of residence, if higher). We do not knowingly collect personal data from children below this age. If you believe a child has provided us with personal data, please contact us so we can delete it.

7. Your Rights

Depending on your location, you have the following rights regarding your personal data. To exercise any of them, contact us at the address in Section 13.

  • Right of access (Art. 15 GDPR) – Request a copy of the personal data we hold about you.
  • Right to rectification (Art. 16 GDPR) – Ask us to correct inaccurate or incomplete data.
  • Right to erasure (Art. 17 GDPR) – Request deletion of your personal data. You can also do this directly in the app via Settings → Account → Delete Account.
  • Right to restriction (Art. 18 GDPR) – Ask us to restrict processing of your data in certain circumstances.
  • Right to data portability (Art. 20 GDPR) – Receive your personal data in a structured, commonly used, machine-readable format.
  • Right to object (Art. 21 GDPR) – Object to processing based on our legitimate interests.
  • Right to withdraw consent – Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

We will respond to your request within 30 days. We may ask you to verify your identity before fulfilling a request.

8. Right to Lodge a Complaint

If you believe we have violated applicable data protection law, you have the right to file a complaint with the competent supervisory authority:

9. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or applicable law. We will notify you of material changes via the app or by updating the "Last updated" date at the top. Continued use of the App after changes are published constitutes your acceptance of the updated policy.

11. Cookies, Website & App Analytics

The mismo-tech.com website is intentionally low on tracking. We do not use advertising or cross-site tracking cookies, and there is no third-party marketing tracker.

  • Strictly necessary storage – when you sign in, Firebase Authentication stores a session token in your browser (local storage) so you stay logged in. Your shopping cart is likewise kept in your browser, as are any graph views you choose to save in the device portal (which signals are shown, their colours and ranges, and the selected time period) and the most recent tracker readings shown while a device page is open, so they remain on the graph after a reload. These are essential to provide the service you asked for and are not used for tracking.
  • Website analytics – we use Cloudflare Web Analytics, which is privacy-first and does not use cookies or fingerprinting and does not collect personal data. It gives us aggregate, anonymous visit statistics only.
  • Website usage analytics – we also use Google Analytics to see which pages and products are opened and which actions are taken (for example adding something to the cart, starting a checkout, signing in, or choosing a graph period in the device portal). We run it in a cookieless configuration: it is explicitly configured not to write any cookie and not to keep an identifier in your browser, so it cannot recognise you on a later visit or build a profile, and advertising features, advertising identifiers and ad personalisation are all switched off. The trade-off is ours, not yours: we see accurate page and event counts but cannot count unique visitors. We rely on our legitimate interest in improving the website (Art. 6(1)(f) GDPR), and you may object at any time (see Section 7).
  • Hosting – Cloudflare may set a strictly necessary security cookie to protect the site.

Because we only use strictly necessary storage and cookieless analytics, no cookie-consent banner is required. Payment pages are hosted by Stripe and are governed by Stripe's own privacy notice.

App analytics

Inside the Battery Remote app we use Google Analytics for Firebase to collect anonymous, aggregated usage statistics — such as which sections of the app are opened, how often key actions (e.g. changing charge or device settings, refreshing device data) are performed, session frequency, and the app version and device/OS type. This helps us understand how the app is used and prioritise improvements. We have configured it to be privacy-friendly: it does not collect advertising identifiers (IDFA/AAID), does not build advertising profiles, and does not track you across other apps. We rely on our legitimate interest in improving the App (Art. 6(1)(f) GDPR). Because the data Google Analytics receives is anonymous and aggregated we do not build individual profiles from it; you may nonetheless object to this processing at any time under your right to object (see Section 7) by contacting us at the address in Section 13.

Operational usage records are not analytics

Separately from the Google Analytics measurement described above, we keep our own record of how much the service costs us to run for each tracker — see “Service usage records” in Section 2. Those records are linked to your account, because their whole purpose is to tell us what a specific device and account cost, which an anonymous total cannot. They stay inside our own systems: they are never sent to Google Analytics or to any other analytics or advertising provider, and they are not used to build marketing or behavioural profiles. We keep them for 24 months, and deleting your account removes the link to you (Section 4).

12. Purchases, Payments & Shipping (mismo-tech.com webshop)

The following applies in addition to the sections above when you buy hardware or a monitoring subscription on the mismo-tech.com webshop.

Data we process for orders

  • Contact & account: name, email address, and your Battery Remote account identifier.
  • Billing & tax: billing address and country, used to calculate and document VAT.
  • Shipping: recipient name and delivery address for physical orders.
  • Saved address (optional): if you tick “Remember my address” at checkout, we store your billing and shipping address (and VAT number, if given) on your account so you don’t have to re-enter it next time. It stays until you untick the option, overwrite it, or delete your account, and only you can read it. This is based on your consent (Art. 6(1)(a) GDPR).
  • Order details: the products, quantities, amounts, and order status.
  • Payment: card and payment details are entered directly with our payment processor (Stripe). We never receive or store your full card number — only a payment reference and the last-4 / brand returned by Stripe.

Why we process it (legal basis)

  • Performance of a contract (Art. 6(1)(b) GDPR) — to process your order, take payment, deliver hardware and provide the subscription.
  • Legal obligation (Art. 6(1)(c) GDPR) — to keep invoices and tax records as required by Dutch law.
  • Legitimate interests (Art. 6(1)(f) GDPR) — fraud prevention and securing our webshop.

Processors we share order data with

ProcessorPurpose
StripePayment processing, subscriptions, and payment emails
Visma eAccountingInvoicing, bookkeeping and VAT reporting (name, billing address, VAT number and order lines appear on the invoice); sends invoice emails. Processed within the EU (Netherlands)
MyParcel / PostNLShipping labels, delivery of physical orders, and Track & Trace emails
Google Firebase / Google CloudAuthentication, database and order records (EU region europe-west3)
CloudflareWebsite hosting and content delivery

Some of these providers may process data outside the EEA (e.g. in the United States). Where they do, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep order data

Invoices and order records are retained for the statutory retention period under Dutch tax law (currently 7 years). Other order-related data is kept only as long as needed to provide the service and handle warranty or support requests.

Your rights for order data

Your rights (access, rectification, erasure, objection, portability and complaint) are the same as set out above. Note that data we must keep for tax purposes cannot be deleted before the statutory period ends.

13. Contact Us

For any questions about this Privacy Policy or to exercise your rights, please contact:
MISMOtech – Minos Eigenheer
the Netherlands
KvK: 89884817  |  BTW/VAT: NL004768272B74
[email protected]