Privacy Policy
← Back to HubilusVersion 2026-07-26.1 · Operated from Sweden under the EU GDPR.
Who is responsible
Hubilus is a service operated by Mexior AB (org.nr 559433-7296), Sweden, Klockarens väg 10A, 441 60 Alingsås — the data controller ("we"). For any privacy matter, contact info@hubilus.se.
What we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account details (username, e-mail, location) | Sign-in and localisation | Contract (Art. 6(1)(b)) |
| Energy measurements from the devices you connect | To provide the monitoring and control service | Contract (Art. 6(1)(b)) |
| Credentials for device services you connect | To read your devices on your behalf — stored encrypted, never shown or logged | Contract |
| Technical and activity logs | Security and operating the service | Legitimate interest (Art. 6(1)(f)) |
What we do not do
No advertising, no tracking, no selling or sharing of your data. The site sets one cookie: your login session.
Devices and services you connect
When you connect a device or vendor account (for example an EV charger, heat pump or battery service), you authorise us — through that vendor's own secure sign-in or authorisation (OAuth) — to access only the data needed to run the service, such as device status, power and charging sessions. We use that data solely to monitor and optimise your home energy; we do not sell it or share it onward with other third parties. You can withdraw the authorisation at any time, in Hubilus or with the vendor, which stops the access.
Who else is involved
To deliver the service we exchange the necessary data with electricity-price and weather providers, and — for a device you connect — with that vendor, under your authorisation. All storage is on our server in the EU. A current list of these providers is available on request.
Retention & your rights
We keep your account and measurements while your account is active. Technical logs are kept only as long as they are useful for operating and securing the service — at most 12 months, and most far shorter.
You may request access, correction, export or deletion at any time via info@hubilus.se; deletion removes your account, measurements and stored credentials. Short-lived technical logs age out automatically. You may also lodge a complaint with the Swedish authority IMY (Integritetsskyddsmyndigheten).
Security
We use industry-standard measures: encryption in transit and at rest, hashed passwords, and separation of each household's data.
Changes will be versioned and announced in the app; continued use after an update means the new version applies.