Privacy Policy

Last updated: 18 October 2026

This privacy policy applies to Prince Solar: the web app at app.princesolarhub.com (the "Service"). The Service is run by Brynne Prince, an individual in South Africa, who is the responsible party and the information officer for your personal information under the Protection of Personal Information Act (POPIA).

We collect what the Service needs to show you your solar system, and nothing more. We do not sell your data, and the Service has no advertising and no third-party analytics.

Your account

When you create an account, we store:

• Your email address.
• Your password, if you sign up with email, stored only as a secure hash. We cannot read it.
• Your IP address and browser type when you sign in, in the sign-in records.

Your email address is required. Without it there is no account.

Signing in with Google

If you choose Continue with Google, Google tells us your name, email address, whether Google has verified that email, and your profile picture link. We use them to create or find your account. We do not receive your Google password and we get no access to your Gmail, contacts, files or anything else in your Google account.

Google's privacy policy: https://policies.google.com/privacy

Your SunSynk login and plant

• SunSynk login. We store your SunSynk username. We use your SunSynk password once to get access tokens and do not keep it. We keep a refresh token, encrypted, and a short-lived access token.
• Plant details. Your plant's name, location, timezone and equipment, as SunSynk reports them.
• Readings. Your inverter's readings, as often as SunSynk provides them, up to once a minute.
• Settings. Settings you enter, such as your electricity tariff.

A SunSynk login is required. Without it there is no dashboard. Settings are optional.

A plant's readings are visible only to accounts linked to that plant. If someone else links the same plant with a SunSynk login, they see the same readings.

Error reports

When the app hits an error, it sends us the time, the page, the app version, the error text and its technical trace, your browser type, your account ID and your plant ID. We use them only to fix the app.

Who receives your data

• Supabase stores the database and handles sign-in. It also sends account emails, such as sign-up confirmations and password resets.
• Cloudflare serves the app.
• Google Fonts, unpkg and jsDelivr serve fonts and code the app loads. They see your IP address and browser, as any website you load them from does.
• Google handles Google sign-in, only if you choose it.
• SunSynk sends your readings when we ask with your token.

Each receives only what its job needs.

Where your data is kept

The database is hosted by Supabase in Frankfurt, Germany. EU data protection law (GDPR) protects it there to a standard like POPIA. Cloudflare, Google, unpkg, jsDelivr and SunSynk may process data in other countries under their own safeguards.

How long we keep it

• Readings: minute readings for 31 days, then as 5-minute averages for as long as your account is open.
• Your account: for as long as it is open. You can delete it in the app (Settings, Delete account). That deletes your login, your SunSynk logins and tokens, and your link to the plant. If no one else is linked to the plant, its readings and settings are deleted too; if someone else is, they stay for that person.
• Error reports: kept until we delete them. After you delete your account, a report keeps the plant ID but no link to you.
• Backups: deleted data can remain in database backups until those backups are replaced.

Security

Traffic to the Service is encrypted (HTTPS). Passwords are hashed, SunSynk refresh tokens are encrypted, and each plant's readings are visible only to the accounts linked to it. Minute-level readings can show when a home is occupied, so we treat them as personal information. No system is perfectly secure; if we learn of a breach affecting your personal information we will tell you and the Information Regulator as POPIA requires.

Children

The Service is for adults. It is not directed at children under 18 and we do not knowingly collect their information.

Your rights

Under POPIA you may ask what personal information we hold about you, ask for it to be corrected or deleted, and object to its processing. You can delete your account in the app yourself. For anything else, email us. You may also complain to the Information Regulator (South Africa): https://inforegulator.org.za, [email protected]

Changes to this policy

We may update this policy as the Service changes or as the law requires. The date at the top always shows the latest version.

Contact

Questions about this policy or about your data:

Email: [email protected]