The short version
The Gridome Orchestrator measures and decides. It reads your electricity, it reads prices and a weather forecast, and it decides when to charge and discharge your battery, when to run your water heating, and when to charge your car.
To do that well it has to watch your home closely. It does that on the device in your home. Your energy readings are not uploaded anywhere for the system to work, and there is no cloud account holding your consumption.
Four kinds of information leave your home, and only four. They are listed under “What leaves your home”. None of them sends your electricity readings to us or to anyone else. The only readings that leave your home are the ones on their way to your own phone, when you open the app from outside or receive an alert.
What it measures
- Your whole-home electricity. If you have a meter device fitted, your Gridome reads the power flowing into and out of your home about every two seconds. Depending on the meter, that includes power per phase, voltage, current and power factor. This is the most revealing single number in your house: a reading every two seconds shows when you get up, cook, shower, leave and come back. It stays on the device.
- Each appliance on a smart plug. If you have fitted smart plugs, your Gridome reads each of them on the same schedule, about every two seconds, and knows each appliance by the name you gave it.
- Temperature and humidity, where you have a sensor. If you have a climate sensor, your Gridome reads its temperature, humidity and battery level. If you have a heat pump with a room sensor, it reads that too, because it needs the temperature to decide when heating is cheap enough to run without making you uncomfortable.
- Your solar inverter and your battery. Solar production, battery state of charge, battery power, grid import and export, and the energy totals the equipment reports.
- Your car charging. If you have a car charger connected, your Gridome records each session: when it started and ended, how much energy went in, what it cost, the average price, how much came from your own solar, and a power reading about once a minute for the first four hours and every five minutes after that.
What it does not measure
No microphone. No camera. No motion sensor. No tracking of where you or your car are. Your Gridome reads nothing on your home network except the equipment you have added to it yourself.
What it works out from the measurements
It plans your day. Your Gridome builds a plan for the next 24 to 48 hours in fifteen-minute steps, from the day-ahead electricity price, your distribution tariff, a solar forecast for your location, and what your home has typically used at that hour. It then charges and discharges accordingly. That plan says something about your household's habits, and it stays on the device.
It can estimate appliance-level use. Please read this part carefully. Your Gridome can be asked to work out which appliances are running from the whole-home reading alone, without a plug on each one: car charging that does not go through your charger, a heat pump, a water heater, a fridge. That is inference about your life, not only about your electricity. Done well, it can show when somebody showered, when cooking started, and whether the house was occupied. So:
- It is off unless it is switched on. Both the recording that feeds it and the estimation itself are off by default, and are enabled per device by a deliberate act.
- The results stay on the device. They are not shown to you in the app today, and nothing in the system acts on them. They exist so that the estimation can be checked for accuracy before it is used for anything.
- Nothing is uploaded. Not the recordings, not the estimates.
- A factory reset erases all of it, with everything else about your household.
- If you would rather it never ran at all, tell us and it will not be enabled on your unit.
What leaves your home
1. What your Gridome asks the outside world for. To make a plan it fetches the next day's electricity prices for Poland and the settlement price for energy you export, the distribution tariff rates that turn a market price into the price per kilowatt hour you pay, and a weather and solar forecast for your location. The forecast request carries your property's coordinates, because that is how a forecast for a place is requested. When you type your address during setup, it is sent once to a public map service to turn it into coordinates. No reading from your home goes out with either request.
2. Keeping your Gridome alive and updated. If your Gridome is connected to our service, it sends a short message every few minutes with the software version it runs and whether its remote connection works, signed with its own key. When it first enrols it sends its identifier, its public key, and a scrambled form of the setup code on its label. There is no energy data in any of it. It exists so that a security update can reach you, and so that we can tell when a unit has gone quiet. Updates come the same way: to download one, your Gridome asks our service for a short-lived link, sending its identifier and the version it wants, signed with the same key. It does this even when it is not connected to our service, so that a security update can still reach it. It cannot be switched off while the device is connected to our service, because a device that cannot receive a security fix is not one we are willing to leave in somebody's home. If you do not want the regular message, do not connect your Gridome to our service: it will still run your home.
3. Remote access, when you use it. When you open the app from outside your home, the page travels out through a connection your Gridome makes outwards. No port is opened on your router. The connection is encrypted between your phone and the network provider that relays it, and between that provider and your Gridome. That provider is technically able to see the traffic passing through, as with a very large share of the web, and is subject to European data protection law. If that is not acceptable to you, use your Gridome only on your home network: everything works. Remote access is off until you turn it on, and each phone then has to be approved from a device that is already trusted or from your home network.
4. Alerts to your phone, if you ask for them. Your Gridome sends its own alerts, for example when a battery or a charger stops answering. They travel through the notification service of your phone's or browser's maker, encrypted so that only your phone can read them: that service sees that a message was sent, not what it says. Separately, your phone's address for notifications is passed to our service, so that we can tell you when your Gridome has stopped reporting. That notification says only that your Gridome has gone quiet. It carries no readings.
What does not leave, and what is reserved
No electricity readings leave your home for us or for anyone else, at any resolution, by any of the routes above. The only readings that travel out are the ones on their way to your own phone: the page you open from outside your home, and the alerts you asked for. We do not store them.
Your Gridome keeps a consent record with three categories. The first is the keep-alive information in point 2. The second, aggregated monthly product statistics, and the third, detailed measurement data for research, are both recorded as not asked and not permitted, and nothing in the product sends them. If either is ever offered to you, it will be as a separate, clearly worded question, and you will be able to change your mind afterwards. Silence is not consent, and this page is not a request for consent.
Where it is kept, and for how long
Everything below is stored on your Gridome, on the device in your home. A factory reset erases every item.
- Detailed live power: 30 minutes.
- Hourly power summaries: 7 days.
- Per-device readings: 30 days.
- Battery and heating decisions, with the reason for each: 30 days.
- Alerts: 30 days.
- Electricity price history: 30 days.
- Energy reconciliation figures: 45 days.
- Solar forecast accuracy history: 365 days.
- Sign-in and password-change records: 365 days.
- Appliance-learning recordings, if enabled: the detailed recording 90 days, labels and summaries 365 days.
- Appliance estimates, if enabled: 90 days.
- Car charging sessions: recent sessions are kept in full; older ones move to an archive that is currently kept indefinitely. We would rather tell you that than round it to a tidy number.
How to erase everything
Your Gridome has a factory reset that keeps the device and erases the household: your settings, your device list, your history, your sign-in details, your approved phones and your recordings. It keeps the device's own identity, so the code on its label still works and you do not need a new unit.
It is built as a short list of what survives, and everything else goes. That is deliberate: something added in a future version is erased by default, not handed to the next owner by accident.
Use it before you sell the property, before you pass the unit on, or whenever you want to start again. You find it in Settings, on your home network.
If your Gridome is connected to our service and you want us to forget it too, write to security@gridome.energy with the identifier on your Gridome's label. Once we have confirmed that the request comes from the unit's owner, we remove the unit from our service, which takes down its remote connection and its address on our side. There is no account to delete: our service knows your unit, not you.
Your rights
Your energy data is personal data. It is not special-category data under Article 9 of the GDPR.
Nearly all of it is not held by us at all: it is on a device in your home, under your control, and you can erase it yourself at any time with the factory reset. For the small amount described under “What leaves your home”, write to security@gridome.energy and we will tell you exactly what we hold for your unit, give you a copy, or delete it. See also your data rights and our Privacy Policy.
Why this page exists
Because you are entitled to it, and because the rules say so: provision 5.8-3 of the European consumer device security standard ETSI EN 303 645 requires a device's sensing capabilities to be documented clearly for the user, clause 6 of the same standard asks for clear information about personal data, and the GDPR asks for the same thing in plainer words.
Changes to this page
If what your Gridome measures changes, or if something new starts leaving your home, this page changes first and the version number goes up. A change that would send something new out of your home will be put to you as a question, not announced on a page.