FTW app for iPhone and Apple Watch

Privacy

Updated 16 October 2026

Your energy data stays on your FTW box and your phone. The app reaches your box through FTW Cloud, which carries the connection encrypted end to end and cannot read it. A readable copy is off unless you turn it on. The app has no analytics and no tracking.

This page covers the FTW app for iPhone and Apple Watch, and FTW Cloud, the service it uses. Sourceful Labs AB, Sweden, makes the app and runs FTW Cloud. The FTW box is software you run yourself; its documentation describes what it sends.

What stays on your box

Your box reads your meters, solar, battery and charger, keeps the history and makes the plan. That record stays on the box. The app asks the box for what it shows and sends the box what you choose, such as a charging goal.

What the app keeps on your phone

• The keys that let this phone talk to your box, in the iPhone keychain. They stay on this phone and are not backed up to iCloud.
• The last readings, prices and car level, so the app can show your home before it reconnects. Each one keeps the time it was read.
• A copy of the prices and car level that the widgets read. Widgets read nothing else.

Delete the app to remove what it keeps. The box owner can also withdraw a phone's access from the box.

Passkeys

When you pair, the app creates a passkey for app.ftw.energy in your password manager, for example iCloud Keychain. The passkey guards a copy of the key this phone uses with your box. Your password manager keeps the passkey; Sourceful never receives it. The app sends no copy of your keys to Sourceful.

FTW Cloud

The app and the watch reach your box through FTW Cloud at cloud.ftw.energy, which runs in Stockholm, Sweden, on Amazon Web Services. Your box connects to FTW Cloud once you pair a phone. The app and the box encrypt the connection end to end (Noise protocol) before it leaves them. FTW Cloud has no key for it and cannot read or change what it carries.

To carry the connection FTW Cloud sees:

• a fixed id for your home, made from a key your box holds;
• the IP addresses of your box and your phone, while they are connected;
• the list of devices your box allows, which the box signs: each device's id, public key and role;
• when you connect, for how long, and the size and timing of encrypted messages.

On disk FTW Cloud keeps your home id, your box's public key, the signed device list, the phones registered for notifications and the hashes of access tokens. It keeps none of the traffic and logs no addresses. We use what it sees only to carry your connection.

The readable copy, if you turn it on

In the app you can turn on a readable copy of your home in FTW Cloud. It is off until you do. It holds what you allow, such as live power readings, the car's charge level, prices and events like a lost connection. Device names are replaced by codes.

FTW Cloud uses the copy to show your home faster, to give your watch a reading, and to send you notifications through Apple's push service. It holds the copy in memory only and drops it an hour after your box goes quiet. Turn the copy off in the app and FTW Cloud deletes it.

The copy is not encrypted end to end. Someone in full control of the server could read it while it is held. Sourceful has no tool for staff to read it.

The relay, while we move

Until every part of FTW has moved to FTW Cloud, the app can also reach your box through Sourceful's older relay at relay.ftw.energy, in Frankfurt, Germany, on Amazon Web Services. It carries the same end-to-end encrypted connection. It sees your phone's IP address, a meeting code that changes every hour, and the size and timing of messages. It keeps none of the traffic, and its access log holds counts, not addresses or codes. We will switch it off.

No analytics, no tracking, no ads

The app contains no analytics, no advertising and no code from third parties. It does not track you across apps or websites. It talks to FTW Cloud, to the relay while we move, and to Apple's push service, and to nothing else.

The camera reads the pairing code from your box and nothing else.

Apple

Apple runs the App Store and TestFlight under its own privacy policy. If you share analytics with app developers in your iPhone settings, Apple sends us crash reports and usage numbers that do not name you. If you test through TestFlight, Apple shares your name, email address, crash reports and any feedback you send with us.

Assistants and support access, later

We are building a way for you to let an assistant, such as ChatGPT or Claude, or Sourceful support read your home through FTW Cloud, and act on it if you allow that too. It will need your approval on your phone or on your box. You will see who looked and when, and you can end it at any time. It is not part of the app today, and we will update this page before it ships.

Your rights

Sourceful Labs AB (reg. no. 559382-0458), Kalmar, Sweden, is responsible for the data FTW Cloud and the relay handle. Under the GDPR you can ask what we hold about you, have it corrected or deleted, and object to how we use it. FTW Cloud holds no name, email address or street address for you, but your home id and IP addresses count as personal data. To ask, email support@sourceful.energy or use Sourceful's contact page. You can also complain to the Swedish Authority for Privacy Protection (IMY).

The app is not aimed at children.

Changes

When the app changes what it does with data, we change this page first and update the date at the top. The history of this page is public on GitHub.