Privacy policy

This policy covers the Afterburner mobile app and this website, both operated by Chartres Software Limited, a company registered in New Zealand ("we", "us"). It explains what we hold, why, who else sees it, and what you can do about it.

We handle personal information in accordance with the New Zealand Privacy Act 2020.

This policy does not cover your heater's own firmware, which is developed and maintained independently.

The short version

• You sign in with Apple or Google. We never create or hold a password.
• Your heater's readings pass through our messaging service in real time and are not kept.
• Payment is handled entirely by the App Store or Google Play. We never see your card.
• No advertising, no analytics, no crash reporting, no tracking, and nothing sold or shared.

What we hold

Three things, and nothing else:

Your heater's readings

To show your heater's status and send it commands, the app exchanges messages with your heater through a messaging service we operate, using a protocol called MQTT. Those messages carry temperature readings, fuel use, run state, timer settings, supply voltage, fault codes, and diagnostic details the heater reports about its own connection — network name, signal strength and hardware address.

None of it is retained. Messages pass through the service to your phone in real time and are not logged, archived or stored once delivered. There is no server-side history of how you have run your heater, and we could not produce one if asked.

That is deliberate rather than incidental. A heater can be controlled by more than one means, so the app never assumes it holds the current state. It asks the heater directly when you open the app, when you bring it back to the foreground, and at intervals while it is running. Stored history would be a liability rather than a feature.

What we do not collect

• No password. You sign in with Apple or Google, so there is nothing for us to hold or lose.
• No location data. The app does not request or use your location.
• No contacts, photos, messages, calendar, microphone or camera.
• No advertising identifiers. There is no advertising in the app.
• No analytics or crash reporting tools. We do not embed third-party tracking software.
• No browsing or search history.
• No card number, billing address or other payment details.

Tracking

We do not track you. We do not link your data to data from other companies' apps or websites, and we do not share it with data brokers or advertising networks. There is nothing to opt out of, because we do not do it.

How we use what we hold

Only to run the app: signing you in, provisioning and maintaining your heater's private messaging channel, relaying your heater's status to your phone, carrying your commands back to it, and answering you if you contact support. Nothing is used for advertising, profiling, or any purpose unrelated to running the service.

Who else sees your information

We do not sell your information and we do not share it with third parties for their own purposes. It is only ever handled by:

• Apple and Google, for sign-in and for processing your subscription. Their own privacy policies govern what they collect.
• Our hosting and messaging providers, who process data on our behalf under contract and may not use it for anything else.
• Anyone we are legally compelled to disclose to — a court order, or a request we are obliged by New Zealand law to comply with.

Where your information is held

Our messaging service and account infrastructure are hosted in New Zealand. Depending on the provider used for a given service, some infrastructure may be located in Australia. Your information stays within New Zealand and Australia.

Where information is held offshore, we take reasonable steps to ensure comparable protections apply, as the Privacy Act 2020 requires.

Security

Traffic between the app, our messaging service and your heater is encrypted in transit using TLS. Your heater's messaging channel uses credentials generated specifically for your account and is not shared with other users.

No system is perfectly secure, and we will not pretend otherwise. If a breach occurs that poses a risk of serious harm, we will notify affected users and the Office of the Privacy Commissioner as the Privacy Act requires.

How long we keep it

Your account record — the identifier from Apple or Google, any email address you shared, and the credentials linking you to your heater's channel — is kept while your account is open.

Heater readings are not retained at all.

When you delete your account we remove the account record and revoke the heater credentials within 30 days, except where we are required to keep transaction records for tax purposes.

Your rights

Under the Privacy Act 2020 you can ask us for a copy of the personal information we hold about you, and ask us to correct it if it is wrong. We will respond within 20 working days.

You can delete your account from within the app, under Settings, or email us and we will do it for you. Separately, you can revoke the app's access at any time in your Apple ID settings on iOS or your Google Account settings on Android.

Deleting your account does not cancel your subscription — that is managed in your App Store or Google Play settings.

If you are unhappy with how we have handled your information, contact us first. If we do not resolve it, you can complain to the Office of the Privacy Commissioner at privacy.org.nz.

Children

Afterburner is not directed at children and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, email us and we will delete it.

Changes to this policy

If we change what we hold or how we use it, we will update this page and change the effective date. Material changes will also be notified in the app before they take effect.

Contact