Version 4.1 (13 October 2026). What changed since Version 4.0
PixellEnergy Solutions Private Limited ("PixellEnergy", "we", "us") operates the PixellEnergy EV lifestyle app, the PixellEnergy Balance, and related services. We are the Data Fiduciary for the personal data described here and process it under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the "DPDP law").
This notice is standalone and itemised: you can see, item by item, what personal data we collect, why, and how to exercise your rights — without needing to read any other document. It is available in English; on request we will provide it in a language listed in the Eighth Schedule to the Constitution of India.
Who we are and who to contact
PixellEnergy Solutions Pvt Ltd, Unicorn Club #113, 11th Cross Road, Near NPS, 19th Main, HSR Layout Sector 4, Bengaluru 560102, India.
Grievance Officer and Data Protection Officer: Rahul, Director of Operations. Email dpo@pixellenergy.com. Phone +91 90720 02633.
| Category | What | Purpose |
|---|---|---|
| Account | Name, phone number (used for OTP login), email (optional), vehicle details | Create and secure your account; deliver the Service |
| Location | Foreground (app-open) location only | Find chargers and plan trips |
| Camera | QR-code scan; optional vehicle photo | Start a charging session; personalise your vehicle |
| Payment | Handled by our PCI-DSS payment partners; we do not store full card numbers | Process charging payments, Balance top-ups, refunds |
| Charging & Balance activity | Sessions, tariffs, invoices, Balance transactions, telemetry | Deliver, bill, and support the Service; issue GST invoices |
| Device & usage | Device, app, and diagnostic data | Reliability, security, fraud prevention |
Guest mode: you can browse chargers without an account. Your approximate map position is sent with each search to find nearby chargers; we do not create a profile for you. These requests are handled by our servers and service providers as described in sections 7 and 8.
We request each category by affirmative consent, per purpose, with the exact notice recorded at the time.
We rely on your consent for each purpose, and on legitimate/legal obligations where the DPDP law permits (e.g. retaining billing records).
Consent is requested per purpose, by clear affirmative action, and is as easy to withdraw as to give; each consent is logged with the exact notice shown. Service, analytics, and marketing consents are independent — declining analytics or marketing does not affect your ability to use the Service. Withdrawing consent stops future processing for that purpose (it does not undo lawful past processing or records we must keep). Where a registered Consent Manager is available under the DPDP law, you may manage your consents through it.
Who receives your data
| Service | What it receives | Where | Your choice |
|---|---|---|---|
| Supabase | Your account and all app data we store | Storage in India (Mumbai) | Needed to run the service |
| MSG91 | Your phone number and sign-in code, to send the SMS | India | Needed to sign in |
| Razorpay | Payment amount, order id and the checkout details you enter | India | Needed to pay |
| Google Maps Platform | Your precise location while the app is open, the places you search, and technical data from the maps software | Outside India (Google, global) | Needed for maps and routes |
| Google Firebase and Apple push service | Your device notification token and the title and text of notifications we send | Outside India (global) | Notifications follow your settings |
| Sentry | Crash and error reports, app start and stop health signals and an installation id: device model, operating system, app version, recent app actions before a failure, and your device network address (IP) | United States | Always on, essential to run the service. You cannot turn it off. |
| PostHog | Which screens and features you use, under a random device id | United States | Optional. Sends nothing about your use until you switch Analytics on |
| Resend (email) | Your email address and message when we send a family invitation, a receipt or an email sign-in code; and internal alert emails about a complaint (reference, category, a short excerpt, any linked charging details and part of your account reference) | United States | Needed to send those emails |
| Zoho Mail | Emails you send to support@, dpo@ or grievance@ | India | Needed to answer you |
| OpenWeather | Route points and your device network address when you use Trip Planner weather | United Kingdom | Only when you use that feature |
| Open Charge Map photo hosts | Your device network address when your phone loads station photos (Android) | Includes Australia (Sydney) | Only when you view station photos |
| Google ML Kit (QR scanning, Android) | May send anonymous usage diagnostics to Google | Outside India (Google, global) | Only when you scan a code |
| Charging partners and our charging platform | Station id, session id, your user id and the charging token linked to your account, to start and stop your charge | India | Needed to charge |
| Cloudflare | Traffic to our website and servers passes through it | Global | Needed to deliver the service |
Payment, maps and some other software may also send their own technical data to their makers.
Crash reports are part of running the service
We send crash and error reports to Sentry from every installation, because we cannot keep the app and your payments reliable without them. Our app removes known personal details (such as phone numbers, email and payment references) from its own error reports. Crash reports produced by the phone's system layer are not filtered by the app in the same way, and a report can include recent app actions. Crash reports are kept only as long as needed to diagnose and fix errors.
Analytics only with your consent
Product analytics (PostHog) sends no usage information until you switch Analytics on. From app version 1.0.4, the analytics software is not started at all until you agree. Earlier versions started it switched off, and it could contact PostHog's servers for its settings before you agreed. You can withdraw any time in Profile > Privacy; withdrawing is recorded as a new entry and stops analytics. From app version 1.0.4, performance measurements sent to Sentry also follow your Analytics choice; crash and error reports do not.
Family
If you join a family, the owner can see your name and the charging they pay for, and we send your invitation by SMS or email.
Where your data is stored
Your account, charging, payment and consent records are stored on servers in Mumbai, India. Some services we use to run the app process limited data outside India. They are listed below with the country and what each receives. We never sell your personal data.
How long we keep your data
Your rights
Access and download your data, correct it, delete your account, withdraw consent, nominate someone, and complain. Use Profile > Download My Data, Profile > Privacy and Profile > Delete account, or write to dpo@pixellenergy.com or call +91 90720 02633.
We are legally required to keep some records, so deletion of your account is not the same as deleting every record about you.
On becoming aware of a personal-data breach, we follow the two-stage process under Rule 7 of the DPDP Rules, 2025:
The Service is intended for adults (18+) only. We do not knowingly collect the personal data of children, and we do not undertake behavioural monitoring or targeted advertising directed at children.
We protect your data with encryption in transit (TLS 1.3) and at rest (AES-256), role-based access controls, least-privilege service credentials, PII scrubbing in logs and analytics, and periodic security review.
We will post updates here with a new version and date, and — where the law requires — seek fresh consent for material changes. The current version is 4.1.
Who we are and who to contact
PixellEnergy Solutions Pvt Ltd, Unicorn Club #113, 11th Cross Road, Near NPS, 19th Main, HSR Layout Sector 4, Bengaluru 560102, India.
Grievance Officer and Data Protection Officer: Rahul, Director of Operations. Email dpo@pixellenergy.com. Phone +91 90720 02633.
This section is about our website, www.pixellenergy.com, and not the app. The website loads three third-party tools:
They receive your browser details, such as network address and a cookie, and the pages you view. They run on the website only. The PixellEnergy app does not use them.