FTW app for iPhone

Privacy

Updated 12 October 2026

Your energy data stays on your FTW box and your phone. The relay that connects them carries only encrypted traffic it cannot read. The app has no analytics and no tracking.

This page covers the FTW app for iPhone and the relay it uses. Sourceful Labs AB, Sweden, makes the app and runs the relay. The FTW box is software you run yourself; its documentation describes what it sends.

What stays on your box

Your box reads your meters, solar, battery and charger, keeps the history and makes the plan. That record stays on the box. The app asks the box for what it shows and sends the box what you choose, such as a charging goal.

What the app keeps on your phone

• The keys that let this phone talk to your box, in the iPhone keychain. They stay on this phone and are not backed up to iCloud.
• The last readings, prices and car level, so the app can show your home before it reconnects. Each one keeps the time it was read.
• A copy of the prices and car level that the widgets read. Widgets read nothing else.

Delete the app to remove what it keeps. The box owner can also withdraw a phone's access from the box.

Passkeys

When you pair, the app creates a passkey for app.ftw.energy in your password manager, for example iCloud Keychain. The passkey guards a copy of the key this phone uses with your box. Your password manager keeps the passkey; Sourceful never receives it. The app sends no copy of your keys to Sourceful.

The relay

The app reaches your box through Sourceful's relay at relay.ftw.energy, which runs in Frankfurt, Germany, on Amazon Web Services. The app and the box encrypt everything end to end (Noise protocol) before it leaves them. The relay has no key and cannot read what it carries.

To carry a connection the relay sees:

• your phone's IP address, while it is connected;
• a meeting code that changes every hour and that only your box and phone can work out;
• when you connect, for how long, and the size and timing of encrypted messages.

The relay keeps none of the traffic. Its access log holds counts, not addresses or codes. If the relay fails to pass on a connection, its error log may record the address and code; that log replaces itself and stays small. We use what the relay sees only to carry your connection, which you ask for when you use the app.

No analytics, no tracking, no ads

The app contains no analytics, no advertising and no code from third parties. It does not track you across apps or websites. It talks to the relay and nothing else.

The camera reads the pairing code from your box and nothing else.

Apple

Apple runs the App Store and TestFlight under its own privacy policy. If you share analytics with app developers in your iPhone settings, Apple sends us crash reports and usage numbers that do not name you. If you test through TestFlight, Apple shares your name, email address, crash reports and any feedback you send with us.

FTW Cloud, later

FTW Cloud will be a separate service that you can choose to turn on. It will hold a readable copy of the data you allow, so that it can, for example, send notifications. It is not part of the app today. It will stay off unless you turn it on, and we will update this page before it ships.

Your rights

Sourceful Labs AB (reg. no. 559382-0458), Kalmar, Sweden, is responsible for the data the relay sees. Under the GDPR you can ask what we hold about you, have it corrected or deleted, and object to how we use it. In practice the relay holds nothing that names you. To ask, email support@sourceful.energy or use Sourceful's contact page. You can also complain to the Swedish Authority for Privacy Protection (IMY).

The app is not aimed at children.

Changes

When the app changes what it does with data, we change this page first and update the date at the top. The history of this page is public on GitHub.