Who holds this data
Richard Willars, an individual, is the data controller, contactable at hello@mooseclimate.com. If you are unhappy with how your data is handled you can complain to the Information Commissioner's Office at ico.org.uk, or to your own supervisory authority if you are in the EU.
Everything that is stored
This is the complete list. There is nothing else.
- A reference number for your Volvo account. A meaningless string of characters that Volvo gives us instead of your name. It is how your schedules are recognised as yours. No name and no password is stored — there is no account here to have one.
- Your email address. It does not come from Volvo: you add it yourself on your schedules page, and it is needed before your first schedule. It is used only once you have confirmed it through a link sent to it. You can remove it there at any time; that stops the connection warnings and blocks new schedules, and existing schedules keep running. What it is used for is further down this page.
- An address you have not confirmed yet, and the code in its link. The link stops working after 24 hours, and both are deleted within a day after that.
- When the last confirmation link was sent. Kept to limit how often one can be sent, and deleted within a day after it is 24 hours old.
- The registration details of each car you connect. Its vehicle identification number, which is how a request reaches the right car, and its name, so you can tell two cars apart.
- Your schedules. The times, the days, the head start in minutes, and your timezone.
- A key that lets us talk to your car, encrypted. Volvo gives us this when you connect. It is what lets a request go out at 6am while you are asleep. It is scrambled before it is written down, is never shown anywhere, and stops working the moment you disconnect.
- A record of every request sent. Which schedule it came from, when it was sent, and whether Volvo accepted it. This is the only feedback the app can give you, because your car reports nothing back about its climate.
- A record of each connection warning or update emailed to you. Which kind it was, when it was sent, and whether it was accepted for delivery. It is what stops the same warning being sent twice, and it does not contain your address. Confirmation emails are not recorded.
- Whether you have turned off update emails. And the code in the link that turns them off, which can do nothing else.
What is never collected
No location, no journey history, no mileage, no charging or fuel information, no diagnostics, no analytics, no advertising identifiers, and no cookies beyond the one that keeps you signed in. There is no tracking of any kind on any page — this site runs no JavaScript at all, so it could not track you even if it wanted to.
We also never ask Volvo for permission to see any of it. Volvo offers apps more than a hundred permissions; besides signing you in, this one asks for three, and the terms list them.
When we will email you, and when we will not
Only these three kinds of email, and only to the address you gave us.
- A link to confirm your address. Sent only because you asked for it on your schedules page. If you do not use it, nothing further is sent to that address.
- Your connection is about to expire. Volvo makes everyone reconnect roughly every six months, and when that happens your schedules stop. Without a warning they would stop silently, and you would find out on a cold morning. This one has no unsubscribe link, because it is the service doing the job you asked it to do. It stops if you remove your address on your schedules page.
- Something about the app has changed in a way that affects you. A new feature worth knowing about, or something that has stopped working. These are on unless you turn them off, either next to your address on your schedules page or with the one-click link in any of them. Turning them off never affects the connection warning above.
No marketing, no newsletters, no offers, nothing from anyone else. Your address is never sold, shared, or passed to any other company.
What it is used for
Only to send the climate command you scheduled, to show you your own schedules and their history, and to send the three kinds of email described above. It is not used to build a profile of you, to infer anything about you, or to make decisions about you. It is never sold, never shared, and never handed to an advertiser or a data broker.
The legal basis is the contract between you and this service — the terms you accept when you connect a car. Without this data the service cannot do the one thing it does. That includes your email address: the service runs on its own while you are not looking, and a warning by email is the only way it can tell you before your schedules stop.
Where it lives
In a database in Western Europe, run for us by Cloudflare and reachable only by this service. The key to your car is scrambled before it is stored. Cloudflare holds the data on our behalf and does not use it for anything of its own.
How long it is kept
- Your history of requests is deleted automatically once it is 30 days old.
- Everything else is kept until you disconnect, or until it is deleted automatically. Volvo's permission for this service lasts about six months from when you last connected. If it runs out and you do not reconnect, everything held about you is deleted about a month later — so no more than about seven months after you last connected, even if the connection stopped working sooner. Deleted means gone: there are no backups to restore it from.
- If you want it gone sooner, disconnecting deletes everything straight away.
Disconnecting deletes it
Disconnecting a car withdraws this service's permission at Volvo and deletes the key, any email address, confirmed or not, your schedules, your vehicle records, your history of requests and the record of emails sent to you. It happens immediately and cannot be undone — there are no backups to restore you from.
You can also withdraw permission in your Volvo account's privacy settings, under "Third party apps and partners". That stops your schedules, but on its own it deletes nothing held here. Your data goes when you disconnect here, or automatically as described above — no more than about seven months after you last connected.
You can also ask for a copy of your data, a correction, or deletion, by emailing hello@mooseclimate.com — though disconnecting does the deletion faster than an email can.