FTW app for iPhone and Apple Watch

Privacy

Updated 17 October 2026

Your energy data stays on your FTW box and your phone. The app reaches your box through FTW Cloud, which carries the connection encrypted end to end and cannot read it. A readable copy is off unless you turn it on. The app has no analytics and no tracking.

This page covers the FTW app for iPhone and Apple Watch, and FTW Cloud, the service it uses. Sourceful Labs AB, Sweden, makes the app and runs FTW Cloud. The FTW box is software you run yourself; its documentation describes what it sends.

What stays on your box

Your box reads your meters, solar, battery and charger, keeps the history and makes the plan. That record stays on the box. The app asks the box for what it shows and sends the box what you choose, such as a charging goal.

What the app keeps on your phone

• The keys that let this phone talk to your box, in the iPhone keychain. They stay on this phone and are not backed up to iCloud.
• The last readings, prices and car level, so the app can show your home before it reconnects. Each one keeps the time it was read.
• A copy of the prices and car level that the widgets read. Widgets read nothing else.

Delete the app to remove what it keeps. The box owner can also withdraw a phone's access from the box.

Passkeys

When you pair, the app creates a passkey for app.ftw.energy in your password manager, for example iCloud Keychain. The passkey guards a copy of the key this phone uses with your box. Your password manager keeps the passkey; Sourceful never receives it. The app sends no copy of your keys to Sourceful.

FTW Cloud

The app and the watch reach your box through FTW Cloud at cloud.ftw.energy, which runs in Stockholm, Sweden, on Amazon Web Services. Your box connects to FTW Cloud once you pair a phone. The app and the box encrypt the connection end to end (Noise protocol) before it leaves them. FTW Cloud has no key for it and cannot read or change what it carries.

To carry the connection FTW Cloud sees:

• a fixed id for your home, made from a key your box holds;
• the IP addresses of your box and your phone, while they are connected;
• the list of devices your box allows, which the box signs: each device's id, public key and role;
• when you connect, for how long, and the size and timing of encrypted messages.

On disk FTW Cloud keeps your home id, your box's public key, the signed device list, the phones registered for notifications and the hashes of access tokens; for assistants you approve, it also keeps what the Assistants section lists. It keeps none of the traffic and logs no addresses. We use what it sees only to carry your connection.

The readable copy, if you turn it on

In the app you can turn on a readable copy of your home in FTW Cloud. It is off until you do. It holds what you allow, such as live power readings, the car's charge level, prices and events like a lost connection. Device names are replaced by codes.

FTW Cloud uses the copy to show your home faster, to give your watch a reading, and to send you notifications through Apple's push service. It holds the copy in memory only and drops it an hour after your box goes quiet. Turn the copy off in the app and FTW Cloud deletes it.

The copy is not encrypted end to end. Someone in full control of the server could read it while it is held. Sourceful has no tool for staff to read it.

The relay, while we move

Until every part of FTW has moved to FTW Cloud, the app can also reach your box through Sourceful's older relay at relay.ftw.energy, in Frankfurt, Germany, on Amazon Web Services. It carries the same end-to-end encrypted connection. It sees your phone's IP address, a meeting code that changes every hour, and the size and timing of messages. It keeps none of the traffic, and its access log holds counts, not addresses or codes. We will switch it off.

No analytics, no tracking, no ads

The app contains no analytics, no advertising and no code from third parties. It does not track you across apps or websites. It talks to FTW Cloud, to the relay while we move, and to Apple's push service, and to nothing else.

The camera reads the pairing code from your box and nothing else.

Apple

Apple runs the App Store and TestFlight under its own privacy policy. If you share analytics with app developers in your iPhone settings, Apple sends us crash reports and usage numbers that do not name you. If you test through TestFlight, Apple shares your name, email address, crash reports and any feedback you send with us.

Assistants

You can let an assistant, such as Claude, ChatGPT or Cursor, read your home through FTW Cloud at cloud.ftw.energy/mcp, and act on it if you allow that too. Nothing reaches an assistant until you approve it, on your phone with Face ID or on your box's own page with the house password. It reads by default; control is a separate choice. Control lasts minutes at a time, within limits your box sets, and your box asks you before any lasting change. Access lasts as long as you choose, from a day up to a year, and you can renew it or end it at any time.

This connection is not end to end between you and your box. The assistant runs outside your home, so FTW Cloud opens the encrypted connection to your box for it. FTW Cloud makes a key for each assistant you approve and keeps it sealed by Amazon's key service (AWS KMS), which only that part of FTW Cloud may use. FTW Cloud reads the assistant's questions and your box's answers while it passes them on, holds them in memory only, and keeps none of them. When a request fails, it logs the tool's name, not what was read.

For each assistant, FTW Cloud keeps its name and web address as the assistant gives them, the public half of its key, which home it may reach, what it may do and until when, and hashes of its access tokens. Your box keeps a record of what each assistant read and did for 90 days.

Even with the readable copy off, FTW Cloud sends your phones a short notice through Apple's push service when an assistant gets access, asks for a change or is about to lose access. The notice names the assistant only if the readable copy is on.

What you let an assistant read goes to the company that runs it, such as Anthropic, OpenAI or Anysphere (Cursor), under that company's own privacy policy. Sourceful does not control what it does with it.

Access for Sourceful support, which you will be able to turn on for a support case, is not available yet. We will update this page before it is.

Your rights

Sourceful Labs AB (reg. no. 559382-0458), Kalmar, Sweden, is responsible for the data FTW Cloud and the relay handle. Under the GDPR you can ask what we hold about you, have it corrected or deleted, and object to how we use it. FTW Cloud holds no name, email address or street address for you, but your home id and IP addresses count as personal data. To ask, email support@sourceful.energy or use Sourceful's contact page. You can also complain to the Swedish Authority for Privacy Protection (IMY).

The app is not aimed at children.

Changes

When the app changes what it does with data, we change this page first and update the date at the top. The history of this page is public on GitHub.