Privacy Policy
Last updated: June 2026
This Privacy Policy explains how Jouli collects, uses, shares, and protects personal data. It is written to meet the revised Swiss Federal Act on Data Protection (revFADP/nDSG) and, where it applies to users or community members in the EU/EEA, the EU General Data Protection Regulation (GDPR).
1. Controller & Contact
The controller responsible for the processing of your personal data is the operator of Jouli, based in Bern, Switzerland (full details in our Imprint). For any privacy question or to exercise your rights, contact support@jouli.ch or use the in-app feedback form.
2. Data We Collect
We process the following categories of personal data: - Account data: email address, name, and authentication credentials - Member data: names, addresses, phone numbers, and meter/metering-point numbers of solar community members - Energy data: 15-minute interval meter readings and the consumption/production values derived from them - Billing data: generated invoices, tariff configurations, and payment information - Support and feedback: messages and any attachments you send us - Technical data: cookies, and limited usage/error logs needed to run and secure the service
3. Purposes & Legal Basis
We process personal data for the following purposes, each on the indicated legal basis (GDPR Art. 6; equivalent grounds under the revFADP): - Providing the energy-allocation and billing service and managing your account — performance of a contract (Art. 6(1)(b)) - Generating and sending bills to community members — performance of a contract and the account owner's legitimate interest in operating their community (Art. 6(1)(f)) - Processing payments — contract and legal obligation - Security, error monitoring, and abuse prevention — legitimate interest (Art. 6(1)(f)) - Website analytics — your consent (Art. 6(1)(a)), which you may withdraw at any time - Retaining invoices and accounting records — legal obligation (Art. 6(1)(c))
4. Recipients & Processors
We share personal data only with service providers (processors) acting on our instructions under a data-processing agreement: - Supabase — authentication and database hosting - Stripe — payment processing (PCI-DSS compliant) - Resend — sending transactional and bill emails - Vercel — frontend hosting and privacy-friendly usage analytics - Sentry (EU region) — error monitoring - Google Analytics — website analytics, only with your consent We do not sell your personal data.
5. International Data Transfers
Some of the providers above are based in, or process data in, the United States or other countries outside Switzerland and the EU. Where personal data is transferred to a country without an adequacy decision, we rely on appropriate safeguards — primarily the EU Standard Contractual Clauses (SCCs) and, where applicable, the provider's certification under the EU-US / Swiss-US Data Privacy Framework. We aim to keep data residency within the EU/Switzerland where feasible. You can request more detail on these safeguards via the contact above.
6. Data Retention
We keep personal data only as long as necessary for the purposes above. Account and member data are retained while your account is active; after account deletion they are erased once a 30-day grace period ends. Invoices and related accounting records may be kept for up to 10 years to satisfy Swiss bookkeeping law. Security and audit logs are kept for a limited period.
7. Your Rights
Subject to legal conditions, you have the right to: access your data and obtain a copy; rectify inaccurate data; erase your data; restrict processing; data portability (receive your data in a structured, machine-readable format); object to processing; and — where processing is based on consent — withdraw that consent at any time. As a user, you can download your data and delete your account from the app settings. Community members can contact the account owner who manages their community, or reach us directly. To exercise any right, email support@jouli.ch.
8. Automated Processing & Profiling
Jouli automatically computes energy allocation and produces consumption insights from 15-minute meter data in order to generate bills and reports. This processing is necessary to provide the service. It does not produce legal or similarly significant effects on you within the meaning of GDPR Art. 22, and we do not use it for automated decision-making about individuals.
9. Cookies & Analytics
Strictly necessary cookies (authentication, language preference, and your consent choice) are always set. Non-essential processing — Vercel Analytics, Google Analytics (where configured), and Sentry session replay — is enabled only after you give explicit consent via the cookie banner, and analytics IP addresses are anonymized. You can change or withdraw your consent at any time via the cookie settings, or by clearing this site's cookies and local storage, after which the banner reappears.
10. Supervisory Authority
If you believe your data-protection rights have been infringed, you may lodge a complaint with a supervisory authority. In Switzerland this is the Federal Data Protection and Information Commissioner (FDPIC/EDÖB), www.edoeb.admin.ch. In the EU/EEA, you may contact the data protection authority of your country of residence.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "last updated" date above and, where appropriate, by an in-app notice.