FTW apps, Cloud and ChatGPT

Privacy

Updated 18 October 2026

Your box keeps the energy record; your phone keeps a recent copy. The app reaches your box through FTW Cloud, which carries the connection encrypted end to end and cannot read it. A readable copy is off unless you turn it on. The app does not track you across apps or sites. The planned project statistics are described below.

This page covers the FTW app for iPhone and Apple Watch, FTW Cloud, and the FTW plugin for ChatGPT, including its MCP connection. Sourceful Labs AB, Sweden, makes the app and runs FTW Cloud. The FTW box is software you run yourself; its documentation describes what it sends.

What stays on your box

Your box reads your meters, solar, battery and charger, keeps the history and makes the plan. That record stays on the box. The app asks the box for what it shows and sends the box what you choose, such as a charging goal.

What the app keeps on your phone

• The keys that let this phone talk to your box, in the iPhone keychain. They stay on this phone and are not backed up to iCloud.
• The last readings, prices and car level, so the app can show your home before it reconnects. Each one keeps the time it was read.
• A copy of the prices and car level that the widgets read. Widgets read nothing else.

Delete the app to remove what it keeps. The box owner can also withdraw a phone's access from the box.

Passkeys

When you pair, the app creates a passkey for app.ftw.energy in your password manager, for example iCloud Keychain. The passkey guards a copy of the key this phone uses with your box. Your password manager keeps the passkey; Sourceful never receives it. The app sends no copy of your keys to Sourceful.

FTW Cloud

The app and the watch reach your box through FTW Cloud at cloud.ftw.energy, which runs in Stockholm, Sweden, on Amazon Web Services. Your box connects to FTW Cloud once you pair a phone. The app and the box encrypt the connection end to end (Noise protocol) before it leaves them. FTW Cloud has no key for it and cannot read or change what it carries.

To carry the connection FTW Cloud sees:

• a fixed id for your home, made from a key your box holds;
• the IP addresses of your box and your phone, while they are connected;
• the list of devices your box allows, which the box signs: each device's id, public key and role;
• when you connect, for how long, and the size and timing of encrypted messages.

On disk FTW Cloud keeps your home id, your box's public key, the signed device list, the phones registered for notifications and the hashes of access tokens; for assistants you approve, it also keeps what the Assistants section lists. It keeps none of the traffic and logs no addresses. We use what it sees only to carry your connection.

The readable copy, if you turn it on

In the app you can turn on a readable copy of your home in FTW Cloud. It is off until you do. It holds what you allow, such as live power readings, the car's charge level, prices and events like a lost connection. Device names are replaced by codes.

FTW Cloud uses the copy to show your home faster, to give your watch a reading, and to send you notifications through Apple's push service. It holds the copy in memory only and drops it an hour after your box goes quiet. Turn the copy off in the app and FTW Cloud deletes it.

The copy is not encrypted end to end. Someone in full control of the server could read it while it is held. Sourceful has no tool for staff to read it.

The retired relay

The separate relay at relay.ftw.energy is retired. Current connections use FTW Cloud. Older apps or boxes may need an update.

No ads or tracking across services

The app has no advertising and does not track you across apps or websites. It talks to FTW Cloud and Apple's push service. The planned project statistics and the new Cloud terms are described below.

The camera reads the pairing code from your box and nothing else.

Apple

Apple runs the App Store and TestFlight under its own privacy policy. If you share analytics with app developers in your iPhone settings, Apple sends us crash reports and usage numbers that do not name you. If you test through TestFlight, Apple shares your name, email address, crash reports and any feedback you send with us.

Assistants and the ChatGPT plugin

You can let an assistant, such as Claude, ChatGPT or Cursor, read your home through FTW Cloud at cloud.ftw.energy/mcp, and act on it if you allow that too. Nothing reaches an assistant until you approve it, on your phone with Face ID or on your box's own page with the house password. It reads by default; control is a separate choice. Control lasts minutes at a time, within limits your box sets, and your box asks you before any lasting change. Access lasts as long as you choose, from a day up to a year, and you can renew it or end it at any time.

This connection is not end to end between you and your box. The assistant runs outside your home, so FTW Cloud opens the encrypted connection to your box for it. FTW Cloud makes a key for each assistant you approve and keeps it sealed by Amazon's key service (AWS KMS), which only that part of FTW Cloud may use. FTW Cloud reads the assistant's questions and your box's answers while it passes them on, holds them in memory only, and keeps none of them. When a request fails, it logs the tool's name, not what was read.

For each assistant, FTW Cloud keeps its name and web address as the assistant gives them, the public half of its key, which home it may reach, what it may do and until when, and hashes of its access tokens. Your box keeps a record of what each assistant read and did for 90 days.

Even with the readable copy off, FTW Cloud sends your phones a short notice through Apple's push service when an assistant gets access, asks for a change or is about to lose access. The notice names the assistant only if the readable copy is on.

What you let an assistant read goes to the company that runs it, such as Anthropic, OpenAI or Anysphere (Cursor), under that company's own privacy policy. Sourceful does not control what it does with it.

The FTW plugin sends OpenAI the answers to the tools you use, such as current power, battery and car state, past power readings, plans, device health, and redacted logs and settings. FTW Cloud receives the tool name and arguments needed for the request; the plugin does not ask for your full conversation history. OpenAI handles what it receives under its own privacy policy and your account settings. Its retention and deletion controls are separate from FTW's. Ending access in FTW does not delete an earlier ChatGPT conversation.

The public plugin uses named tools and does not offer arbitrary API reads or backup exports. Other, separately authorized technical assistant connections can read exact technical identifiers, network addresses and exports; some backups contain saved credentials. Grant and use only the access needed for your task.

Read FTW for ChatGPT, its terms and support information.

Access for Sourceful support, which you will be able to turn on for a support case, is not available yet. We will update this page before it is.

Project statistics and the new Cloud terms

Hourly collection is not active. Sourceful is reviewing the new scope and its legal basis before enabling it. The next Cloud terms, ftw-cloud-2026-10-v3, include project statistics for everyone who uses FTW Cloud. There is no separate statistics switch within Cloud. You must read and accept the new terms; earlier Cloud or statistics choices do not accept them. If you do not want to contribute, you can use FTW locally without Cloud.

Local FTW users can choose to contribute without enabling the app, assistants or remote access. The box asks first, with Yes as the suggested action and No available beside it. It sends no new report before your answer. Saying no leaves local measurement, planning and control working. You can stop local sharing later.

The statistics policy is ftw-project-stats-2026-10-v3. After approval and activation, your box sends recorded energy for each closed hour: grid import and export, solar generation, battery and vehicle charge and discharge. It also sends configured battery capacity, battery and charger power limits, and solar capacity. Values are rounded to 10 Wh or W. No names, addresses, coordinates, device ids or vehicle ids are included. Configured limits do not prove physical control, and missing readings are not zero. Hours before your new answer are not uploaded.

Sourceful uses these values to improve FTW planning and publish group totals, not for advertising or decisions about a household. Reports are not anonymous: FTW Cloud links a random statistics id to your home so it can delete them. The retention limit is 48 hours from the recorded hour.

Someone with full control of the server can read them. Staff cannot browse household reports in a web interface. A named operator can export one home's statistics offline for a verified data rights request; this requires stopping the Cloud service. A verified rights request can also restrict reporting and Cloud access while the request is handled.

We will state the reviewed legal basis here before collection starts. Accepting terms alone does not settle that legal basis.

Public energy cells need at least 20 contributing homes, with no home above 30 percent of a sum. The stats page receives only group values. Comparing totals over time can still create a risk of identifying a contributor. To stop contributing, leave FTW Cloud or stop local statistics sharing. Cloud deletes unpublished reports when it receives your box's request; if the box is offline, this happens when it reconnects. Already published group totals remain. Leaving Cloud also ends remote app and assistant access.

The separate anonymous daily report describes the version, driver types, coarse battery size, price zone and time since installation. It contains no stable box id. Cloud reduces reports to daily totals and stores no individual report or source address. Public daily cells and each label need at least 10 reports. The daily average estimates reporting active installations, not unique people or all-time installations. Updated Core requires your current Cloud terms or local statistics answer before sending it; older versions use their existing daily-report setting.

Your rights

Sourceful Labs AB (reg. no. 559382-0458), Kalmar, Sweden, is responsible for the data FTW Cloud and the relay handle. Under the GDPR you can ask what we hold about you, have it corrected or deleted, and object to how we use it. FTW Cloud holds no name, email address or street address for you, but your home id and IP addresses count as personal data. To ask, email [email protected] or use Sourceful's contact page. You can also complain to the Swedish Authority for Privacy Protection (IMY).

The app is not aimed at children.

Changes

When the app changes what it does with data, we change this page first and update the date at the top. The history of this page is public on GitHub.