Skip to content
Get in touch

Privacy Policy

Last updated: July 2026

1. Data Controller

The entity responsible for data processing on this website and within HeyCharge services is:

HeyCharge GmbH Steinheilstr. 18 80333 Munich, Germany

Email: [email protected]

2. General Information

We process personal data only in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law. This policy explains what data we collect, how we use it, and what rights you have.

3. Your Rights

You have the right to:

  • Access the data we hold about you (Art. 15 GDPR)
  • Correct inaccurate data (Art. 16 GDPR)
  • Request deletion of your data (Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Receive your data in a portable format (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Lodge a complaint with a supervisory authority, in our case the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht)

To exercise these rights, contact us at [email protected].

4. Visiting Our Website

When you visit heycharge.com, we automatically collect technical data such as IP address, browser type, and the date and time of access. This is based on our legitimate interest in operating a secure and functional website (Art. 6(1)(f) GDPR).

Cookies and Tracking

We use cookies and similar technologies. On your first visit, you can choose which categories to allow in our cookie settings:

  • Strictly necessary: required for the basic operation of the website, cannot be turned off. This includes the cc_cookie cookie, in which we store your cookie choices for 182 days.
  • Analytics: Google Analytics, using the cookies _ga (distinguishes visitors) and _ga_* (session state), each valid for 2 years
  • Live Chat: powers our Intercom chat widget

The Analytics and Live Chat categories are based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time through the cookie settings. Strictly necessary cookies are based on our legitimate interest in a functional website (Art. 6(1)(f) GDPR).

Live Chat

Our live chat is provided by Intercom. Opening the chat sets a session cookie. This is based on our legitimate interest in providing fast support (Art. 6(1)(f) GDPR), or contract performance if you are already a customer.

5. Contact Form

If you use our contact form, we process the data you provide, such as name, email address, and message, to respond to your request. This is based on Art. 6(1)(b) GDPR, or Art. 6(1)(f) GDPR for general inquiries.

We use HubSpot to receive form submissions and manage our customer contacts. The details you enter are transmitted to HubSpot and stored in our CRM.

6. Customer Account and Dashboard

To use our Customer Dashboard and HeyCharge services, you create an account. We process contact details, contract data, and usage and billing data from your charging sessions. This is based on contract performance (Art. 6(1)(b) GDPR).

7. Job Applicants

When you apply for a position with us, we process the data contained in your application, such as your name, contact details, CV, cover letter, certificates, and references. We use this data solely to assess your suitability for the role and to run the hiring process. This is based on § 26(1) BDSG in conjunction with Art. 6(1)(b) GDPR (steps prior to entering an employment contract), and on Art. 6(1)(f) GDPR where we have a legitimate interest in defending against claims.

Applications reach us by email at [email protected]. If your application is unsuccessful, we delete your documents six months after we notify you of our decision, unless a longer statutory retention period applies or you have expressly allowed us to keep your details on file for future openings.

8. HeyCharge App

The HeyCharge App communicates with the wallbox via Bluetooth to start charging sessions and transmit consumption data. Depending on the feature used, the app requests additional permissions:

  • Location, to find nearby charging stations
  • Camera, to scan QR codes at charging stations
  • NFC, for quick start and stop of charging sessions
  • Photo library, optional, if you want to upload a photo to support
  • WiFi access, only during charger firmware updates
  • Notifications, for updates about your charging sessions

We also use the following services within the app:

  • Firebase (Google), for sign in, data storage, and push notifications
  • Crashlytics and Sentry, for error reporting and stability monitoring
  • Amplitude, for usage analytics
  • Intercom, for in app chat support
  • Google Sign In, optional, if you choose to sign in with your Google account

These providers receive technical data needed to perform their function. This is based on our legitimate interest in providing a stable and user friendly app (Art. 6(1)(f) GDPR); for optional features such as Google Sign In or photo uploads, on your consent through actively using that feature.

We use location data only to find nearby charging stations. It is not stored permanently unless you save a location yourself. You can turn off location access at any time in your device settings and use the app without it.

9. Payment Processing

Payments are processed through our payment provider, Stripe. The data required for payment is transmitted to Stripe. This is based on contract performance (Art. 6(1)(b) GDPR).

10. Hosting

Our website is delivered through Cloudflare as a content delivery network. The backend runs on Google Cloud, exclusively in the EU. This is based on our legitimate interest in stable and secure operations (Art. 6(1)(f) GDPR).

11. Recipients of Your Data

We only share your data where necessary to provide our services, in particular with:

  • Stripe (payment processing)
  • Google (hosting, analytics, Firebase, Google Sign In)
  • Intercom (chat and support)
  • HubSpot (CRM and contact form)
  • Cloudflare (content delivery)
  • Crashlytics, Sentry, and Amplitude (app analytics and error monitoring)

12. International Data Transfers

Part of our team works from our Kyiv, Ukraine location and may access personal data as part of software development. Since Ukraine does not have an EU adequacy decision, we safeguard this transfer through EU Standard Contractual Clauses.

Some of our service providers, such as Google, Stripe, Intercom, and HubSpot, also process data in the United States. Where possible, we rely on the EU-US Data Privacy Framework or Standard Contractual Clauses for these transfers.

13. Retention Period

We retain personal data only as long as necessary for the relevant purpose or as required by law, including statutory retention periods of up to ten years for invoicing data under German commercial and tax law.

14. Minors

Our services are not directed at children. Under GDPR, individuals under 16 need parental consent to use our services.

15. Data Protection Officer

HeyCharge GmbH is not required to appoint a Data Protection Officer under Art. 37 GDPR or § 38 BDSG, as the statutory thresholds are not met.

Questions about data protection and requests to exercise your rights can be sent to [email protected].

16. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in the law or new features of our services.