WaterMe provides a water-consumption platform to water utilities: a console for utility staff and a mobile app for their customers.

Two roles, two responsibilities

• Your water utility is the data controller for the data in your utility account: your identity and contact details, contracts, meters, readings and consumption. WaterMe processes that data on the utility's behalf as a processor. Privacy requests can go to your utility or directly to us — we route them.
• WaterMe is the data controller for console staff accounts, this website's visitors, and the platform's own service telemetry.

What we process

• Identity & contact — name, email (from you or your utility).
• Account & contract — account reference, service-point address, contract dates.
• Metering — readings and consumption per meter; consumption can reveal household patterns, so we treat all of it as personal data.
• Meter photos — if you submit your own reading, you may optionally attach a photo of the meter dial as evidence of it. The camera is used only when you choose to attach one, the photo is stored with that reading, and it is never used for anything else. Skipping it does not stop you submitting the reading.
• App activity — sign-ins, screens used, app version; first-party only, no third-party analytics or advertising SDKs.
• Support — messages you send via in-app support, and our replies.
• Notifications — your device's push token, with your OS-level permission.
• Technical — server logs and error traces (passwords and tokens filtered out).
• Crash diagnostics — if the app crashes or hits an error, we receive a technical report: device model, operating-system and app version, and the error with its stack trace. No name, email or account identifier is attached — errors only, no browsing or performance telemetry.

Why (legal bases)

• Contract — performing the utility's service: your consumption, bills and estimates, alerts, challenges.
• Legitimate interests — security (audit trails, access logging, tenant isolation), first-party service-quality telemetry, abuse prevention.
• Consent — push notifications (revocable any time in system settings).

Who we share it with

Nobody buys, rents or receives your data for marketing. We use a small set of service providers: server and database hosting, error and uptime monitoring (EU), transactional email and push-notification delivery (US providers — transfers covered by Standard Contractual Clauses), and app crash reporting (Sentry — stored in their EU region, Frankfurt; the provider is US-headquartered and the safeguard is Standard Contractual Clauses).

Retention

• Your account: as long as your utility contract makes the service available, or until you delete your account.
• Uploaded import files: purged after your utility's configured retention period (default 90 days).
• Service telemetry: purged on a rolling schedule.
• Meter readings and consumption history belong to your utility's regulated records and remain with the utility after account deletion (GDPR Art. 17(3)).
• A meter photo is kept with the reading it evidences, and follows the same rule as that reading.

Your rights

Access, rectification, erasure, portability, restriction, objection — and complaint to your supervisory authority (in France, the CNIL, cnil.fr). Erasure is self-service: delete your account in the app (Profile → delete account, password-verified). For everything else: hello@waterme.space or your utility — we answer within one month.

Security

Row-level tenant isolation enforced in the database itself, encrypted transport, bcrypt password hashes, revocable database-backed sessions, and a full audit trail of administrative actions — including any access by WaterMe platform staff to a utility's tenant, which is individually logged.

Children & changes

The service accompanies a household water contract and is not directed at children. Any material change to this policy will be posted here and dated.