privacy statement

Privacy statement

What we do with your data
Eneliq reads your energy use to help you pay less. That is personal data, and we treat it that way. Below is which data we have, why, for how long, who else sees it and what you can do with it yourself. The retention periods on this page come straight from the settings that carry out the deletion.
Version of June 2026
On this page

Who is responsible

Company details to follow
Eneliq’s official details — name, registered address and Chamber of Commerce (KvK) number — will appear here once they are final. We would rather show nothing than a provisional number.

Questions? Email hallo@eneliq.nl, or send a message via Help and contact in the app.

Which data, and why

Per kind of data: what it is, what we use it for and on what basis.

Your account

Your name, email address and language, your password (only as an irreversible hash), a profile photo or phone number if you add one, and your two-step verification settings.

To create your account, let you log in securely and email you about your account, such as a code to confirm your email address or a link to choose a new password.

Legal basis: needed to provide the service

Your home and household

Your address, and what you tell us about your home: type of dwelling, year built, floor area, number of occupants, energy label, heating, solar panels, the appliances you have, when you are usually home during the day, and periods you tell us about yourself, such as a holiday or working from home.

To explain your usage, estimate what is normal for your home and give advice that fits it.

Legal basis: needed to provide the service

Your meter data

What your smart meter measures: electricity from the grid, feed-in and gas. First as individual readings, then as totals per quarter-hour, hour and day.

This is the core of Eneliq: showing your usage and costs, and working out when you are better off. From your usage pattern we also infer which large appliances you probably have and when they run.

Legal basis: needed to provide the service

Your contract and tariffs

Your supplier, the type of contract, its term, your tariffs and fixed costs, and — if you enter them — your customer number and payment method with your supplier.

To check your bill, estimate your yearly amount and compare your contract fairly with the market.

Legal basis: needed to provide the service

Connections and devices

Which devices and services you connect, their readings and status, the commands we send on your behalf, and the access keys of those connections.

To show your devices and — only if you switch it on — run them smartly. The keys are stored encrypted and only used at the moment of a request.

Legal basis: needed to provide the service

Subscription and payments

Your subscription, your payments (amount, status and date) and your invoices. We do not store your bank account or card details.

To provide your subscription and invoice you. Tax law requires us to keep invoices.

Legal basis: needed to provide the service · invoices: legal obligation

Support

Your messages to us, attachments you send, and what we see about your account at that moment to answer your question — for example whether your meter is sending data.

To help you.

Legal basis: needed to provide the service

Notifications and email

Messages in your inbox, your notification preferences, whether you want the occasional saving tip by email, and — if you turn on push notifications — the technical address at which your browser or phone receives them.

To let you know when electricity is cheap, or when something is up with your account.

Legal basis: needed to provide the service · push notifications and tips by email: your consent

Login and security

Your sessions (device and browser, IP address, when you were last active), your login attempts (email address, IP address, time) and technical log files.

To protect your account, recognise abuse and fix outages. You can see where you are logged in yourself, in your profile.

Legal basis: legitimate interest — you can object

Your choices

Every time you agree to something or withdraw a consent: what, when, with which version of this text, and from which IP address and browser.

To be able to show what you chose, as the GDPR requires.

Legal basis: legal obligation

How you use the app

Which advice and tips you are shown, open, follow or dismiss.

To make our advice better. This stays with us.

Legal basis: legitimate interest — you can object

Comparing with similar homes

Your average use per day (electricity, feed-in and gas) over the last 30 days, your average use per hour of the day over the last 14 days, and a rough description of your home: the first digit of your postcode, your type of home, your type of heating, whether you have solar panels and how many people live there. Not your name, address or email.

To put your usage next to that of similar homes. We only use it to calculate group averages, and we only show a group when it holds at least 5 homes, so your figure cannot be traced back to you. Our staff also see averages per postcode area (4 digits), again only for at least 5 homes. This is on by default; you can turn it off under Privacy & data.

Legal basis: legitimate interest — you can object

Housemates

If you share your household with others, they see the same energy data, the same home and contract, and your support conversations — including what you wrote to us, with attachments. Your own login details, security, sessions and inbox stay yours. If you invite someone, we keep their email address and send them an invitation.

So everyone at home has the same insight.

Legal basis: needed to provide the service

Switching via Eneliq

If you click through to a supplier’s offer, we record that click: which offer, on which screen, your current supplier, the saving we showed you and — if a partner reports it back — whether you actually switched. What you then enter with the supplier falls under their privacy statement.

To know whether our comparison really helps people.

Legal basis: legitimate interest — you can object

Sharing your monthly recap

Every monthly recap has its own link with a long, random code that nobody can guess. Anyone with that link sees your first name, whether you have solar panels and the figures from that recap. We give the link to no one; only you do, when you tap share.

So you can show your recap to whoever you choose. To revoke a shared link, send us a message via Help and contact.

Legal basis: needed to provide the service · only you share it

Ideas and votes

Ideas you send in for the app, and which plans you vote for.

To choose what we build.

Legal basis: legitimate interest — you can object

Inviting friends

Your personal invite code, who signed up with your code and — where there is a reward — when you both received it. If you follow an invite link, a cookie remembers the code.

To be able to reward invitations.

Legal basis: needed to provide the service

The waitlist

If you join the waitlist, we keep your email address, your language choice and technical details (IP address and browser).

To let you know when Eneliq opens for you. Never for advertising.

Legal basis: your consent — you can withdraw it at any time

What we do not do

We do not sell your data, to anyone.
There are no advertising or tracking cookies in the app, and we use no third-party analytics.
Your energy supplier gets nothing from us. We read your meter; they do not, through us.
Our staff only look at your data when needed, for example for a support question. When one of us opens your account, your household or your support conversation in the back office, it shows up in your access log under Privacy & data.
Advice is calculated automatically, but what you do with it is up to you. Autopilot only controls devices you switch on for it.

How long we keep it

Where a period is given, a scheduled task automatically deletes anything older; the number comes from that task’s settings. Only for invoices is it a minimum: we do not clear those up automatically yet. If you delete your account, most of it goes sooner — see Your rights.

Individual readings
the exact measurements of your smart meter
13 months
Quarter-hour and hourly totals
what we calculate your usage and advice from
2 years
Daily totals
your history
as long as you are a customer
Device readings and commands
from the devices you connect
2 years
Advice and scores
your daily advice and your energy score
10 years
App usage
which advice you opened or followed
1 year
Change history
when settings and estimates changed
2 years
Login attempts
email address, IP address and time
6 months
Sessions
cleared after this long without activity on that device
14 days
Log files
technical server logs
14 days
Support conversations
after the last message in a closed conversation; sooner if you delete your account
3 years
Support attachments
then deleted automatically
6 months
Your data export
the download file; deleted within an hour after that
24 hours
Messages in your inbox
the notifications and messages we sent you in the app
while you are a customer
Access log
who looked at your account, your household or your support conversation, and when
while you are a customer
Click-throughs to suppliers
which offer you opened and whether you switched
while you are a customer
Monthly recaps
your monthly recaps and their links
while you are a customer
Invitations
the email address of whoever you invited, and when
while you are a customer
Ideas and votes
what you sent in for the app and what you voted for
while you are a customer
Waitlist
or until you delete an Eneliq account with that email address
until you ask
Your choices
kept as proof of what you chose, also after you delete your account
as proof
Requests about your data
when you asked for an export or for your account to be deleted; also after deletion
as proof
Invoices
with their payments — statutory tax retention; we do not clear them up automatically after that yet
at least 7 years
Backups
a full copy of the database every night, in case something goes wrong — anything we delete is still in there for this long
14 days

Who else sees your data

These are the parties that currently process data for us, and what for.

Hosting party (still to be filled in)
servers, database and storage — all your data is kept here
Your browser’s push service
delivers push notifications if you turn them on; the content is encrypted

Outside the EU

Push notifications go through the push service of your browser or phone, for example from Google, Apple, Mozilla or Microsoft. That service may be outside the EU; the content of a notification is encrypted. To find out which safeguards apply, ask us via Help and contact.

Public sources — they receive nothing about you

We fetch market prices from ENTSO-E and enever.nl, the weather from Open-Meteo (for a region, never for your address), the national power mix from NED and statistics from KNMI and CBS. Those requests contain nothing about you.

Services you connect yourself

If you connect a device or service, such as your Homey or Home Assistant, we fetch data from that service with your permission. What that service does with your data itself is in its own terms.

When the law requires it

We only hand data to a public authority when a law or a court obliges us to.

How we protect your data

We only store your password as an Argon2id hash. Not even we can retrieve it.
The access keys of your connections and the secret of your two-step verification are stored encrypted in the database, and only decrypted at the moment they are needed.
You can turn on two-step verification with an authenticator app, with recovery codes in case you lose your phone.
Your session lives on our server; the cookie in your browser cannot be read by scripts and only travels over a secure connection.
After too many failed login attempts, we pause logging in for a while.
If you change your password, we log you out everywhere except on the device you changed it on.
Staff work in a separate back office, with their own login and mandatory two-step verification.
Only you can download your data export, through a link that is valid for 24 hours.

Your rights — and where to find them

You can arrange almost everything yourself in the app, without having to email us. You will find these settings in the app once you are logged in.

See your data and take it with you
Privacy & data › Download everything. One file (JSON) with your account, home, settings, choices, notification preferences, price alerts, daily totals, quarter-hour values, devices, connections (without keys), advice, subscription, payments, invoices, inbox, sessions, access log, app usage and click-throughs to suppliers. Not in this file are, among other things, your hourly values and individual readings, your support conversations and your login attempts. We send you those on request, via Help and contact, within one month.
Correct your data
In your profile, under your home and under your contract.
Delete your account
Privacy & data › Delete account. You have 30 days to change your mind: log in during that time and it is cancelled. After that we erase your account. What we keep: your invoices with their payments, for at least 7 years, because tax law requires it; the proof of your choices and of your requests about your data; and your daily totals (electricity, feed-in and gas per day), without your name, address or any link to your account — only with the rough description of your home — for the comparison with similar homes. If you had turned that comparison off, we do not keep your daily totals. If you share your household with others, the household’s data stays for them; only your account goes. It disappears from our backups by itself: we keep those for 14 days.
Withdraw consent
Turn off push notifications under Notifications, and comparing with similar homes under Privacy & data. If you want us to stop fetching anything from a connected service, revoke that connection under Privacy & data › Revoke connections. No longer want saving tips by email? Let us know via Help and contact.
Revoke connections
Privacy & data › Revoke connections. We wipe the stored keys immediately.
Objection, restriction or another question
Email hallo@eneliq.nl or send a message via Help and contact. We answer within one month.
Make a complaint
Not happy with how we handle your data? You can file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).

Cookies and storage in your browser

We only use cookies that the app needs to work, which is why we do not ask for consent. There are no third-party cookies.

eneliq-session
keeps you logged in while you use the app; expires after this long without activity
14 days
XSRF-TOKEN
protects forms against forged requests
14 days
remember_web_…
keeps you logged in on this device, even when you close your browser
13 months
locale
remembers your language choice
1 year
eneliq_ref
remembers a friend’s invite code
30 days

Storage on your own device

We keep a few preferences in your browser’s local storage: your theme, font size and language, whether you have seen the install tip, and whether the sidebar is collapsed. For use without internet the app also keeps pages in your browser; when you log out in the app, we wipe them. None of this leaves your device.

When this statement changes

If this statement changes, it gets a new version and date at the top. Which version you agreed to is recorded with your choices, and it is also in your data export.

Questions? Email hallo@eneliq.nl, or send a message via Help and contact in the app.

Terms of use