Trust

How Ember EV uses your Tesla.

Ember EV is independent. It is not affiliated with or endorsed by Tesla, Inc. or Octopus Energy. The controls below are the ones the server code sends, and they match the privacy policy.

Commands

  • Wake the vehicle.
  • Add a charge schedule, or remove one.
  • Set the charge limit.
  • Start charging, or stop charging.
  • Register Fleet Telemetry so the app can follow charge state. The audit log stores the shape of that request, not the certificate.

Ember EV also reads battery level, charge state, location and existing charge schedules. It does not drive the car.

Where the token is stored

Tesla OAuth tokens are stored encrypted on Supabase, hosted in the EU. They are used to talk to the vehicle. They are not written into logs. VINs in those logs are truncated.

Commands go through a signing proxy on Railway in the US. The privacy policy states that this proxy relays commands and does not store them. Vehicle commands are signed with Tesla's Vehicle Command Protocol.

How to revoke access

Open accounts.tesla.com and remove Ember EV. Revoking access stops Ember EV communicating with the car. Tokens are deleted when you disconnect Tesla or delete the Ember EV account. Push notifications are turned off in iOS Settings.

The full retention list is in the privacy policy.