Your connection & privacy

What we store

Your Sites user ID, profile email, invitation grant, and display preferences. If you connect iCOMM, we store your iCOMM email/password and access tokens encrypted, plus the heater’s identity, approximate location, timezone, readings, and schedules you enable.

Why credentials stay on the backend

The unofficial iCOMM integration needs password-based sign-in when access tokens expire. The running service can decrypt saved credentials. They are never returned to the browser or made available in the admin user portal.

Background work

Heater checks run every five minutes with the browser closed. A visible panel checks every minute. Enabling a boost or schedule authorizes mode changes and restoration to the previous mode. Outdoor weather is an estimate of garage conditions, and availability is not a measurement of remaining gallons or a hot-water guarantee.

Retention & removal

Activity and collection diagnostics are retained for 14 days; minute recovery observations for 48 hours. Saved configuration, last successful status, invitation grants and unresolved control state remain until changed or deleted. Disconnect removes usable cloud credentials after active automation is handled; deletion also removes your household records. Hosting backups may retain older records under the provider’s retention policy.

Other services

iCOMM provides heater reports and controls; Open-Meteo and, where supported, NWS receive approximate weather coordinates. Resend handles invitation emails. This is an independent app without A. O. Smith endorsement. Microphone sound-wake detection stays on your device; no audio is recorded or uploaded.

For access or help, contact the person who invited you. You can disconnect or delete your data in Account settings, including if your invitation has been revoked.