1. Introduction
Pleevi BV, offers the Pleevi Driver App (the "App"), a progressive web application (PWA) that enables electric vehicle (EV) drivers to declare their energy needs and parking duration so that their Energy Management System (EMS) can optimise their charging session at the site where they are parked.
This Privacy & Cookie Policy ("Policy") explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Belgian data-protection legislation.
Please read this Policy before using the App. By using the App, you acknowledge that you have read and understood it.
2. Data Controller
The data controller responsible for your personal data is:
| Company | Pleevi BV |
| Address | Koning Albert II-laan 4, 1000 Brussels, Belgium |
| Company number | 1017.187.332 |
| Contact | support@pleevi.ai |
3. What Personal Data We Collect
3.1 Account & identity data
- Email address – used for authentication (magic sign-in links, password-reset emails) and for transactional notifications related to your charging session.
3.2 Charging session data
- Requested energy amount (kWh) for your current parking session.
- Intended parking duration.
This information is used exclusively to optimise the power allocation for your vehicle by the EMS at the relevant charging site.
3.3 Optional vehicle profile data
You may optionally provide your vehicle brand and model. This is used solely to look up battery capacity and maximum charging power to improve optimisation accuracy. It is entirely voluntary.
3.4 Usage & analytics data (Amplitude)
We use Amplitude, a product analytics platform, to collect data about how users interact with the App, only after you have given your explicit consent via the cookie banner. This may include:
- Pages or screens visited and actions taken within the App.
- Session duration and frequency.
- Device type, browser type and operating-system version.
- Approximate geographic region (country / region level, derived transiently from IP address; the IP address itself is not stored in identifiable form).
ℹ️ EU data residency: We operate Amplitude from their EU data centre on AWS Frankfurt, Germany. Your analytics data is stored and processed entirely within the EEA and never leaves it.
3.5 Preference data
The App stores two user-interface preferences locally on your device as first-party cookies:
- Display theme (light or dark mode).
- Preferred energy unit (kWh, state of charge %, or range in km).
These cookies do not contain personal data in the strict sense, but we disclose them here for full transparency. They are classified as functional/preference cookies.
4. Legal Basis for Processing
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Authentication (magic links, password reset) | Performance of a contract – Art. 6(1)(b) |
| Charging session notifications (started, completed) | Performance of a contract – Art. 6(1)(b) |
| Optimising your charging session (energy & parking data) | Performance of a contract – Art. 6(1)(b) |
| Vehicle profile (brand / model) | Consent – Art. 6(1)(a), freely given and withdrawable at any time |
| Preference cookies (theme, energy unit) | Strictly necessary / functional – exempt from consent under the ePrivacy Directive |
| Product analytics via Amplitude | Consent – Art. 6(1)(a), obtained via cookie banner before any tracking |
Where we rely on consent, you may withdraw it at any time via the cookie settings panel or by contacting us. Withdrawal does not affect the lawfulness of prior processing.
5. How We Use Your Personal Data
- To create and maintain your account and authenticate your identity.
- To send transactional emails: magic sign-in links, password-reset emails, and charging session notifications.
- To pass your declared energy needs and parking duration to the EMS for real-time charging optimisation.
- To look up battery capacity and maximum charging power when you have provided your vehicle model.
- To remember your display and unit preferences across sessions (only after consent).
- To analyse aggregate usage patterns in order to improve the App (only after consent).
We do not send marketing emails. We do not sell, rent or share your personal data with third parties for their own marketing purposes.
6. Cookies, Consent & Similar Technologies
6.1 What are cookies?
Cookies are small text files stored on your device by your browser. The App uses only first-party cookies (set by pleevi.ai directly), no third-party tracking cookies are used.
6.2 Cookie consent
When you first visit the App, a cookie consent banner is displayed. Non-essential cookies are only activated after you give your explicit consent. You may:
- Accept all cookies – enables session authentication, preference, and analytics cookies.
- Accept only necessary cookies – only the __session authentication cookie is set; preference and analytics cookies are not loaded.
- Withdraw or change your consent at any time via the "Cookie settings" link in the App footer.
ℹ️ Amplitude is not initialised until you actively accept analytics cookies. Your consent choice is remembered for 12 months; after that you will be asked again.
6.3 Cookies we use
| Cookie | Category | Purpose | Attributes | Retention |
|---|---|---|---|---|
| __session | Strictly necessary | Stores your authenticated session identity and access token (JWT) after login. | HttpOnly, Secure, SameSite=Lax, encrypted server-side | 30 days |
| pleevi-theme | Preference / functional | Remembers your chosen display theme (light or dark mode) across sessions. | SameSite=Lax, JS-accessible | 1 year |
| pleevi-energy-unit | Preference / functional | Remembers your preferred unit for energy display: kWh, state of charge (%), or range (km). | SameSite=Lax, JS-accessible | 1 year |
| amplitude_id_* | Analytics (consent) | Tracks anonymous usage events across sessions to help us improve the App. Only set after your consent. Processed on Amplitude EU (AWS Frankfurt). | SameSite=Lax | 12 months |
| amplitude_unsent_* | Analytics (consent) | Buffers unsent Amplitude events in local storage. Only active after your consent. | SameSite=Lax | Session |
All cookies listed above are first-party cookies set by pleevi.ai. We do not use any advertising or cross-site tracking cookies.
6.4 Managing cookies via your browser
You can control or delete cookies through your browser settings. Note that disabling the __session cookie will log you out and prevent the App from functioning. For guidance:
- Chrome: chrome://settings/cookies
- Firefox: about:preferences#privacy
- Safari: Settings → Safari → Privacy & Security
7. Who We Share Your Data With
| Recipient | Role & location |
|---|---|
| Amplitude Analytics | Data processor – EU data centre on AWS Frankfurt, Germany. Data never leaves the EEA. DPA in place. |
| Transactional email provider | Data processor – EEA-based or covered by SCCs. DPA in place. Used only for auth and session notification emails. |
| Legal / regulatory authorities | Disclosed only if required by applicable law or valid court order. |
When transferring personal data to third-party processors, we ensure that appropriate contractual safeguards are in place, including data processing agreements that set out restrictions on the use of your personal data and obligations in respect of the security thereof.
8. International Data Transfers
Your personal data is primarily stored and processed within the European Economic Area (EEA). To the extent that any personal data is transferred to recipients outside the EEA, we will ensure that appropriate safeguards are in place in accordance with Chapter V of the GDPR, such as Standard Contractual Clauses (SCCs) approved by the European Commission or an adequacy decision. You may request further details about the safeguards in place by contacting us at support@pleevi.ai.
9. Data Retention
| Data type | Retention period |
|---|---|
| Account & email data | Retained while your account is active, plus 12 months after deletion. |
| Charging session data | Retained for 12 months from the session date, then anonymised or deleted. |
| Vehicle profile data | Retained until you withdraw consent or delete your account, whichever is first. |
| Analytics data (Amplitude EU) | Retained in Amplitude for 12 months; raw event data deleted after this period. |
| Preference cookies (theme, energy unit) | Stored on your device for 1 year; cleared when you withdraw consent or clear browser cookies. |
| Session cookie (__session) | Expires 30 days after login or immediately on logout. |
You may request earlier deletion of your personal data at any time, see Section 10.
10. Your Rights Under the GDPR
As a data subject, you have the following rights:
- Right of access (Art. 15) – request a copy of the personal data we hold about you.
- Right to rectification (Art. 16) – ask us to correct inaccurate data.
- Right to erasure (Art. 17) – ask us to delete your personal data, subject to certain exceptions.
- Right to restriction of processing (Art. 18) – ask us to restrict how we use your data.
- Right to data portability (Art. 20) – request a machine-readable copy of data you have provided to us.
- Right to object (Art. 21) – object to processing based on legitimate interests.
- Right to withdraw consent (Art. 7(3)) – withdraw consent for analytics or preference cookies at any time without affecting prior lawful processing.
- Right to lodge a complaint (Art. 77) – you have the right to lodge a complaint with a supervisory authority.
To exercise any of these rights, contact us at support@pleevi.ai. We will respond within 30 days. If unsatisfied, you may lodge a complaint with the Belgian Data Protection Authority:
| Authority | Gegevensbeschermingsautoriteit (GBA) |
| Website | www.gegevensbeschermingsautoriteit.be |
| contact@apd-gba.be | |
| Phone | +32 (0)2 274 48 00 |
11. Automated Decision-Making and Profiling
The App does not carry out any automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 of the GDPR. While the EMS uses the energy needs and parking duration you declare to optimise your charging session, this process does not involve profiling or automated individual decision-making with legal or similarly significant effects.
12. Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encryption of data in transit (TLS/HTTPS) and at rest.
- HttpOnly and Secure flags on the session cookie to prevent JavaScript access and transmission over unencrypted connections.
- Server-side encryption of session cookie contents.
- Access controls limiting data access to authorised personnel only.
- Regular security reviews of our infrastructure and third-party processors.
13. Children's Privacy
The App is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.
14. Changes to This Policy
We may update this Policy from time to time. When we do, we will update the effective date above and, where changes are material, notify you by email or via a prominent notice in the App.
15. Contact Us
For any questions, concerns or requests relating to this Policy or to the processing of your personal data:
| support@pleevi.ai | |
| Company | Pleevi BV |
| Address | Koning Albert II-laan 4, 1000 Brussel, Belgium |