Effective date: October 23, 2026
Publisher: Save on Lighting Ltd. ("we", "us"), 183 W Creek Landing, Chestermere, Alberta, Canada
Contact: amolnannar19@gmail.com
This policy explains what the Maple Glow LED app (Android package ca.saveonlighting.lights) and its optional cloud service collect, why we collect it, and how you can control it.
The app talks directly to your WLED lighting controllers over your home Wi‑Fi. In this mode we do not receive any of your data. Your settings, favourite colours, scenes and controller addresses are stored only on your phone.
The app asks for Location / Nearby Wi‑Fi devices permission so Android lets it scan for and join your controller's set-up Wi‑Fi network. Android treats Wi‑Fi scanning as location access. The app does not read, store or send your GPS location.
If you turn on Remote access to control your lights away from home, you create an account. We then collect and store:
| Data | Why |
|---|---|
| Email address | Your sign-in name, and for important service messages (for example, a password reset or a security notice) |
| Password | Stored only as a salted one-way hash (scrypt). We can't see your password |
| Controller details: the name you give it, its hardware (MAC) address, firmware version, LED count, zone names, effect and palette lists, and current light state (on/off, colour, brightness, effect) | So the app can show and control your lights remotely |
| A per-controller login for our message server | So your controller can connect securely to your account and to no one else's |
| Technical logs: IP address, time and type of request | Security (for example, limiting password-guessing attempts) and fixing problems |
We don't collect your name, phone number, contacts, photos, GPS location, or advertising IDs. We use no advertising and no third-party analytics or tracking, and we don't sell or share your data with anyone for marketing.
Remote-access data is stored on our server hosted by Fly.io, Inc. in its Toronto, Canada data centre. Fly.io acts as our hosting provider and has no permission to use the data for its own purposes. We don't currently use an offsite backup provider. If we add encrypted offsite backups, we'll name the provider here before using it.
The app connects to our server over encrypted HTTPS. Your controller connects to our message server on port 1883 (standard MQTT). Most WLED controllers only support unencrypted MQTT, so the light commands and status sent between your controller and our server aren't encrypted in transit. Each controller has its own password and can only see its own messages.
The app isn't directed at children under 13, and we don't knowingly collect their data.
We protect your data with encrypted connections (HTTPS/TLS), hashed passwords, per-controller credentials, access limits and private backups. No system is perfectly secure. We'll tell you, and the authorities, about any breach as the law requires.
If we change this policy, we'll update the date above and, for significant changes, notify you in the app.