Constellation Heating Inc. (“Constellation,” “we,” “us”) operates the Constellation mobile application (the “App”). The App lets you operate a Bitcoin heating system: the App talks to your heater, which drives miners running LuxOS firmware. The miners mine through the Luxor pool under a subaccount that Constellation manages for your heater.
This policy covers the App and the Constellation servers it talks to.
Contact: [email protected]
Constellation Heating Inc., Quebec, Canada
1. What the App does
You use the App to set up your heater, set and monitor its operation (for example heating mode and target temperature), configure where your mining income is paid, and receive safety alerts.
- No account. There is no central customer identity, by design
- No in-app purchases
- No user-generated content
- Not directed at children
2. Information involved in using the App
We do not collect your name, email, phone number, contacts, photos, health data, or payment cards.
| Data | Who holds it | Purpose |
|---|---|---|
| Heater identity | Our servers | A device key and an identifier derived from the heater’s network hardware address. Registered once at manufacturing. Also used as the heater’s worker name at the mining pool |
| App installation key | Your phone’s secure keychain; the public half on our servers | Identifies this installation of the App to your heater and to our servers. Not tied to your name |
| Safety events | Sent by the heater to our servers | Event type, severity, the measured and threshold temperatures, and the firmware version, so we can notify your phone |
| Firmware update events | Sent by the heater to our servers | Update channel, version and install window, so we can notify your phone |
| Bitcoin payout address and schedule | Our servers, then applied to your heater’s mining-pool subaccount at Luxor | Mining payouts. Constellation stores your payout address in order to configure the pool |
| Push token | Our servers, stored hashed and encrypted | Optional safety and update alerts through Apple and Google push services |
| Camera | On your phone only | Scanning a Bitcoin address QR code. We do not keep images |
| Location | On your phone only | Identifying the Wi-Fi network your phone is on during heater setup. The location itself is not sent to us |
| Bluetooth | Local radio between your phone and the heater | Initial setup and adding another phone |
| Temperature and miner readings, energy counter, activity log | On the heater only | Operating the heater and showing history in the App. These never leave the heater |
The App does not use advertising identifiers to track you across other companies’ apps or websites.
3. How the system is connected
- On your home network, the App talks directly to your heater. The heater talks to its miners.
- When you are away from home, the App reaches your heater through an encrypted Tailscale tunnel built into the App. Your phone and your heater are members of a private Tailscale network that Constellation manages. Our servers grant each phone access to its own heater only.
- Bluetooth is used for initial setup and for adding another phone. Setup does not create a Bluetooth pairing on your phone. The App and the heater run a signed key exchange and encrypt every sensitive value they send over Bluetooth.
- The camera is used only to scan a Bitcoin address QR code when you set up payouts.
- Location permission is requested only so the App can identify the Wi-Fi network your phone is on during setup. Your location stays on the phone.
Tailscale is a connectivity tool. It is not used for advertising.
4. Remote support
Constellation support can reach your heater over the same Tailscale network to troubleshoot a problem. We use that path for support only. We do not use it to collect readings from your heater.
Your heater works without our servers. A cloud outage can delay notifications or remote access, but never affects local heat control or safety protection.
5. How we use data we hold
- Let you operate and monitor the heater from home or away
- Send you the safety and update alerts you enable
- Configure your heater’s mining-pool subaccount with the payout address and schedule you chose
- Show you your heater’s mining income in the App
- Troubleshooting when you ask for support
We do not sell personal information.
We do not send App user data to third-party AI services.
6. Sharing
| Party | What they see |
|---|---|
| Our servers | The heater identity, safety and update events, your payout address and schedule, and your push token |
| Tailscale | Coordinates the encrypted network between your phone, your heater and our support team. Tailscale sees device keys and network addresses, not what the App and the heater say to each other |
| Luxor | Runs the mining pool. Your heater’s miners send their mining work to Luxor, so Luxor sees hashrate under the heater’s worker name. Constellation applies your payout address to a subaccount it manages at Luxor |
| Apple and Google | Push notification delivery and app store services |
| Legal authorities | Only if required by law or to protect safety and security |
Third parties that receive data in line with this policy are expected to protect it consistently with this notice and applicable law.
7. Retention and your requests
- Temperature and miner readings on the heater: 30 days by default, never sent to us
- Safety events, update events, and payout configuration on our servers: kept while your heater is registered with us, so that alerts and payouts keep working
- Push token: until you disable notifications or uninstall the App
- App installation key: on the phone until you uninstall the App or remove the phone from the heater
Email [email protected] to ask what we hold about your heater, or to request correction or deletion of data on our servers. We will respond within a reasonable time.
You can turn off camera, Bluetooth, location, and notifications in your phone’s settings. Uninstalling the App removes data on the phone. A factory reset of the heater removes the phones paired to it. Neither automatically erases records on our servers; ask us and we will.
8. Children
The App is not for children under 13 (or the equivalent minimum age where you live). We do not knowingly collect personal information from children.
9. Security
- Every connection between the App and the heater is authenticated with a key held in your phone’s secure keychain
- Bluetooth setup uses a signed key exchange, with no Bluetooth pairing on the phone
- Remote access runs through Tailscale’s encrypted tunnel, and each phone can reach its own heater only
- Push tokens are stored hashed and encrypted on our servers
- The heater verifies its payout configuration itself and stops mining if it does not match what you set
- We do not store payment cards
No system is perfectly secure. Limit physical access to the heater and the phone that runs the App.
10. Canada and the United States
We are based in Quebec, Canada. The App is offered in Canada and the United States (not the EU or UK at this time).
You may have rights under PIPEDA, Quebec Law 25, and U.S. state laws such as the CCPA, including access, correction, deletion, and the right to complain to a regulator (in Quebec: Commission d’accès à l’information).
We do not sell personal information and we do not share it for cross-context behavioral advertising.
Data may be processed in Canada and/or the United States.
11. Changes
We will update the date at the top of this page when the policy changes. The current version is at www.constellationheating.com/privacy.
12. Contact
Constellation Heating Inc.
Quebec, Canada
[email protected]