Privacy Policy
Last updated: November 14, 2026
- We never see your Tesla password; you sign in on Tesla's own page.
- The server only keeps the tokens needed to stay connected to Tesla, encrypted.
- Your car's location and status are not stored on the server; they are passed to your phone only while the app is open.
- No ads, analytics or tracking. We do not sell or share your data.
- You can delete your account and data from inside the app.
1. Signing in with Tesla
When you connect Tesbeat to your Tesla account, Tesla's sign-in page opens. Your password and verification codes go only to Tesla. You grant Tesbeat the following permissions, all shown on Tesla's consent screen:
- Profile information (to identify your Tesla account)
- Vehicle information and location (to show them in the app)
- Vehicle commands and charging management (climate, locks, charging and similar actions)
- Offline access (so you do not have to sign in every time)
2. What the server stores
- Tesla access and refresh tokens: encrypted with AES-256-GCM.
- Tesla account identifier: a user number issued by Tesla that contains no name or email.
- Region: which Tesla server your account belongs to (for example, Europe).
- Sessions: an irreversible hash of the session token on your phone and when it was last used. The token itself is not stored on the server.
- Temporary sign-in records: one-time codes created during sign-in, which expire within 5–10 minutes.
3. What is not stored
Vehicle data such as battery, range, location, doors and climate is fetched from Tesla while the app is open and passed directly to your phone. It is not written to a database on the server, and no driving or location history is kept. The app contains no advertising, analytics or crash-tracking tools.
4. Server logs
To troubleshoot problems, the server writes the time, path (which may include the vehicle identification number, VIN) and IP address of incoming requests to technical log files. Authentication tokens are not written to these logs. Log files are size-limited and older entries are deleted automatically.
5. What is stored on your phone
Your session token is kept in your iPhone's Keychain, available only on that device. To show where your car is parked, its location is turned into an address by Apple's map services on your device; the coordinates are sent to Apple and Apple's privacy policy applies.
6. Where the data is
The Tesbeat server runs in a Hetzner Online GmbH data center in Nuremberg, Germany. Vehicle data comes from Tesla's Fleet API servers; for accounts in Turkey this is Tesla's European region. Your data is therefore processed outside Turkey.
The only service providers that handle your data are:
- Tesla, Inc.: sign-in and vehicle data.
- Hetzner Online GmbH: server hosting.
- Apple: maps and addresses.
7. Backups
The server database (the information in section 2) is backed up every night and backups are kept for 14 days.
8. Deleting your data and revoking access
- Delete account and data: in the app, tap the profile icon at the top right → Hesabı ve verileri sil (Delete account and data). Your Tesla tokens, account record and all sessions are removed from the server immediately. Copies in backups are deleted automatically within 14 days.
- Sign out: ends the session on that phone only.
- Revoke Tesla permissions: you can remove Tesbeat's access at any time in the third-party apps section of your Tesla account settings.
- Remove the virtual key: on your car's touchscreen, go to Controls → Locks and delete the Tesbeat key.
9. Changes
If this policy changes, the current version will be published on this page and the date above will be updated.