Legal

Trademark, authorisation, licensing and compliance — in one place, stated plainly.

Independence and trademarks

TeslaWatch is an independent application. It is not made, endorsed, sponsored, certified or supported by Tesla, Inc. No affiliation is claimed or implied.

“Tesla”, “Tesla Motors”, “Model S”, “Model 3”, “Model X”, “Model Y”, “Cybertruck”, “Powerwall” and “Supercharger” are trademarks of Tesla, Inc. Apple, Apple Watch, watchOS, iPhone, iOS, Siri, TestFlight and App Store are trademarks of Apple Inc. All are used nominatively — solely to describe compatibility and function, which is what nominative fair use permits. TeslaWatch claims no rights in them.

Vehicle names appear only to state which vehicles the app works with. No Tesla logo, wordmark, vehicle imagery or design element belonging to Tesla is used in the app or on this site.

Authorisation to access Tesla vehicles

TeslaWatch operates exclusively through Tesla's official Fleet API, the interface Tesla publishes for third-party developers. It uses no unofficial, undocumented, reverse-engineered or scraped interface.

Access methodTesla Fleet API, via a registered Tesla developer application

AuthorisationOAuth 2.0 with PKCE. Each user authorises access to their own vehicle through Tesla's own sign-in page.

Domain verificationTesla verifies domain control by fetching a partner public key from a fixed well-known path. That path is served here and returns the key as plain text with no redirect. The published key is a placeholder until the production domain is registered — it is replaced as part of Tesla partner registration.

CredentialsThe Tesla client secret never leaves our server and is never present in the app binary.

ScopeOnly what the app needs: vehicle data, vehicle commands, charging commands, and offline access for token refresh.

We never ask for, receive or store a user's Tesla password. Users can revoke access at any time — from inside TeslaWatch, or from their Tesla account directly.

Open-source and third-party components

The backend runs on Cloudflare Workers with no runtime dependencies — no third-party code executes on the server path. The apps are built with Apple's own frameworks (SwiftUI, WatchConnectivity, CoreBluetooth, CryptoKit, App Intents, UserNotifications).

Where an open-source component is added, it will be listed here with its licence.

Export compliance

TeslaWatch uses encryption solely for authentication and standard secure transport (HTTPS/TLS, and AES-GCM for tokens at rest). It qualifies for the exemption in Category 5 Part 2 of the US Export Administration Regulations, and is declared accordingly to Apple.

Accessibility

We build to WCAG 2.1 AA principles and Apple's accessibility guidance. See the accessibility statement.

Reporting a security issue

Email security@teslawatch.app, or see security.txt. This app can unlock a vehicle: if you have found something that lets one person reach another person's car, say so in the first line and it will be treated as the highest priority. We will not pursue legal action against good-faith research that respects user privacy and does not degrade the service.

Copyright

Documents

Privacy PolicyWhat is collected, retention, and your GDPR/CCPA rights

Terms of UseThe agreement, subscription terms and liability

AccessibilitySupport for VoiceOver, Dynamic Type and more

Security contactsecurity.txt (RFC 9116)