Poolside Control privacy

Local and remote connections

Poolside Control connects directly to your ScreenLogic adapter on your local network, or uses Pentair’s remote service when configured. Pentair receives the system identifier and authentication exchange needed to connect. No Poolside account is required.

Optional independent watch bridge

When you enable independent Apple Watch access, each watch request sends your ScreenLogic system name, remote password, selected control names, and requested action over HTTPS to the InnCommand bridge at apps.inncommand.com. The bridge uses the password in memory to authenticate with Pentair, reads equipment status, and relays the requested command. For independent watch requests, it does not save passwords or request bodies. Equipment readings are retained only when you opt in to Spa Alerts, as described below. Short-lived request identifiers and system identifiers are retained in memory to prevent duplicate commands and overlapping operations. Request IP addresses are used in memory for rate limiting. Standard website logs may record IP address, endpoint, time, and HTTP status, but not request bodies or passwords. Equipment commands are not queued.

Optional Spa Alerts

Spa Alerts are off by default. When you turn on Spa runtime alerts in Settings, a consent popup explains the information shared with our server. Choose Agree to continue enabling alerts or Cancel to leave them off. You can select your reminder delay and turn alerts off at any time.

When you enable Spa Alerts, our server stores your ScreenLogic device ID, equipment names and statuses, pump and light schedules, pool time zone, command and observation times, reminder delay, notification registration and enrollment authorization. These data are used to synchronize and deliver your reminders through Apple Push Notification service. Your pool password is never stored for reminders. Push tokens are encrypted with a service-restricted key. Reports are matched by ScreenLogic device ID across opted-in installations, including users with different Apple accounts. Each iPhone or iPad must opt in separately; its paired watch follows that choice. Devices that have not opted in do not contribute status or schedules to reminders.

Choose 15, 30, 45, 60 or 90 minutes, 2 hours or 3 hours. The server sends a reminder for Spa heat, Spa mode or Spa jets after the selected time if no off command or off status has been reported. Known schedule stop times suppress reminders; they do not prove equipment stopped. Our server never polls Pentair for alerts. Changes outside Poolside are detected only when a connected, opted-in device reads and shares fresh status. Unreported changes and schedule overrides can make reminders inaccurate. Equipment is never turned off automatically.

Turning alerts off stops that device’s sharing for Spa Alerts, removes its push token and cancels its reminders. Other opted-in installations for the same pool may continue sharing and receiving reminders. Shared pool statuses, schedules and runtime records are deleted when the last installation disables alerts. A registration identifier and a protected verification value may remain to recognize your device if you enable alerts again; its push token is removed. Previously shared pool data may remain while another installation is opted in. Disable alerts before uninstalling; removing the app alone does not cancel enrollment. Contact support if you lose access to an enrolled device. No passwords or push tokens are included in application logs.

Demo Mode

Demo Mode uses simulated equipment and does not connect to a physical pool. If you opt in to Spa Alerts while using Demo Mode, simulated equipment names, statuses, schedules, reminder settings, and notification registration are sent to our server to provide real push reminders. Demo records are isolated by installation instead of shared with other users of the demo device ID. Turning demo alerts off stops this sharing and removes the associated push token and reminders.

Settings on your device

The app stores your adapter address, chosen pool time zone, jets circuit selection, optional circuit visibility, temperature display units, and display names on your device. Controller responses are held in app memory while in use. Pump and light schedules, temperature targets, and clock changes are saved on your pool controller. Removing the app does not remove schedules stored on the controller.

Paired Apple Watch and credentials

Remote passwords are stored in each device’s Keychain with device-only protection and become accessible after the first unlock following a restart. If you opt in to independent watch control, Apple’s Watch Connectivity service transfers remote setup to your paired watch and may retain a pending transfer until it is delivered. Otherwise, the watch sends commands through the paired iPhone. Equipment status and chosen display names are shared with the watch. Schedules and controller-clock data are never shared with it. Removing the saved password on iPhone sends a disabling update to the watch; the watch must receive that update to remove its saved setup.

Permissions and tracking

Local Network permission allows communication with your adapter. Optional notification permission allows spa runtime alerts. Poolside Control does not request location, contacts, camera, or microphone access. It includes no advertising, tracking SDK, or third-party analytics. Your operating system’s backup settings may include app preferences in device backups.

TestFlight and support

Apple may collect diagnostics or feedback when you use TestFlight under Apple’s policies. If you contact support, we receive the information you send and use it to respond. Do not send pool remote-access credentials or passwords.

This website

This website serves app information and screenshots without advertising or analytics scripts. The hosting server may retain standard request logs, such as IP address, requested page, and request time, for site operation and security.

Contact

For privacy questions, use our contact form.