Privacy Policy

Introduction

At CarbonCoach, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application. Please read this policy carefully.

By using CarbonCoach, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

Information We Collect

Personal Information

When you register for an account, we collect:

• Account Information: Name, email address, password (encrypted)
• Profile Data: Optional profile picture, preferences, dietary choices, transport preferences
• Authentication: If you sign in with Google, we receive your name, email, and profile picture from Google

Activity Data

When you use CarbonCoach, we collect:

• Logged Activities: Transport trips, food consumption, energy usage, shopping purchases
• Emissions Data: Calculated carbon footprint based on your activities
• Gamification Data: XP earned, level, badges unlocked, streaks, challenges accepted
• Usage Analytics: Pages visited, features used, time spent (anonymized)

Technical Information

We automatically collect:

• Device Information: Browser type, device type, operating system
• Log Data: IP address, access times, pages viewed
• Cookies: Session cookies for authentication and preferences

How We Use Your Information

We use the information we collect to:

• Provide the Service: Calculate emissions, generate insights, track progress
• Personalize Experience: Provide coaching tailored to your activities and preferences
• Improve Our Service: Analyze usage patterns to enhance features and fix bugs
• Communicate with You: Send important updates, notifications, and support responses
• Prevent Fraud: Detect and prevent unauthorized access or malicious activity
• Comply with Legal Obligations: Respond to legal requests and prevent illegal activity

How We Share Your Information

We do NOT sell your personal information to third parties. Period.

We may share your information only in the following limited circumstances:

• With Your Consent: When you explicitly authorize us to share your data
• Service Providers: With trusted vendors who help us operate our service (hosting, analytics) under strict confidentiality agreements
• Aggregate Data: We may share anonymized, aggregated statistics (e.g., "CarbonCoach users have logged 2,500 tons of CO₂") that cannot identify you
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In the event of a merger, acquisition, or sale, your data may be transferred (you will be notified)

Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted between your device and our servers is encrypted using HTTPS/TLS
• Password Security: Passwords are hashed using bcrypt (never stored in plain text)
• Database Security: Access to our database is restricted and monitored
• Regular Audits: We conduct security reviews and update our practices regularly

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your Privacy Rights

You have the following rights regarding your personal data:

• Access: Request a copy of all personal data we hold about you
• Correction: Update or correct inaccurate information via your profile settings
• Deletion: Request deletion of your account and all associated data
• Export: Download your data in a portable format (CSV)
• Opt-Out: Unsubscribe from marketing emails (account notifications may still be sent)
• Withdraw Consent: Revoke previously granted permissions

To exercise these rights, go to Profile → Settings or contact us atsupport@tenreclabs.com

Data Retention

We retain your information for as long as your account is active or as needed to provide services. Specifically:

• Active Accounts: Data retained indefinitely while account is active
• Deleted Accounts: All personal data permanently deleted within 30 days of deletion request
• Backup Data: May persist in backups for up to 90 days but cannot be accessed
• Legal Requirements: Some data may be retained longer if required by law

Cookies and Tracking

We use cookies and similar technologies to:

• Authentication: Keep you logged in across sessions
• Preferences: Remember your settings and preferences
• Analytics: Understand how you use our app (anonymized)
• Performance: Optimize app speed and functionality

You can control cookies through your browser settings. However, disabling cookies may affect certain features of CarbonCoach.

Third-Party Services

CarbonCoach integrates with the following third-party services:

• Google OAuth: For authentication (governed by Google Privacy Policy)
• Vercel: For hosting and deployment
• Supabase: For database services (when deployed)

These services have their own privacy policies. We encourage you to review them.

Children's Privacy

CarbonCoach is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately atsupport@tenreclabs.com.

International Users

CarbonCoach is operated from the United States. If you are accessing our service from outside the US, please be aware that your information may be transferred to, stored, and processed in the United States.

By using CarbonCoach, you consent to the transfer of your information to the United States and agree to be governed by US privacy laws.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Significant changes will be communicated via:

• In-app notification
• Email notification (for material changes)
• Banner on our website

Continued use of CarbonCoach after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

We will respond to your inquiry within 30 days.

Additional Rights (GDPR & CCPA)

For EU Users (GDPR)

If you are in the European Economic Area, you have additional rights under GDPR:

• Right to be informed about data processing
• Right to data portability
• Right to object to processing
• Right to restrict processing
• Right to lodge a complaint with a supervisory authority

For California Users (CCPA)

If you are a California resident, you have additional rights under CCPA:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information (we don't sell data)
• Right to access your personal information
• Right to equal service and price, even if you exercise your privacy rights