privacy
policy.

1. information we collect

Account and profile information. When you create an account, we collect your name, email address, phone number (if you use phone sign-in), and authentication credentials. If you sign in with Google, we receive your Google profile information (name, email, profile photo). We store your user type (collector or host/donor), display name, and any profile photo you upload.

Location data. We collect your device location when you grant permission, used to show nearby pickup jobs, calculate distances, enable navigation, and sort jobs by proximity. Location is collected only when the app is in use ("when in use" permission). We also store address and geographic coordinates (latitude/longitude) for pickup posts you create.

Pickup and job data. When you post a pickup, we collect the address, bottle count, schedule, notes, tier (residential/bulk/commercial), recurring status, and optionally photos of bottles or the pickup location. When you claim or complete a pickup, we record the job details, bottle count, earnings, ratings, and completion status. We may store proof-of-pickup photos (base64-encoded) for verification.

Activity and usage data. We collect transaction history (earnings, bottle counts, dates), rating and review data, leaderboard rankings, impact stats (CO₂ saved, trees equivalent), and dispute records. We use Google Maps/Geocoding APIs to convert addresses to coordinates and vice versa.

Device and technical data. We may collect device type, operating system, app version, and push notification tokens (FCM) for delivering real-time alerts about new posts, claimed pickups, and completions.

2. how we use your information

We use your data to: operate and maintain the Service; match collectors with hosts; display jobs on a map with distances; process claims, completions, and payouts; calculate and display impact metrics; send push notifications (new posts nearby, post claimed, post completed); improve reliability scores and ratings; resolve disputes; geocode addresses; store profile photos and pickup verification images; and comply with legal obligations.

3. data storage and third parties

Firebase. We use Firebase (Authentication, Firestore) for account management and data storage. User profiles, jobs, pickups, and related data are stored in Firestore. Authentication is handled by Firebase Auth (email/password, phone, Google Sign-In).

Google services. We use Google Maps Geocoding API for address-to-coordinate conversion. Sign-in with Google is handled by Google Sign-In SDK. Data processed by Google is subject to Google's Privacy Policy.

Local storage. Some data (e.g., wallet transactions) may be cached locally on your device using iOS storage (UserDefaults, Documents directory) for performance.

4. data sharing and disclosure

We share limited information as needed to operate the Service: job details (including address and coordinates) are visible to collectors browsing nearby posts; your name and rating may be shown to matched hosts/collectors; leaderboard data (total bottles, ratings) may be visible to other users. We do not sell your personal information. We may disclose data if required by law, to protect rights or safety, or in connection with a merger or acquisition.

5. your choices and rights

You can disable push notifications in your device settings or within the app. You can limit location access or revoke it in iOS Settings. You may update your profile (name, photo) in the app. You can request account deletion through the app (Delete Account) or by contacting us. You may request access to, correction of, or deletion of your data via the contact form. California and other jurisdictions may afford additional rights (access, portability, opt-out of sale, non-discrimination).

6. data retention

We retain your account and activity data for as long as your account is active. After account deletion, we will delete or anonymize your data within a reasonable period, except where retention is required by law or for dispute resolution.

7. security

We use industry-standard practices to protect your data, including Firebase security rules, secure authentication, and encrypted connections. No method of transmission or storage is 100% secure; you use the Service at your own risk.

8. children

The Service is not intended for users under 18. We do not knowingly collect data from children. If you believe we have collected data from a minor, please contact us to request deletion.

9. international transfers

Your data may be processed in the United States or other countries where our service providers operate. By using the Service, you consent to such transfer and processing.

10. changes

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the "last updated" date. Continued use of the Service after changes constitutes acceptance.

contact us

For privacy questions, data requests, or concerns, use the contact form or reach out through the safety page.