Privacy Policy

• TRASHTREK APP, razvoj sodobnih tehnologij, d.o.o., Ulica škofa Maksimilijana Držečnika 6, 2000 Maribor, Slovenija; registration number 7449887000, tax number 62670450.
• Contact for privacy questions and requests: info@trashtrekapp.com. We have not appointed a data protection officer because we are not required to.

• Account: email address, username and sign-in method (email, Google or Apple). Your password is stored by our sign-in provider Google Firebase in protected (hashed) form; we cannot access it. With Google sign-in we receive your email address and Google account identifier; we do not store the name or profile picture of your Google account. With Apple sign-in (iPhone) we receive your email address and Apple account identifier; we do not request your name. If you choose "Hide My Email", we receive a random Apple relay address that forwards messages to your real address.
• Public profile: username, profile and cover picture (if you upload them), bio, points, badges and activity statistics.
• Reports and cleanups: photos, description, type and amount of litter, exact location and time, and your username and profile picture. Photos are compressed on upload, which removes metadata (EXIF), including GPS coordinates and device details.
• Onboarding data (private): town or approximate location rounded to about 1 km, and your interests.
• Consents: the version of the terms you accepted, when you accepted them and your analytics choice.
• Analytics (only with your consent): app usage and device data and an approximate location derived from your IP address, via Google Analytics. It does not include your email address or username.
• Technical data: IP address and device details automatically received by our processors when you connect (Google Firebase, and Stadia Maps to show the map).
• Data on your device: for "Sign back in" the device remembers your username, email address and profile picture, only on the device. If you turn on fingerprint or face login, your password is encrypted in the device's secure storage (Android Keystore); biometric data never leaves the device and we never receive it.
• Data about other people: photos may accidentally show other people, vehicles or private property. Such content is not allowed by the rules and moderators reject or remove it (see section 9).

• Creating and managing your account, sign-in, email verification and password reset: performance of a contract (Art. 6(1)(b) GDPR).
• Showing your reports, cleanups and public profile to other users and awarding points: performance of a contract (Art. 6(1)(b)).
• Content moderation, abuse prevention and security: our legitimate interest in a safe and lawful platform (Art. 6(1)(f)).
• Handling reports of illegal content and complaints, and keeping proof of consent: legal obligations (Art. 6(1)(c)), in particular under the Digital Services Act (DSA).
• Approximate location and interests from onboarding (suggesting nearby actions): your consent (Art. 6(1)(a)); you can skip this step.
• Analytics to improve the app: your consent (Art. 6(1)(a)); you can withdraw it at any time (section 8).

• Public: your username, profile and cover picture, bio, points, badges and approved reports and cleanups with photos, exact location and time.
• Note: the exact location and time of a report are public. If you do not want your posts to reveal where you live or move, do not report spots right next to your home.
• Your email address, onboarding location and consents are never public.

• We do not sell your data and do not use it for advertising.
• Google Ireland Ltd. and Google LLC (Firebase Authentication, Cloud Firestore, Google Analytics): hosting, sign-in and analytics. The app database is located in a data centre in the EU.
• Stadia Maps, Inc. (USA): map tiles; it receives your IP address when the map is shown.
• Apple Distribution International Ltd. (Ireland): Sign in with Apple, if you choose it; when you delete your account we revoke the app's access to your Apple account.
• For transfers to the USA we rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
• We may disclose data to authorities where the law requires it.

• Account and profile data: as long as you have an account. If you do not use your account for 24 months, we warn you by email and then delete it.
• When you delete your account we delete your profile, email address, username, onboarding data and consents. Your approved reports and cleanups stay on the map anonymized, with no link to you.
• Rejected reports: at most 90 days.
• Analytics: 14 months.
• Email correspondence with you (support, requests): 2 years after the last message.

• You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interest.
• You can delete your account and all related data in the app (Profile → Delete account). For a copy of your data (portability) and other requests, email info@trashtrekapp.com; we reply within one month at the latest and may verify your identity first.
• You have the right to lodge a complaint with the supervisory authority: Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.

You can withdraw your consent to analytics and to the processing of your approximate location at any time by emailing info@trashtrekapp.com. Withdrawal does not affect processing before it.

If you, your vehicle or your property can be recognized in a photo in the app, you can ask us to remove it, even if you do not use the app. Email info@trashtrekapp.com with a link or description of the post; we handle such requests with priority.

The app is for people aged 16 or older. We do not knowingly collect data of younger people; if we learn of it, we delete the account.

• We make no decisions based solely on automated processing. Moderators decide on posts.
• We use appropriate technical and organizational measures: encrypted connections, database security rules that restrict private data to its owner, and collecting as little data as possible.

We tell you about material changes in the app and ask you to confirm them again before you continue using it.