Privacy Policy of the "Greener Than Yours" Application

1. Data Controller

The controller of personal data processed in connection with the use of the Greener Than Yours application (hereinafter: the “Application”) is:

2. What Data We Process

The scope of processed data depends on the Application features used by the user.

Account data

• user identifier,
• email address,
• profile data.

Authentication is provided through Auth0.

Lawn-related data

• information about the lawn,
• lawn area,
• soil parameters,
• maintenance settings,
• information about planned and completed tasks, if the user records them in the Application.

User photos

The user may upload photos of the lawn for analysis by an artificial intelligence system.

Photos may be stored on the operator's servers in order to:

• perform the analysis,
• provide Application features related to lawn analysis,
• display analysis history.

Camera access

The Application requests access to the camera (android.permission.CAMERA) solely to allow the user to take a photo of the lawn for analysis purposes. Photos taken within the Application are sent to our servers solely to provide features such as lawn analysis and analysis history. The camera is used only following an action by the user and is not used for unrelated purposes.

Calendar access

If the user enables calendar synchronization, the Application may request access to the device calendar (android.permission.READ_CALENDAR, android.permission.WRITE_CALENDAR or corresponding iOS permissions) in order to:

• display calendars available for selection on the device,
• create, update and delete lawn-care events in the calendar selected by the user,
• store synchronization settings and event mapping data locally on the device.

Calendar synchronization is optional and operates only following an explicit action by the user. We do not use this permission to monitor unrelated calendar activity.

Notification data

If the user enables notifications, the Application may process data required to deliver in-app notifications and push notifications, including:

• device push token,
• device platform, Application version and language settings,
• notification preferences, such as enabled notification types and preferred delivery time,
• notification history stored in the Application.

Push notifications are optional and are enabled only following an action by the user and, where required by the operating system, after the relevant device permission has been granted.

Location data

The Application may process a location entered by the user, for example a city or postal code.

This data is used to:

• present weather data,
• adapt lawn-care recommendations.

The Application does not use automatic GPS tracking.

3. Purposes and Legal Bases for Processing

Providing services available in the Application

Account data, lawn-related data and other data provided or submitted by the user are processed to the extent necessary to provide the Application features, in particular to:

• create and manage the user account,
• maintain information and plans relating to lawn care,
• analyze lawn photos,
• generate recommendations and Assistant answers, and create lawn-care plans based on user data and Application rules,
• present weather data for the location indicated by the user,
• synchronize planned tasks with the device calendar if the user enables this feature,
• send notifications in accordance with the user's settings if the user enables this feature.

The legal basis for such processing is Article 6(1)(b) GDPR – processing necessary for the performance of a contract for the provision of electronic services or in order to take steps at the user's request prior to entering into such a contract.

Processing based on consent

If separate user consent is required for a particular type of data processing, the legal basis is Article 6(1)(a) GDPR. The user may withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Legitimate interests of the controller

To the extent necessary to ensure the proper and secure operation of the Application and to protect against abuse, data may be processed on the basis of Article 6(1)(f) GDPR, i.e. the legitimate interests of the controller.

Device system permissions, such as access to the camera, calendar or notifications, are used only to the extent necessary for the feature selected by the user and may be revoked in the device settings.

4. Voluntary Provision of Data

Providing data required to create and manage an account is necessary in order to use Application features that require an account. Failure to provide such data may make those features unavailable.

Providing other data, including lawn-related data, location, photos, and enabling access to the camera, calendar or notifications, is voluntary. Failure to provide particular data or permissions may result in the related Application feature being unavailable or unable to function properly.

5. Recipients of Data and Service Providers Supporting the Application

Data may be shared with entities supporting the operation of the Application only to the extent necessary to provide the relevant services, in particular:

• providers of cloud services and infrastructure used to operate the Application,
• the authentication provider Auth0,
• the artificial intelligence service provider OpenAI – to the extent necessary to analyze lawn photos and operate Assistant features, including answering user questions,
• the weather data provider WeatherAPI.com – with respect to location data required to retrieve weather data,
• Google Firebase / Firebase Cloud Messaging – for delivering push notifications and handling related technical identifiers,
• operators of Application distribution platforms such as Apple and Google, to the extent resulting from the use of those platforms.

6. Transfers of Data Outside the European Economic Area

In connection with the use of external service providers, in particular the OpenAI artificial intelligence services, data may also be processed outside the European Economic Area.

Transfers of data outside the European Economic Area take place only with due regard to the requirements of applicable data protection laws. Information about the basis for such transfers and the safeguards applied may be obtained by contacting the controller at contact@greenerthanyours.app.

7. Data Retention Period

Data is retained no longer than necessary to achieve the purpose for which it was collected.

• account data and data assigned to an account are generally stored for the period during which the account is used and services are provided through the Application,
• photos and analysis history may be stored for as long as necessary to provide the relevant features and history to the user in the Application,
• notification-related data is processed until the relevant settings are disabled, the device token is deactivated or there is no longer a need to use the data to deliver notifications,
• local calendar synchronization data may remain on the device or in the user's calendar until it is removed by the user or synchronization is disabled using an appropriate data-clearing option.

After the account is deleted, data assigned to the account is removed from active use in the service or anonymized. A limited scope of data may be retained where necessary for legal reasons, security, prevention of abuse or dispute resolution, for a period justified by the relevant purpose.

8. User Rights

Depending on the legal basis and manner of processing, the user has the right to:

• access their data and obtain a copy of it,
• rectify their data,
• erase their data,
• restrict processing,
• data portability, where the conditions set out in the GDPR are met,
• object to processing based on the legitimate interests of the controller,
• withdraw consent at any time where data is processed on the basis of consent, without affecting the lawfulness of processing carried out before the withdrawal.

The user also has the right to lodge a complaint with the competent supervisory authority, in particular with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), if they believe that their data is being processed in violation of applicable law.

9. Artificial Intelligence and Automated Decision-Making

The Application uses artificial intelligence to analyze photos and provide answers and recommendations through Assistant features. Lawn-care plans are created based on user data, current conditions and Application rules. These results are intended to provide informational support to the user.

The Application does not use these features to make solely automated decisions concerning the user that produce legal effects or similarly significantly affect the user within the meaning of Article 22 GDPR.

10. Account Deletion

The user may delete their account directly in the Application. Detailed account deletion instructions and information about data that is deleted or may be retained are available on the separate account deletion page.

If the user does not have access to their account, they may contact the controller at contact@greenerthanyours.app.

11. Contact Regarding Personal Data

To exercise their rights or for other matters related to personal data protection, users may contact:

contact@greenerthanyours.app

12. Changes to this Privacy Policy

This Privacy Policy may be updated in connection with the development of the Application, changes in the way data is processed or changes in applicable law. The current version of the Privacy Policy is made available on the Application website.