Privacy Policy

CO2Mate ("we", "our", or "the app") is operated by DJUMP, MB, a company registered in Lithuania. This Privacy Policy explains how we collect, use, and protect your information when you use CO2Mate. By using the app, you consent to the practices described here.

1. Information we collect

2. Information we do not collect

• No payment or credit-card information — all payments processed by Apple or Google through RevenueCat.
• No location data, contact lists, or photos.
• No third-party advertising IDs or device fingerprints.
• We never sell, rent, or share carbon-footprint data with anyone.

3. How we use your information

• Provide core functionality (logging, calculation, reports, comparisons).
• Authenticate your account and sync data across devices.
• Store activity history so you can see trends.
• Send the push notifications you opted into.
• Anonymously analyze usage patterns to improve the experience.

4. Legal basis for processing (GDPR)

We process your personal data on the following legal grounds:

• Consent — when you create an account and opt into notifications.
• Contract performance — processing necessary to provide the tracking service you requested.
• Legitimate interest — anonymous analytics to improve app performance and experience.

5. Storage and security

Data is stored on Supabase with row-level security (RLS) — only you can access your own records. All connections use HTTPS. We follow industry-standard practices and do not sell or share personal data for marketing.

6. Data retention

We retain your data while your account is active. On account deletion, all associated data (activity logs, profile, settings) is permanently deleted from our servers. Anonymous, aggregated analytics data may be retained for product improvement.

7. Third-party services

• Supabase — authentication, database hosting, EU region.
• RevenueCat — subscription management; processes payments through Apple / Google.
• PostHog — anonymous usage analytics.
• Apple / Google — OAuth sign-in providers and payment processing.
• Resend — transactional email delivery (signup confirmations, contact-form replies).

8. International data transfers

Your data is primarily stored in the EU via Supabase. Where a service provider processes data outside the European Economic Area, such transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission to ensure an adequate level of data protection.

9. Your rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Right of access — request a copy of your personal data.
• Right to rectification — correct inaccurate personal data.
• Right to erasure — request deletion of your personal data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to restrict processing — request limitation of data processing.
• Right to withdraw consent — at any time, without affecting prior processing.

The app's Settings include in-app account deletion, which permanently removes all carbon activity logs and personal information. For any data-related request, email start@djump.io. You also have the right to lodge a complaint with a supervisory authority.

10. Children's privacy

CO2Mate is not intended for children under 14 (the digital age of consent in Lithuania). We do not knowingly collect personal data from children under 14. If you believe a child under 14 has provided personal information, contact us and we will remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by updating the effective date above.

12. Contact