Privacy Policy

Last updated 6 July 2026 — Version 2026-07-06

This Privacy Policy for Tjok Meuwissen, doing business as ClimateCart ("we", "us", "our"), explains how we access, collect, store, use, and share ("process") your personal information when you use our mobile application ClimateCart (the "Services").

ClimateCart is a mobile application that estimates the environmental footprint of grocery purchases. Users scan or upload their grocery receipts, which are processed via optical character recognition to identify products and calculate an estimated carbon footprint based on the Agribalyse 3.1 database. Users may optionally create an account to save their scan results.

Questions or concerns? Contact us at contact@climatecart.app.

1. Summary of key points

• What we collect from you: your email address and hashed password (at signup); your language preference; the results of receipt scans you choose to save.
• What we do not store: receipt images and PDFs you upload for scanning, and the text extracted from them, are processed transiently and discarded immediately after processing. We do not store IP addresses, device identifiers, location data, or analytics events.
• Sensitive information: we do not process special-category (sensitive) personal data as defined in Art. 9 GDPR.
• Sub-processors: Supabase (Frankfurt, EU) for authentication and database, Render (Frankfurt, EU) for backend hosting, and Google Cloud Vision (United States) for optical character recognition.
• Your rights: you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to lodge a complaint with a supervisory authority.
• Retention: we keep your data only for as long as your account exists. You can delete individual receipts or your entire account from within the app at any time.

2. What information we collect

2.1 Information you provide directly

When you create an account and use ClimateCart, we collect and store the following personal information:

• Your email address (used as your account identifier and for password-reset emails).
• Your password, stored only as a hash by our authentication provider.
• Your language preference (Dutch, French, or English).
• The saved results of your receipt scans, including the receipt date, an optional name you assign to the receipt, the product-level breakdown, the calculated total carbon footprint, and optionally your household size. This information is stored only if you choose to save a scan while signed in.
• Timestamps recording when you accepted this Privacy Policy and our Terms of Use, and the version identifiers of the versions you accepted.

2.2 Information we process transiently but do not store

When you scan or upload a receipt:

• The receipt image or PDF is uploaded to our backend and forwarded to Google Cloud Vision for optical character recognition.
• The extracted text is used by our matching pipeline to identify products.

Neither the receipt image nor the extracted text is stored on our servers or by our sub-processors after the scan completes. Only the calculated results are stored, and only if you are signed in and choose to save them.

2.3 Information automatically collected

We do not use analytics services, tracking pixels, cookies, or advertising identifiers. We do not collect or store your IP address, device identifiers, operating system version, or location data.

The only automatically-generated data we retain is a per-user counter of API requests, used solely to enforce fair-use rate limits and prevent abuse of our OCR quota. This counter contains no personally identifying information beyond your account identifier and is deleted when you delete your account.

2.4 Mobile device permissions

ClimateCart requests the following permissions on your Android device:

• Camera — required to photograph grocery receipts.
• Storage / file access — required to let you upload receipt PDFs from your device.

These permissions are used only for the specific action you take (photographing or picking a file). You can revoke either permission at any time in your Android system settings.

3. How we use your information

We process your personal information only for the following purposes:

• To provide the Services: authenticating your account, running the OCR and footprint-calculation pipeline on receipts you submit, storing and retrieving results you choose to save.
• To respond to inquiries: when you contact us at contact@climatecart.app.
• To protect the Services: preventing abuse of our infrastructure and OCR quota via per-user rate-limiting.
• To comply with legal obligations: retaining timestamps of your acceptance of this Privacy Policy and our Terms of Use as evidence of consent (Art. 7 GDPR).

We do not use your data for advertising, marketing, profiling, or automated decision-making with legal or similarly significant effects.

4. Legal bases for processing (GDPR)

Under the EU GDPR and UK GDPR, we rely on the following legal bases:

• Performance of a contract (Art. 6.1.b) for account creation, authentication, receipt processing (OCR and matching), and saving your scan results.
• Legitimate interests (Art. 6.1.f) for per-user rate-limiting, which is necessary to protect the availability and cost-integrity of the Services against abuse.
• Legal obligation (Art. 6.1.c) for recording your acceptance of this Privacy Policy and our Terms of Use, which we are required to document under Art. 7 GDPR.

5. Sub-processors

We share personal information only with the following sub-processors, each of which acts on our documented instructions under a data processing agreement:

• Supabase (Supabase Inc., hosted in Frankfurt, Germany) — provides authentication and database hosting. Data processed: email address, hashed password, language preference, saved scan results, consent timestamps and versions, per-user rate-limit counters.
• Render (Render Services, Inc., hosted in Frankfurt, Germany) — provides backend application hosting. Data processed transiently: receipt image content and extracted text during the scan flow.
• Google Cloud Vision (Google LLC, processed in the United States) — provides optical character recognition. Data processed transiently: receipt image content only.

We do not sell your personal information. We do not share it with advertisers, data brokers, or analytics providers.

6. International data transfers

Our primary infrastructure is located in Germany, within the European Union. Personal data stored by ClimateCart does not leave the EU.

Receipt images are transiently transferred to the United States for optical character recognition by Google Cloud Vision. This transfer is protected by the EU-US Data Privacy Framework, under which Google LLC is self-certified with the U.S. Department of Commerce. As an additional safeguard, Google's Cloud Data Processing Addendum incorporates the European Commission's Standard Contractual Clauses.

7. Retention

We keep your personal information only for as long as your account exists:

• Account records (email, hashed password, language, consent timestamps): until you delete your account.
• Saved receipt scans: until you delete the individual receipt or your account.
• Rate-limit counters: deleted automatically when you delete your account.
• Receipt images and extracted text: not retained at all — discarded immediately after each scan.

You can delete individual saved receipts from the receipt-detail screen, or your entire account from the settings screen, at any time. Deletion is immediate and irreversible.

8. Security

We apply the following technical and organisational measures to protect your personal information (Art. 32 GDPR):

• All data transmission uses HTTPS with TLS encryption.
• Passwords are hashed by our authentication provider — we never store or see your plaintext password.
• Backend endpoints are protected by JWT-based authentication.
• Row-level security policies ensure that each user can access only their own data in our database.
• Per-user and per-IP rate limits protect against abuse.
• Receipt images and OCR text are processed in memory and never written to persistent storage.
• Our primary data-processing infrastructure is located within the EU.

No security measure is perfect. If we become aware of a personal data breach affecting your rights, we will notify the Belgian supervisory authority within 72 hours and, where required, notify you directly.

9. Children

ClimateCart is not directed at children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us at contact@climatecart.app and we will take reasonable steps to delete it.

10. Your rights under the GDPR

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights regarding your personal data:

• Right of access (Art. 15) — obtain a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — correct inaccurate or incomplete data.
• Right to erasure (Art. 17) — request deletion of your data.
• Right to restriction (Art. 18) — request that we limit how we process your data.
• Right to data portability (Art. 20) — receive your data in a machine-readable format.
• Right to object (Art. 21) — object to processing based on legitimate interests.
• Right not to be subject to solely automated decision-making (Art. 22). We do not make automated decisions with legal or similarly significant effects about you.

You can exercise the rights to rectification and erasure directly in the app: edit any saved receipt, delete individual receipts, or delete your entire account from the settings screen. For access and portability requests, please email us at contact@climatecart.app. We will respond within 30 days (Art. 12.3 GDPR).

Right to complain. If you believe we have processed your personal data unlawfully, you have the right to lodge a complaint with the Belgian supervisory authority, the Gegevensbeschermingsautoriteit / Autorité de protection des données (gegevensbeschermingsautoriteit.be), or with the supervisory authority in your country of residence.

11. Do Not Track

ClimateCart is a native mobile application and does not track your browsing activity. We do not use cookies, web beacons, or any browser-based tracking technology, so there is nothing for a Do Not Track signal to affect.

12. Third-party links

ClimateCart contains a link to Ko-fi, an external donation platform we use to accept optional donations. When you tap that link, you leave the ClimateCart app and Ko-fi's own privacy policy applies to your interaction with them. We do not share your ClimateCart account data with Ko-fi.

13. Updates to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest version. If we make material changes, we will notify you within the app on your next launch and require you to acknowledge the new version before continuing.

14. Contact

The data controller responsible for your personal information is: