← Back to Home

Privacy Policy for EcoSort

Effective Date: June 24, 2025

Last Updated: October 26, 2025

1. Introduction

Welcome to EcoSort! This Privacy Policy describes how Arsenii Koriaigin ("we," "us," or "our") collects, uses, processes, and safeguards your information when you use our mobile application, EcoSort (the "App").

EcoSort helps users identify the correct waste disposal category based on photos and provides recommendations according to local recycling rules in supported countries: Spain, Portugal, Italy, Austria, France, Germany, and the Netherlands.

We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR). By using EcoSort, you agree to the practices described in this Privacy Policy.

This Privacy Policy is available in multiple languages within the App.

2. Data Controller

The data controller responsible for your personal data is:

Arsenii Koriaigin
akor@ecosort.app
Barcelona, Spain

3. What Information We Collect and Why

We collect minimal information necessary to operate and improve the App.

a) Image Data (Photos from Camera or Gallery)

  • How it's collected: The App captures photos using your device's camera or allows you to select images from your device's gallery when you choose to use the image classification feature.
  • What is collected: The image file (temporarily stored as an XFile object).
  • Processing: Images are processed on your device to be resized and compressed before being sent for AI analysis using Google's API.
  • Purpose: To identify the correct waste disposal bin and provide local recycling instructions.
  • Storage & Retention: Images are not permanently stored on your device or our servers. They are used only for the immediate classification request and then discarded.
  • Legal Basis for Processing: Your explicit consent. You are required to acknowledge this Privacy Policy before accessing camera functionalities for the first time.

b) User Account and Authentication Data

  • How it's collected: When you register, sign in, or continue as an anonymous user.
  • What is collected: uid, email (if provided), emailVerified, isAnonymous, isPro, monthScanCount, ScanCount, monthScanLimit, createdAt, firstScanMonthPeriod, lastScanMonthPeriod, proStartMonthPeriod, proLastMonthPeriod, proSubscriptionsCount, and optionally sex and dateOfBirth.
  • Purpose: To manage user access, scan limits, and premium features, and to provide a consistent experience across sessions.
  • Storage: Stored securely in Firebase Firestore.
  • Retention: Until account deletion or 12 months of inactivity.
  • Legal Basis for Processing: Performance of a contract (to provide App functionality), legitimate interest (to maintain fair usage), and consent (for optional data).

c) Scan Records

  • How it's collected: Automatically when you perform a classification.
  • What is collected: userId, scanId, createdAt, scan_country, scan_language, bin_color_english, and additional_instructions returned by the AI.
  • Purpose: To display results, manage usage limits, and improve system reliability.
  • Storage: Stored in Firestore; used for service analytics and troubleshooting, not for profiling.
  • Retention: Up to 12 months, after which data may be anonymized.
  • Legal Basis for Processing: Legitimate interest and performance of a contract.

d) Language and Country Settings

  • How it's collected: When you choose your preferred language or country in the App.
  • What is collected: Language code (e.g., 'en', 'es', 'fr', 'ru', 'zh') and country code (e.g., 'ES', 'PT', 'IT').
  • Storage: Stored locally on your device.
  • Purpose: To display localized content and recommendations relevant to your region.
  • Retention: Persist until you change it or clear app data.
  • Legal Basis for Processing: Legitimate interest in usability and localization.

e) API Usage Tracking (Rate Limiting)

  • How it's collected: Automatically when you use the classification feature.
  • What is collected: Local counters for number of scans and timestamps for each usage period.
  • Storage: Stored locally on your device.
  • Purpose: To prevent abuse and maintain fair use limits.
  • Retention: Automatically reset after the relevant time period (minute/day).
  • Legal Basis for Processing: Legitimate interest in maintaining service stability.

4. How We Use Your Information

We use collected data to:

  • Provide App functionality (classification, recommendations, account management).
  • Maintain fair use limits and prevent misuse.
  • Improve reliability and ensure compliance with applicable recycling regulations.
  • Comply with legal obligations.

We do not sell or share your personal data for advertising or marketing purposes.

5. Data Sharing and Third Parties

a) Firebase (Google Cloud Platform)

We use Firebase Authentication, Firestore Database, and Firebase Cloud Functions to securely manage user accounts, process classification requests, and handle backend logic. Google acts as a data processor under our instructions and in accordance with GDPR.

Cloud Functions & Logging: Firebase Cloud Functions may temporarily log technical information such as execution time, error codes, and IP address in an anonymized form for debugging and security monitoring. These logs are automatically deleted within 30 days.

Learn more: https://firebase.google.com/support/privacy

b) Google's AI API

To provide image classification, we send compressed images to Google's AI API. No personal identifiers (UID, email, IP address) are included. Google acts as a data processor, handling requests per our instructions and applicable privacy agreements.

c) Other Third Parties

We do not share your personal data with other third parties except as required by law or to comply with legal obligations.

6. Data We DO NOT Collect

EcoSort does not collect or store:

  • GPS or precise location data.
  • Device identifiers (IMEI, MAC address, advertising ID).
  • Behavioral analytics or tracking cookies.
  • Contacts, messages, or other personal data stored on your device.

We do not use personalized tracking or advertising SDKs.

7. Data Retention

We retain your data only as long as necessary to fulfill the purposes outlined in this Privacy Policy:

  • Image Data: Not stored.
  • User Account Data: Until account deletion or 12 months of inactivity.
  • Scan Records: Up to 12 months, then anonymized.
  • Cloud Function Logs: Up to 30 days, automatically deleted.
  • Language and API Tracking Data: Stored locally until you clear app data.

8. Data Security

We implement technical and organizational measures to protect your data, including HTTPS encryption, Firebase security rules, and access controls. Image processing occurs on your device before transmission. However, no method of data transmission over the Internet is 100% secure.

9. Data Processing Location

  • On-device: language and country preferences, rate limit tracking, and image preprocessing.
  • Firebase (Google Cloud): account data, scans, and backend functions.
  • Google AI API: image classification.

Data may be processed on servers located outside your country, including in the European Union and the United States.

10. International Data Transfers

Data processed through Firebase and Google AI may be transferred outside the European Economic Area (EEA). Google applies Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure GDPR compliance.

11. Your Rights Under GDPR

You have the right to:

  • Be informed about how your data is used.
  • Access and obtain a copy of your data.
  • Rectify inaccurate or incomplete data.
  • Request erasure of your data ("right to be forgotten").
  • Restrict or object to certain processing.
  • Request data portability.
  • Withdraw consent at any time.

To exercise your rights, contact us at akor@ecosort.app. We will respond within one month as required by GDPR.

12. Children's Privacy

EcoSort is not intended for users under the age of 16. We do not knowingly collect data from children. If we become aware that a child has provided personal information, we will delete it promptly.

13. Disclaimer of Liability

EcoSort provides recycling guidance based on publicly available and municipal waste-sorting rules for supported countries. While we strive for accuracy, we cannot guarantee the completeness or correctness of all recommendations. EcoSort should not be relied upon as a legally binding or official source. Always verify with your local waste authority when in doubt.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be posted within the App and indicated by an updated "Last Updated" date. Continued use of the App after changes constitutes acceptance of the revised Privacy Policy.

15. Contact Us

If you have any questions, concerns, or data-related requests, please contact us:

akor@ecosort.app

Thank you for using EcoSort!