Privacy Policy for EcoSort.Barcelona
- Effective Date: June 24, 2025
- Last Updated: June 24, 2025
1. Introduction
Welcome to EcoSort.Barcelona! This Privacy Policy describes how Arsenii Koriaigin (“we,” “us,” or “our”) collects, uses, processes, and safeguards your information when you use our mobile application, EcoSort.Barcelona (the “App”).
We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy has been compiled to comply with the General Data Protection Regulation (GDPR) and to inform you of your rights and our responsibilities.
By using the EcoSort.Barcelona App, specifically by acknowledging this Privacy Policy before using features that process personal data (like the camera), you agree to the collection and use of information in accordance with this policy.
This Privacy Policy is available in multiple languages within the App.
2. Data Controller
The data controller responsible for your personal data is:
Arsenii Koriaigin
akor@ecosort.app
Barcelona, Spain
We collect minimal information necessary to provide and improve our App’s functionality. The types of data collected are:
a) Image Data (Photos from Camera or Gallery)
- How it’s collected: The App captures photos using your device’s camera or allows you to select images from your device’s gallery when you choose to use the image classification feature.
- What is collected: The image file (temporarily stored as an
XFile
object).
- Processing: Images are processed on your device to be resized and compressed before being sent for analysis.
- Purpose: To provide you with an AI-powered classification or rating related to the content of the image.
- Storage & Retention: Images are not permanently stored on your device or our servers. They are used only for the immediate classification request and then discarded.
- Legal Basis for Processing: Your explicit consent. You are required to acknowledge this Privacy Policy before accessing camera functionalities for the first time.
b) Language Preferences
- How it’s collected: When you set or change your preferred language within the App.
- What is collected: Your chosen language code (e.g., ‘en’, ‘es’, ‘fr’, ‘ca’).
- Storage: This preference is stored locally on your device.
- Purpose: To display the App’s content in your preferred language.
- Retention: This preference persists on your device until you change it or clear the App’s data.
- Legal Basis for Processing: Our legitimate interest in providing a user-friendly and accessible experience, and your implied consent when selecting a language.
c) API Usage Tracking Data (for Rate Limiting)
- How it’s collected: Automatically tracked when you use the image classification feature.
- What is collected: A counter for API requests made within a minute(a day) and the timestamp of the first request in that minute (day).
- Storage: This data is stored locally on your device.
- Purpose: To manage API usage and prevent abuse of the service by applying rate limits.
- Retention: This data is automatically reset when the respective time periods (minute or day) expire.
- Legal Basis for Processing: Our legitimate interest in maintaining the stability, security, and fair use of our service and the third-party API.
We use the collected information solely for the following purposes:
- To provide App functionality: Classifying images as requested by you and displaying the App in your chosen language.
- To maintain and protect our services: Implementing rate limits to ensure service availability and prevent abuse.
- To comply with legal obligations.
5. Data Sharing and Third Parties
a) Google’s AI API
To provide the image classification feature, we send compressed image data you provide to Google’s AI API.
Important Considerations:
- No other personal identifiers are sent with these requests. We do not send your IP address, device identifiers, or any other personal information to Google’s AI API through our App, beyond the image.
- Google acts as a data processor for this information, meaning they process the data on our behalf and according to our instructions (and their own terms of service and privacy policies for the AI API).
- We encourage you to review Google’s own privacy policies to understand how they handle data.
b) Other Third Parties
We do not share your personal data with any other third parties, except as required by law.
6. Data We DO NOT Collect
We are committed to data minimization. EcoSort.Barcelona does not collect:
- Personal identifiers (e.g., name, email address, physical address beyond what you might voluntarily provide for contact).
- User accounts (you can use the App without creating an account).
- Precise location data (GPS).
- Device identifiers (e.g., IMEI, MAC address).
- Detailed analytics or usage patterns beyond the aggregated API rate limiting counts.
7. Data Retention
We retain your data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
- Image Data: Not stored. Processed ephemerally for each request.
- Language Preference: Stored on your device until you change it or clear app data.
- API Usage Tracking Data: Automatically reset after the defined time period (minute/day) expires.
8. Data Security
We implement reasonable technical and organizational measures to protect the information we handle. Image processing (resizing, compression) happens on your device before any data is sent externally. However, please remember that no method of transmission over the internet or method of electronic storage is 100% secure.
9. Data Processing Location
- On-Device Processing: Image resizing and compression, language preference storage, and API rate limit tracking occur on your device.
- External Processing: AI-based image classification is performed by Google’s AI, which means the image data and prompt are processed on Google’s servers. These servers may be located outside of your country of residence.
10. International Data Transfers
When you use the image classification feature, your image data are transferred to Google’s servers, which may be located in countries outside the European Economic Area (EEA). Google employs measures like Standard Contractual Clauses (SCCs) to ensure that such transfers comply with GDPR requirements for data protection.
11. Your Rights Under GDPR
As a user in the European Union, you have the following rights regarding your personal data:
- The right to be informed: To know how your data is being processed (which this Policy aims to do).
- The right of access: To request a copy of the personal data we hold about you.
- The right to rectification: To request correction of inaccurate or incomplete data.
- The right to erasure (right to be forgotten): To request deletion of your personal data, under certain conditions.
- The right to restrict processing: To request the limitation of how we use your data, under certain conditions.
- The right to data portability: To receive your data in a structured, commonly used, and machine-readable format and to transmit it to another controller, under certain conditions.
- The right to object: To object to the processing of your data, under certain conditions (e.g., for direct marketing, or processing based on legitimate interests).
- Rights related to automated decision-making and profiling: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, except under certain conditions. (While our AI classification provides a rating, it should not produce legal or similarly significant effects without human oversight).
To exercise any of these rights, please contact us at the email address provided in Section 2. We will respond to your request within one month, as required by GDPR.
12. Children’s Privacy
EcoSort.Barcelona is not intended for use by children under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take steps to delete such information as soon as possible.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy within the App and updating the “Last Updated” date at the top of this Privacy Policy. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us!
Thank you for using EcoSort.Barcelona!