Privacy Policy

1. Data Controller

BinBosh is a personal project. If you have any questions about this policy or your data, contact us at binboshdone@gmail.com.

2. What Data We Collect

• Anonymous user ID — generated by Firebase Anonymous Auth. No personal information is attached unless you choose to link an account.
• Postcode and street name — street-level only. We never collect house numbers or exact addresses.
• Bin collection schedules — schedules you create or adopt, including bin type, colour, collection day, and recurrence.
• Notification preferences — push notification tokens and reminder time settings.
• Email address — only if you voluntarily provide it for email notifications. This feature is not yet implemented.
• Feedback submissions — bug reports and data corrections you submit.
• Google Analytics data — page views and device type. No personal identifiers are collected.
• Payment data — if you subscribe to BinBosh Premium, we store your Stripe customer ID, subscription ID, subscription status, and subscription dates in your user profile. We do NOT store your card number, CVV, or full payment details — these are handled entirely by Stripe.

3. Legal Basis

We process data under the following legal bases under UK GDPR:

• Legitimate interest — for core functionality: storing schedules, sending bin day reminders, and improving the service.
• Consent — for optional features such as email notifications and analytics cookies. You can withdraw consent at any time.
• Contract — for processing payments when you subscribe to BinBosh Premium.

4. Cookies

• Firebase auth session cookie — essential for the app to function. No consent required.
• Google Analytics cookies — used for analytics (page views, device type).
• We do not use any advertising cookies.

5. Data Sharing

We do not sell your data to anyone. We share data only with:

• Firebase / Google — hosting, authentication, database, and analytics.
• Vercel — web hosting and serverless functions.
• Upstash — rate limiting to prevent abuse.
• Stripe — payment processing, only if you subscribe to BinBosh Premium. See Stripe's privacy policy.
• Resend — email delivery, only if you opt in to email notifications. Not yet active.

6. Data Retention

Anonymous data is kept while your account is active. You can delete your subscriptions at any time from the Settings page. Full account deletion is available on request by emailing binboshdone@gmail.com.

7. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (right to be forgotten)
• Data portability — receive your data in a portable format
• Object to processing
• Withdraw consent at any time for consent-based processing

To exercise any of these rights, email binboshdone@gmail.com or use the “Delete my data” function in Settings. We will respond within 30 days.

8. Children

This service is not directed at children under the age of 13. We do not knowingly collect data from children.

9. Changes to This Policy

Any changes will be posted on this page with an updated effective date.

10. Contact

For any questions or concerns, email binboshdone@gmail.com.