Last updated: 8 July 2026
Who we are
EcoPal.uk is an eco-habit tracking app for iOS. When we say "we", "us", or "EcoPal.uk", we mean the EcoPal.uk service operated from the United Kingdom.
If you have any questions about this policy or your data, contact us at: [email protected]
What data we collect and why
Account information
When you create an account we collect:
- Email address — to create and secure your account
- Username — the name you choose to display in the app
- Age range — to ensure the app experience is appropriate for you
Waitlist
If you sign up on ecopal.uk before the app launches, we collect your email address solely to notify you when the app is available. We will not use it for any other purpose, and you can ask us to remove it at any time by emailing [email protected].
Activity data
As you use the app we store:
- Eco habits you create and log
- Daily habit completions and streak history
- Sparks (in-app points) earned and spent
- Barcode scans from the Scanner tab
Device permissions
The app requests the following permissions only when you use the relevant features:
- Camera — to scan product barcodes; images are never stored or uploaded
- Location — to identify your local council and show the correct recycling guidance; your precise location is never stored
How we use your data
We use your data solely to provide and improve the EcoPal.uk app:
- Displaying your habits, streaks, and impact stats
- Awarding Sparks and tracking your progress
- Showing recycling guidance for your area
We do not use your data for advertising. We do not sell your data to anyone.
Who we share data with
We use Supabase (supabase.com) to securely store your account and activity data. Supabase acts as our data processor and is contractually required to protect your data.
We use the Open Food Facts public API to look up product information when you scan a barcode. Only the barcode number is sent — no personal information.
We share data with no other third parties.
Children and under-13s
EcoPal.uk is designed for all ages, including children. If you are under 13, we ask for a parent or guardian's consent during sign-up before any account data is created.
We collect only the minimum data necessary for the app to work. We do not serve ads, run behavioural tracking, or build profiles for commercial purposes.
Parents and guardians can request deletion of their child's account and all associated data at any time by emailing [email protected].
How long we keep your data
We keep your account and activity data for as long as your account is active. If you delete your account (via Profile → Settings → Delete Account), all your data is permanently deleted within 30 days.
Your rights
Under UK GDPR you have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Delete your account and all associated data
- Export your data in a portable format
- Object to or restrict certain processing
To exercise any of these rights, email [email protected].
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.
Security
Your data is stored securely using Supabase's encrypted infrastructure. Passwords are never stored in plain text. We use industry-standard security practices throughout.
Changes to this policy
If we make significant changes to this policy we will update the date at the top of this page and, where appropriate, notify you in the app.