Privacy Policy

Last updated: 26 April 2026

EcoStash ("we", "us", or "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data. By using EcoStash, you agree to this policy.

1. Information We Collect

We collect the following types of information:

• Account information: name, email address, and password (stored encrypted) when you register.
• Profile data: points balance, level, recycling history, achievements, and transaction records.
• Camera images: photos you capture for material scanning. Images are sent to our server for classification and are not stored permanently after analysis.
• Location data: approximate location when you use the "Find Recyclers" feature, to show nearby drop-off points. We do not store or track your location continuously.
• Usage data: app interactions, scan history, and error logs for app improvement and Sentry error monitoring.

2. How We Use Your Information

• To provide and operate the EcoStash service
• To classify recyclable materials using AI vision technology
• To calculate and award points, levels, and achievements
• To show you nearby recycling companies on the map
• To maintain your transaction history and recycling records
• To monitor app performance and fix errors via Sentry
• To communicate service updates (we do not send marketing emails without your consent)

3. Data Sharing

We do not sell your personal data. We share data only with:

• Anthropic: scan images are processed by Claude AI for material classification. Images are not retained by Anthropic after processing.
• Sentry: anonymised error and performance data for app monitoring.
• Render: our cloud hosting provider where your account data is stored securely.
• Recycling companies: only transaction data relevant to your drop-off (material type, weight, and points). No personal contact details are shared without your consent.

4. Data Storage and Security

Your data is stored on secure servers hosted by Render in the EU/US region. We use industry-standard encryption for data in transit (HTTPS/TLS) and at rest. Passwords are hashed and never stored in plain text.

5. Your Rights (POPIA)

Under the Protection of Personal Information Act (POPIA), you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Object to processing of your personal information
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at privacy@ecostash.app. Account deletion is also available directly in the app under Profile → Settings → Delete Account.

6. Children's Privacy

EcoStash is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us immediately.

7. Retention

We retain your account data for as long as your account is active. Scan images are deleted from our servers within 24 hours of processing. If you delete your account, all personal data is permanently removed within 30 days.

8. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via the app or email. Continued use of EcoStash after changes constitutes acceptance of the updated policy.