Last updated: 27 Aug 2026
Effective date: 27 Aug 2026
CONTENTS
1. Who we are
2. Data we collect
3. Camera, photos and location
4. How we use your data
5. Who we share data with
6. Content other people can see
7. How long we keep data
8. Your rights
9. Children
10. Security
11. Changes to this policy
12. Contact
================================================================================
1. WHO WE ARE
================================================================================
Mudeem ("we", "us") operates the Mudeem mobile application and related
services. This policy explains what personal data we collect, why we collect
it, who we share it with, and the choices you have.
Controller: [LEGAL ENTITY NAME]
Address: [REGISTERED ADDRESS]
Contact: mudeemsustainapp@gmail.com
If you do not agree with this policy, please do not use the app.
================================================================================
2. DATA WE COLLECT
================================================================================
2.1 INFORMATION YOU GIVE US
Name, username, email address, phone number
To create and secure your account, verify your email, and let you
sign in.
Password
To authenticate you. Stored only as a salted hash - we never store or
display the password itself.
Delivery addresses
To fulfil orders you place in the Mudeem shop.
Photos you capture or upload
To run the CO2 scanner, and to publish content, innovations and posts
you choose to share.
Content you post
Posts, comments, reviews, ratings, innovation submissions,
collaboration forum entries, and messages you send through the app.
Car pooling details
Pickup and drop-off points, seats and ride times when you offer or
join a pool.
Support correspondence
To answer your questions.
2.2 INFORMATION COLLECTED AUTOMATICALLY
Device location
Only while you use the Green Campus Map, to show your position and
nearby locations. Collected while the app is in use, and only after
you grant permission.
Push notification token
To deliver the notifications you have enabled.
Session information
A session cookie that keeps you signed in, plus the approximate time
you were last active.
Technical logs
Request time, endpoint, response status and IP address, kept for
security and debugging.
Subscription status
Whether your subscription is active, when it renews or expires, and
the store it was purchased from.
We do NOT collect your device's advertising identifier, we do not track you
across other companies' apps or websites, and we do not sell your personal
data.
2.3 PAYMENTS
Subscriptions are purchased through the Apple App Store or Google Play, and
those stores process the payment. WE NEVER RECEIVE YOUR CARD NUMBER OR FULL
BILLING DETAILS. We receive only a confirmation that a subscription is
active, which product it is, and its renewal or expiry date.
================================================================================
3. CAMERA, PHOTOS AND LOCATION
================================================================================
Camera and photo library
Used only when you take or choose a picture, for the CO2 scanner or to
attach media to something you post. We do not access your camera or
library in the background.
Location
Used only while the Green Campus Map is open. We do not track your
location in the background or build a location history.
You can withdraw either permission at any time in your device settings. The
features that rely on them will stop working, but the rest of the app
continues to function.
================================================================================
4. HOW WE USE YOUR DATA
================================================================================
1. To provide the app: accounts, orders, content, car pooling, campus map,
courses and the CO2 scanner.
2. To operate Green Points: awarding, spending, and showing your balance
and leaderboard position.
3. To manage subscriptions and confirm what you are entitled to.
4. To send notifications you have enabled, and service messages such as
email verification and password resets.
5. To keep the service secure - detecting abuse, fraud and technical
faults.
6. To meet legal and accounting obligations.
Where the law requires a legal basis, ours is: performance of our contract
with you (providing the app), your consent (camera, location, notifications
and marketing), our legitimate interests (security and service improvement),
and compliance with legal obligations.
================================================================================
5. WHO WE SHARE DATA WITH
================================================================================
We share personal data only with service providers who process it on our
behalf, under contract, for the purposes above.
MongoDB Atlas
Processes: all account and app data.
Purpose: database hosting.
[HOSTING PROVIDER]
Processes: all requests to our API.
Purpose: application hosting.
Cloudinary
Processes: images and media you upload.
Purpose: image storage and delivery.
OpenAI
Processes: the photo you scan and the weight you enter.
Purpose: identifying the item and estimating its CO2 emissions. Sent
from our servers, not from your device.
RevenueCat
Processes: your subscription status and an account identifier.
Purpose: managing subscription entitlements across Apple and Google.
Google Firebase
Processes: your push notification token.
Purpose: delivering push notifications.
Apple App Store / Google Play
Processes: your purchase.
Purpose: processing subscription payments.
We also disclose data where we are legally required to, or to establish or
defend legal claims.
Some of these providers process data outside your country. Where that
happens we rely on the safeguards those providers offer, including standard
contractual clauses where applicable.
================================================================================
6. CONTENT OTHER PEOPLE CAN SEE
================================================================================
Anything you post publicly - posts, reels, comments, reviews, innovation
submissions, collaboration forum entries, your username and profile picture,
and your position on the leaderboard - is visible to other Mudeem users.
Please do not include information in public content that you would not want
others to see.
================================================================================
7. HOW LONG WE KEEP DATA
================================================================================
Account data
For as long as your account exists.
Orders and subscription records
For as long as required for accounting and tax purposes.
Content you post
Until you delete it or your account.
Technical logs
[RETENTION PERIOD, e.g. 90 days].
Sessions
Up to 7 days from your last sign-in, then they expire automatically.
After you delete your account we remove or anonymise your personal data,
except where we must keep records to meet a legal obligation.
================================================================================
8. YOUR RIGHTS
================================================================================
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete your account and personal data;
- object to or restrict certain processing;
- receive a copy of your data in a portable format;
- withdraw consent at any time, without affecting processing already
carried out.
To exercise any of these, contact us at [PRIVACY CONTACT EMAIL]. You can
also delete your account from within the app. We respond within [30] days.
If you believe we have handled your data improperly, you may complain to
your local data protection authority.
================================================================================
9. CHILDREN
================================================================================
Mudeem is not directed at children under [AGE, e.g. 13], and we do not
knowingly collect their personal data. If you believe a child has provided
us with personal data, contact us and we will delete it.
================================================================================
10. SECURITY
================================================================================
We protect data in transit with HTTPS, store passwords only as salted
hashes, keep your session credentials in your device's secure keystore
(Android EncryptedSharedPreferences / iOS Keychain), and restrict internal
access to production data. No system is perfectly secure, but we work to
protect your information and will notify you and the relevant authority of a
breach where the law requires it.
================================================================================
11. CHANGES TO THIS POLICY
================================================================================
If we make a material change we will update the date at the top of this page
and notify you in the app or by email before the change takes effect.
================================================================================
12. CONTACT
================================================================================
[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
mudeemsustainapp@gmail.com
--------------------------------------------------------------------------------
(c) [YEAR] [LEGAL ENTITY NAME]. See also our Terms of Use.
--------------------------------------------------------------------------------