Climfy
Climfy Privacy Policy
Last updated: 18 October 2026
1. About This Policy
Climfy uses itemised receipts to estimate the carbon footprint of supported foods. This policy explains the information processed to provide the service and how to contact us about your data.
2. What We Collect
Your Account
• Email address — used for login and account recovery • Password — managed by Firebase Authentication; Climfy never sees it • Username — set by you at signup • Profile photo — optional, stored in Firebase Storage • Google or Apple tokens — only if you use social sign-in
Your Scans
• The receipt photo you capture • Items extracted from a scan — name, estimated carbon (kg CO₂e), category, and tier (Light/Medium/Medium-Heavy/Heavy) • The date and your running weekly scan count, used to enforce the free-tier limit and reset it every Monday • Your subscription status (Free or Pro)
App Preferences
• Notification settings • Language preference • Feedback you voluntarily submit • Onboarding completion status
3. How We Use Your Data
• Power core features: scanning receipts, estimating carbon per item, and your weekly impact dashboard • Show a lower-carbon swap suggestion when a real alternative exists in our database • Enforce your free-tier weekly scan limit and reset it every Monday • Send notifications according to your preferences • Understand usage patterns through aggregated, anonymized data to improve the app
4. AI-Powered Features
Scan analysis
Receipt images are sent to OpenAI through our server to recognise merchant and item information. Climfy then applies food category factors and quantity assumptions to calculate estimates. Processing and retention by service providers depend on the applicable provider policies and account settings; this page does not promise immediate deletion by those providers.
5. Data Sharing
We do not sell your data. We use Google Firebase for authentication, storage and server functions, RevenueCat for subscription management, and OpenAI for receipt recognition. Apple or Google handles store payments. Data may also be disclosed when required by law.
6. Security
• Firebase Firestore and Storage run on Google's enterprise-security infrastructure • All data in transit is encrypted over TLS/HTTPS • Passwords are handled solely by Firebase Authentication — we have no access to them • Your scan images and scan history are stored with owner-only access controls • All payment processing is handled by RevenueCat, Apple, or Google — Climfy never touches payment details
7. Your Rights
You stay in control of your data: • View your scans anytime in the app • Edit your username and profile photo in Account Settings • Delete individual scans • Delete your entire account — and everything linked to it — via Settings → Account → Delete Account Deletion is permanent and removes all scans, saved items, and profile data from our servers.
For questions about your data or to request account deletion, email contact@climfy.tech. You can also delete your account in the app.
8. Children's Privacy
Climfy is not intended for users under 13. We do not knowingly collect data from children. If we learn that a child has created an account, we will delete the data immediately.
9. Updates & Contact
We may update this policy when our service changes. For privacy questions, contact us at: contact@climfy.tech