Privacy policy

1. Information We Collect

• Account information: email address, password, or login credentials when you sign in through Google or Apple.
• Location data: approximate location (city/area), if you allow location services. Used for location-based features such as pollen and environmental data.
• Device information: device type, operating system, app version, unique device identifiers, and information about your Birdie (hardware and firmware version, connection and update status).
• Push notification data: a notification token used to send you notifications.
• Usage data (only with your consent): how you use the App, such as screens viewed, features used, and events like sign-in, setup, pairing, syncing, firmware updates and notifications. For alerts, this includes the measured value that triggered the alert (e.g. CO2 level). We also collect your approximate location (country/region), derived from your IP address.
• Crash reports: technical information when the App crashes (app version, device model, operating system and the error that occurred).

2. How We Use Your Information

• Provide, maintain and improve the App’s functionality.
• Personalise content, such as location-based pollen or environmental information.
• Enable account creation, login and authentication.
• Send you push notifications (e.g. reminders, pollen and air quality alerts, general communication).
• Provide firmware updates for your Birdie.
• Understand how the App is used, so we can improve it (only with your consent).
• Find and fix errors and keep the App stable.

3. Third-Party Services

• Analytics is only active if you have given your consent. Analytics data is kept for up to 14 months.
• Crash reports are kept for up to 90 days.
• Push notifications use a notification token assigned to your device.

4. Legal Basis for Processing (EU/EEA and UK Users)

• Consent (GDPR Art. 6(1)(a)): location data, push notifications and usage analytics. You can withdraw your consent at any time (see section 5).
• Performance of a contract (Art. 6(1)(b)): creating your account, providing the App and providing firmware updates for your Birdie.
• Legitimate interests (Art. 6(1)(f)): crash reporting, App security and keeping the App stable.

5. Your Choices

• Usage analytics: turn it on or off at any time in the App under Settings → Privacy.
• Location: change it at any time in your phone’s settings.
• Push notifications: turn them off at any time in your phone’s settings or in the App’s notification settings.

6. Data Retention

• Account data: kept until you delete your account.
• Analytics data: up to 14 months.
• Crash reports: up to 90 days.
• Other data: kept only as long as necessary for the purposes described in this Policy, unless a longer retention period is required by law.

7. Data Sharing & International Transfers

• We do not sell your personal data.
• Service providers: we share data only with trusted service providers, such as Google Firebase, who process it on our behalf and under our instructions.
• Transfers outside the EU/EEA: your data may be processed outside the EU/EEA, including in the United States and South Korea.
  • United States: covered by the EU–US Data Privacy Framework, under which Google is certified, and by the EU Standard Contractual Clauses.
  • South Korea: covered by the European Commission’s adequacy decision for South Korea.

8. Your Rights

• EU/EEA and UK (GDPR): access, rectification, erasure, restriction, data portability, objection, and the right to withdraw your consent at any time. You also have the right to lodge a complaint with a supervisory authority. In Denmark that is Datatilsynet (www.datatilsynet.dk).
• USA (California/CCPA): the right to know what data is collected, to request deletion, and to opt out of data sharing.
• South Korea (PIPA): the right to withdraw consent, to request access, and to request correction or deletion.

9. Account Deletion & Data Portability

• Deleting your account: you may delete your account at any time through the App, or by contacting us at help@birdie.design. When you delete your account, all associated personal data will be permanently erased, unless we are required to retain it for legal or regulatory reasons. Usage analytics data is not linked to your account and is automatically deleted after 14 months.
• Data export: you may request a copy of the personal data we hold about you in a structured, commonly used and machine-readable format (such as JSON or CSV).

10. Security

11. Children’s Privacy

12. Changes to This Policy

13. Contact Us