Privacy Policy for Terra App
We maintain an unwavering dedication to protecting and preserving all personal data provided by our website visitors and service users, implementing robust and comprehensive security measures throughout our services and operations.
This policy applies where we are acting as a data controller with respect to the personal data of our website visitors and service users; in other words, where we determine the purposes and means of the processing of that personal data. In this role, we are responsible for implementing and maintaining robust data protection measures across all our operations and services.
We may process usage data (“usage data”), which comprehensively includes access logs, page views, interaction patterns, feature utilization metrics, device information, browser type, and geographical location data. This information is collected through automated tracking tools, server logs, and analytics software and may include time spent on specific features, navigation paths, and interaction preferences. The source of this data is our analytics software and server monitoring systems. We process this information for several important purposes, including service optimization, user experience enhancement, performance monitoring, and security threat detection, which enables us to improve platform functionality, enhance user experience, and maintain system security. The legal basis for this processing is our legitimate interests in monitoring and improving our website and services.
We may process account data (“account data”), which comprehensively includes email addresses, usernames, password hashes, account preferences, notification settings, and authentication details. This information is collected through registration forms, account updates, and user preferences and may include communication preferences, security settings, and account status information. The source of this data is direct user input during account creation and management. We process this information for several important purposes, including account authentication, service provision, security maintenance, and communication management, which enables us to provide secure access, personalized services, and account support. The legal basis for this processing is the performance of a contract between you and us and our legitimate interests in proper administration.
We may process profile data (“profile data”), which comprehensively includes name, biography, interests, preferences, activity history, and profile pictures. This information is collected through profile creation forms, user submissions, and platform interactions and may include sustainability preferences, personal goals, and community interactions. The source of this data is user-provided information and platform activity. We process this information for several important purposes, including personalization, community building, feature recommendations, and content curation, which enables us to deliver tailored experiences, foster community engagement, and provide relevant content. The legal basis for this processing is consent and our legitimate interests in providing personalized services.
You have the right to access your personal data, which means you can obtain confirmation about whether we process your personal data and receive a copy of that data in a structured format. This includes the ability to view all data categories we hold, request specific data sets, and receive explanations about processing purposes. To exercise this right, you can submit a formal request through our dedicated privacy portal or contact our privacy team directly. We will respond within 30 days and may require government-issued identification, proof of address, and account verification to verify your identity.
You have the right to rectification, which means you can request corrections or updates to any inaccurate or incomplete personal data we hold about you. This includes the ability to update account information, correct profile details, and modify preferences. To exercise this right, you can use our account settings interface or submit a formal correction request through our support system. We will process your request within 15 days and may require account verification, supporting documentation, and specific correction details to verify your identity.
You have the right to erasure, also known as the right to be forgotten, which means you can request the deletion of your personal data when there is no compelling reason for its continued processing. This includes the ability to delete your account, remove specific data points, and withdraw processing consent. To exercise this right, you can use our account deletion tools or submit a formal erasure request. We will process your request within 30 days and may require password confirmation, identity verification, and explicit confirmation to verify your identity.
You have the right to restrict processing, which means you can limit the ways we use your personal data while still storing it. This includes the ability to pause processing activities, limit data usage, and temporarily suspend account features. To exercise this right, you can adjust your privacy settings or submit a formal restriction request through our privacy center. We will respond within 15 days and may require account ownership proof, specific restriction parameters, and processing purpose confirmation to verify your identity.
You have the right to data portability, which means you can receive your personal data in a structured, commonly used format and transmit it to another service provider. This includes the ability to export account data, transfer profile information, and move activity history. To exercise this right, you can use our data export tools or submit a formal portability request. We will fulfill your request within 30 days and may require two-factor authentication, service provider details, and format preferences to verify your identity.Data Processing and Security Measures
We process Service Data which includes user profiles, account settings, activity logs, and platform preferences. This processing involves automated collection, storage, and analysis, enabling us to provide personalized service delivery and platform optimization. For example, in the context of apps, this includes customized interface settings, progress tracking, and feature recommendations. The legal basis for this processing is legitimate interest and contractual necessity, specifically to maintain service functionality and user experience optimization.
We process Technical Data which includes device information, IP addresses, browser types, and system configurations. This processing involves automated logging, analysis, and performance monitoring, enabling us to ensure optimal platform performance and compatibility. For example, in the context of apps, this includes crash reporting, load time optimization, and device-specific adaptations. The legal basis for this processing is legitimate interest, specifically for maintaining service reliability and technical functionality.
We process Communication Data which includes messages, feedback submissions, and support interactions. This processing involves storage, analysis, and response management, enabling us to provide effective customer support and service improvements. For example, in the context of apps, this includes support ticket management, user feedback analysis, and communication preference management. The legal basis for this processing is legitimate interest and consent, specifically for maintaining user communication and service quality.
We process Transaction Data which includes purchase records, subscription details, and payment information. This processing involves secure payment processing, subscription management, and financial record keeping, enabling us to manage service delivery and financial obligations. For example, in the context of apps, this includes subscription renewals, payment processing, and billing history maintenance. The legal basis for this processing is contractual necessity and legal obligation, specifically for financial compliance and service provision.
We process Preference Data which includes user settings, feature selections, and personalization choices. This processing involves preference storage, analysis, and application, enabling us to deliver personalized experiences and targeted improvements. For example, in the context of apps, this includes interface customization, content recommendations, and notification preferences. The legal basis for this processing is legitimate interest and consent, specifically for service personalization and user experience enhancement.
Security Implementation
Our comprehensive encryption protocols ensure end-to-end protection of your data, incorporating industry-standard algorithms and regular security updates to maintain data integrity. This includes regular security assessments and penetration testing by qualified professionals.
We implement multi-layered security infrastructure, including advanced firewalls and intrusion detection systems that continuously monitor for and prevent unauthorized access attempts. This infrastructure undergoes regular updates and enhancements.
Access to personal data is strictly controlled through role-based permissions, multi-factor authentication, and detailed access logs. We maintain comprehensive audit trails of all data access and modifications.
Our continuous monitoring systems provide real-time threat detection and automated response protocols, ensuring immediate action against potential security threats.
We maintain comprehensive backup procedures with encrypted offsite storage and regular recovery testing, ensuring data availability and integrity.
All staff undergo regular security awareness training and must comply with detailed data protection protocols, including specific training for handling sensitive data.
International Data Transfers
We may transfer your personal data to countries outside your jurisdiction. These transfers are protected by appropriate safeguards, including Standard Contractual Clauses, Data Processing Agreements, and Privacy Shield certifications. Each international transfer is conducted under strict protocols that ensure:
– Adequate data protection standards
– Compliant processing procedures
– Enforceable data subject rights
– Effective legal remedies
International transfers are protected by GDPR standards, ISO 27001 certification, and local data protection regulations, ensuring compliance with international privacy frameworks. We implement additional measures including:
– Regular compliance audits
– Data protection impact assessments
– Documented transfer mechanisms
– Continuous monitoring procedures
Regarding international transfers, you maintain specific rights including:
– Right to information about transfers
– Right to object to transfers
– Right to withdraw consent
– Right to data protection guarantees
Data Retention
We maintain specific retention periods for different data categories:
Account Information: Retained for the duration of active account plus 24 months after closure for legal compliance and account recovery purposes
Usage Data: Retained for 12 months to support service improvement and user experience optimization
Transaction Records: Retained for 7 years to comply with financial regulations and tax requirements
Communication History: Retained for 36 months to maintain service continuity and support dispute resolution
Technical Logs: Retained for 6 months for security monitoring and system optimization
These retention periods are determined by:
– Legal requirements
– Business purposes
– Technical necessities
– User preferences
Special circumstances affecting retention:
– Legal obligations
– Dispute resolution
– Security investigationsCookie Policy
At terra-app.com, we use various types of cookies to enhance and optimize your experience. Here’s how we utilize different cookie categories to serve you better:
Essential Cookies
Essential cookies serve as the backbone of our website’s core functionality. These cookies manage user sessions, maintain security protocols, and ensure basic site operations run smoothly. They process authentication data, security tokens, and session identifiers to enable seamless navigation and secure access. For example, in our apps context, these cookies verify your login status while you access different features of Terra App’s sustainability tracking tools.
Functional Cookies
Functional cookies enhance your experience by remembering your preferences. They enable language selection, regional content delivery, and interface customization. These cookies process user preference data to optimize feature delivery and maintain personalized settings. For example, they remember your preferred view mode when tracking habits or accessing environmental impact metrics.
Analytics Cookies
Analytics cookies help us understand how users interact with Terra App. They collect information about page interactions, navigation patterns, feature usage, and session duration. This data helps us analyze which sustainability resources are most valuable and how users engage with our community features, allowing us to improve our service continuously.
Performance Cookies
Performance cookies assess and improve our platform’s operation by monitoring site speed, identifying technical issues, and optimizing content delivery. They track system performance metrics to ensure smooth functionality across all Terra App features, particularly during peak usage of our community engagement tools.
Cookie Management
You maintain control over your cookie preferences through browser settings, our cookie consent tool, privacy preferences center, and account settings. We respect your choices and provide clear options for managing your cookie preferences.
GDPR Compliance
For our European Union users, we implement strict data protection measures including explicit consent mechanisms, data minimization practices, and purpose limitation protocols. We maintain complete transparency in data processing and adhere to storage limitations as required by law.
CCPA Compliance
California residents enjoy specific rights regarding their personal information. These include the right to know about collected data, request deletion, opt-out of data sales, and access collected information. We ensure non-discrimination regardless of privacy choices exercised.
COPPA Compliance
For users under 13, we maintain stringent protection measures including age verification, parental consent requirements, and limited data collection protocols. Parents have specific access rights and control over their children’s data.
Updates and Changes
We regularly review and update our privacy practices to maintain compliance and protect user interests. This includes user notifications for significant changes, consent renewal when required, and continuous compliance monitoring.
Contact Information
For privacy-related inquiries, please contact us at [email protected]. We respond within 48 hours and require verification for data-related requests. Our team provides support for privacy concerns, data requests, and exercising your privacy rights.
This policy was created specifically for terra-app.com and covers all associated services within the apps industry.