Privacy policy

Twiza is a project run by Lokman and Besma Bouider (“we”), the controllers for the data described here. For any question about your data, use the Contact page.

This policy covers the Twiza mobile app and the twiza.net website.

What we collect

Account: your email address, your password (stored in encrypted form by our host), and, if you provide them, your first name, last name, a profile photo and a phone number. The phone number is only requested in order to organise a cleanup and is verified by SMS.

Reports: the photo of the dump, the GPS position recorded by your device when the photo is taken, the waste category, an optional description and the date. The photo’s EXIF metadata (including any location written by the camera) is stripped on your phone before anything is uploaded; the only position sent is the one measured by the app.

Notifications: if you turn them on, a notification token provided by your operating system (through the Expo service) so we can send you the alerts you asked for.

Technical data: standard server logs (IP address, timestamp, request type) kept for a few weeks for security and troubleshooting.

What we don’t do

No advertising tracking, no profiling, no selling of data. The website uses no third-party audience-analytics tool and no tracking cookie; the only cookie set remembers your language preference.

Why we process this data

To provide the service: create an account, publish a report, display the public map, organise and close a cleanup.

For security and moderation: detect abuse (duplicates, false reports, multiple accounts) and enforce the Community charter.

To keep you informed: send the notifications you have explicitly enabled.

Content made public

A published report — photo, position, category, date — is publicly visible on the map, in the app and on this website. Do not include personal information in the photo or the description. The summary of a cleanup (before/after photos, number of participants, bags collected) is also public.

Who data is shared with

Hosting and database: Supabase, on servers located in the European Union (Frankfurt, Germany).

Photo moderation: a report’s thumbnail is sent to Microsoft Azure AI Vision for automated content analysis. No other data is transmitted.

Push notifications: Expo, then Apple (APNs) or Google (FCM) for delivery.

Verification SMS: Twilio, only when verifying a phone number.

Transactional email: Resend, for account-related messages.

We share your data with no other third party, except where required by law.

Retention

Account: until it is deleted, which you can do yourself from the app.

Reports: kept as long as they are useful to the map. When an account is deleted, its reports are detached from any personal data, but the observation itself (photo of the dump, position) may be kept anonymously, as it has public-interest value.

Technical logs: a few weeks.

Your rights

You can view and correct your profile information directly in the app, and delete your account from the app.

For any other request — access, objection, restriction, portability, complaint — write to us through the Contact page. You may also contact the competent data-protection authority.

Minors

The service is not intended for people under 16. We do not knowingly collect data about them.

Changes

Any change to this policy is published on this page, with a new update date at the top of the document.