Privacy Policy

Last updated: March 28, 2026 · Version 1.0

1. Who we are

PollenPal ("we", "us", "our") is operated by Marek Pizner, L. Novomeskeho, Prešov 08001, Slovakia.

We are the data controller for personal data collected through this app under GDPR (EU) 2016/679.

2. What data we collect and why

2.1 Data you provide directly

Data	Purpose	Legal basis (GDPR)
Name	Personalise your experience	Consent (Art. 6(1)(a))
Email address	Account communication, marketing emails, product updates	Consent (Art. 6(1)(a))
Location (city / country)	Personalise pollen forecasts; region-based marketing	Consent + Legitimate interest (Art. 6(1)(f))
Allergy profile	Core app functionality	Consent (Art. 9(2)(a)) — special category health data
Age range, lifestyle	Personalise recommendations	Consent (Art. 6(1)(a))
Symptom logs	Personal health history feature	Consent (Art. 9(2)(a))

2.2 Data collected automatically

Data	Purpose	Legal basis
GPS coordinates	Real-time pollen forecast for your location	Consent (Art. 6(1)(a))
Device type / OS version	App diagnostics and compatibility	Legitimate interest (Art. 6(1)(f))
Push notification token	Send pollen alerts and marketing notifications	Consent (Art. 6(1)(a))

2.3 Special category (health) data

Allergy and symptom information constitutes special category data under GDPR Article 9. We process it only with your explicit consent, solely to provide core app functionality. We will never sell, share, or use your health data for advertising purposes.

3. Consent and how we obtain it

We obtain your consent through an explicit opt-in screen shown before you use the app. Consent is:

Freely given — you can use limited features without marketing consent
Specific — separate checkboxes for Terms, Privacy Policy, and marketing
Informed — we explain clearly what each consent covers
Unambiguous — requires active checkbox selection, not pre-ticked boxes

We record the date, time, and version of the policy you consented to.

4. How we use your data

Provide and personalise the app experience
Send pollen forecast notifications — daily alerts and high pollen warnings
Send marketing communications — product updates, seasonal tips, premium offers — only if you opted in
Analyse app usage to improve features
Comply with legal obligations

5. Marketing communications

We only send marketing communications if you explicitly opted in during onboarding or in Settings. You can opt out at any time:

Push notifications: Settings → Me → Notifications → Off
Email marketing: unsubscribe link in any email, or email privacy@pollenpal.app

We will process opt-out requests within 30 days. Opting out of marketing does not affect service notifications.

6. Data sharing and third parties

We do not sell your personal data. We may share data with:

Third party	Purpose	Data shared	Location
Open-Meteo	Pollen forecast API	GPS coordinates only	EU
RevenueCat	Subscription management	Anonymised device token	US
Apple (APNs)	Push notifications	Push token	US
Email provider (future)	Marketing emails	Name, email, region, allergy types	TBD

Any new third-party service will be listed here before data is shared with them.

7. Data storage and retention

Data type	Storage location	Retention
Profile, logs, preferences	On your device (iOS AsyncStorage)	Until you delete the app
Consent record	On your device	Until you delete the app
Email, name (future cloud)	Our servers	Until deletion request or 3 years inactivity

Currently (v1.0) all data is stored only on your device. No data is transmitted to our servers. When we add cloud sync this policy will be updated and you will be notified in-app.

8. Your rights under GDPR (EU/EEA users)

You have the following rights under GDPR. To exercise any right contact privacy@pollenpal.app. We respond within 30 days.

Right of access (Art. 15) — request a copy of your personal data
Right to rectification (Art. 16) — correct inaccurate data
Right to erasure / "right to be forgotten" (Art. 17) — request deletion
Right to restriction (Art. 18) — limit how we process your data
Right to data portability (Art. 20) — receive your data in a machine-readable format
Right to object (Art. 21) — object to processing based on legitimate interest, including direct marketing
Right to withdraw consent (Art. 7(3)) — withdraw at any time without affecting prior processing
Right to lodge a complaint — with your national supervisory authority. In Slovakia: Úrad na ochranu osobných údajov SR

9. Your rights under CCPA (California residents)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

Right to know — what personal information we collect, use, disclose, and sell
Right to delete — request deletion of your personal information
Right to opt-out of sale — we do not sell personal information. No opt-out needed.
Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights
Right to correct — request correction of inaccurate personal information (CPRA)
Right to limit use of sensitive personal information — including health/location data (CPRA)

To exercise CCPA rights, email privacy@pollenpal.app with subject line "CCPA Request". We respond within 45 days.

We do not sell or share personal information for cross-context behavioural advertising.

10. Children's privacy (COPPA)

PollenPal is not directed at children under 13 (US) or under 16 (EU). We do not knowingly collect personal data from children under these ages. If you believe a child has provided us data, contact privacy@pollenpal.app and we will delete it promptly.

11. Data security

All data stored locally on-device using iOS secure storage
HTTPS / TLS for all network communications
No passwords stored (no account system in v1)
We notify affected users within 72 hours of becoming aware of a data breach that poses risk to rights and freedoms (GDPR Art. 33/34)

12. International data transfers

RevenueCat and Apple are US-based. GPS coordinates are sent to Open-Meteo (EU-based). For US transfers, we rely on Standard Contractual Clauses (SCCs) as the appropriate safeguard under GDPR Chapter V.

13. Changes to this policy

We will notify you of material changes via in-app notification and email (if provided). If changes affect how we process health data or require fresh consent, we will ask you to consent again. The version number and "Last updated" date at the top reflect the latest revision.

14. Contact and complaints

Marek Pizner
L. Novomeskeho, Prešov 08001, Slovakia
Email: privacy@pollenpal.app

EU supervisory authority: Úrad na ochranu osobných údajov SR (Slovakia)
California: California Attorney General — Privacy