Privacy Policy

1. Scope

This Privacy Policy applies to Cycl’s mobile application, related websites, backend services, connected dashboards, and third-party integrations used to operate the service.

2. Data We Collect

Depending on how you use Cycl, we may collect the following categories of data:

• Account and profile data, such as username, email address, display name, phone number, country, city, date of birth, and optional profile details.
• Authentication data, including login method and identifiers from supported sign-in providers.
• Recycling activity data, including station interactions, recycle attempts, reward activity, streaks, achievements, balances, and transaction history.
• Camera-derived data and verification data used in the recycle flow, including image captures or event records tied to verification, quality control, anti-fraud, or support review.
• Location data used to find nearby stations and, in some cases, to support transaction or payout context.
• Wallet and payment-related data, such as payout method details, bank or recipient details, linked payment account information, transfer status, and transaction identifiers.
• Device and app usage data, such as app events, analytics, notification token data, device/platform information, and crash or operational logs.
• Support or communication data you provide when contacting Cycl.

3. How We Use Data

We use personal data to:

• create and manage user accounts;
• authenticate users and keep accounts secure;
• operate the recycling verification flow and related anti-fraud controls;
• show stations, balances, rewards, achievements, and insights;
• process internal transfers, payment setup, or payout requests where available;
• send transactional, operational, or reward-related notifications;
• analyze app performance, improve product quality, and understand feature usage;
• comply with legal obligations and respond to lawful requests; and
• protect users, stations, Cycl systems, and connected providers from abuse or misuse.

4. Legal Bases

Where applicable data protection law requires a legal basis, Cycl generally relies on one or more of the following:

• performance of a contract, including providing the app and requested features;
• consent, such as for certain permissions or optional communications where required;
• legitimate interests, including fraud prevention, service security, analytics, and product improvement; and
• legal obligations, including accounting, compliance, or response duties.

5. Sharing and Providers

Cycl uses third-party services to run the product. Based on the current implementation, this may include:

• Firebase and Google services for authentication, databases, storage, cloud functions, analytics, and messaging.
• Map and geolocation providers used to support station discovery and map features.
• Payment and payout providers such as Stripe, PayPal, and Wise where enabled.
• Authentication providers such as Apple, Google, or Facebook where enabled by the app.
• Hosting, infrastructure, notification, and operational support providers.

We may also disclose data where reasonably necessary to comply with law, enforce terms, investigate abuse, protect rights and security, or support a corporate transaction.

6. Camera, Images and AI Verification

Cycl’s recycle flow uses camera access and machine-learning assisted detection to recognize item states, such as scanning an eligible label, positioning the item correctly, and detecting successful release.

Not every camera frame is necessarily retained, but verification-related captures, metadata, or audit records may be stored where needed for service integrity, support, or security.

7. Location Data

If you enable location permissions, Cycl may use your device location to help locate nearby stations, improve station relevance, and support certain transaction or payout workflows where location context is used.

You can usually manage location permissions through your device settings, but some app features may not work properly without them.

8. Retention

Cycl keeps personal data for as long as reasonably necessary to provide the service, maintain account history, resolve disputes, prevent fraud, comply with legal obligations, and operate the platform responsibly.

Retention periods may differ depending on the category of data, such as account records, verification records, transaction history, analytics, support data, or payout-related records.

9. Security

Cycl uses administrative, technical, and organizational safeguards designed to protect personal data. No system can guarantee absolute security, but Cycl seeks to limit unauthorized access, misuse, alteration, and loss.

10. Your Rights

Depending on your jurisdiction, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent in relation to your personal data.

Cycl may need to verify your identity and may retain certain data where legally required or where needed to establish, exercise, or defend legal claims, maintain security, or complete active transactions.

11. Children

Cycl is not intended to be used in violation of applicable minimum-age rules. If you believe a child has provided personal data unlawfully, please contact Cycl so the matter can be reviewed.

12. Changes to This Policy

Cycl may update this Privacy Policy from time to time to reflect product changes, legal requirements, or operational improvements. Updated versions become effective when posted unless a later effective date is stated.

13. Contact

For privacy questions or requests, please contact Cycl through the support or contact channels made available in the app or on the relevant Cycl website.