Releaf

1. About Releaf

Releaf is a nonprofit iOS application created and operated by a founding team including Yuhan Wang (Founder & Creative Lead), Shengbo Jiang (Chief Technology Officer & Lead Developer), and Haojun Zhao (Contributor and media operator). Releaf is a collaborative public-good project with no monetization, ads, or commercial revenue.

We are committed to protecting your privacy. This Privacy Policy explains what data we collect, how we use it, and how your information is safeguarded.

By using the mobile application, Site, APIs, or related services (collectively, the "Services"), you accept the practices described in this Privacy Policy & Terms of Service ("Agreement").

2. Privacy Policy

2.1 Information We Collect

According to the California Consumer Privacy Act (CCPA/CPRA) and Federal Trade Commission (FTC) Fair Information Practice Principles, we collect the following categories of data:

• Account Identifiers – email address, phone number, Sign‑in‑with‑Apple credential, Google OAuth token, display name, chosen avatar. Purpose: create and secure your account.
• Approximate Location – city‑level coordinates (~10 km accuracy) obtained only with your explicit consent. Purpose: show anonymized distribution on Apple Maps; regional insights.
• User Content – posts, photos, captions, comments, likes, donation amounts, water‑drops balance. Purpose: enable community features and reward engagement.
• Search & Interaction Logs – search queries, feature taps, usage analytics. Purpose: personalize suggestions and improve relevance.
• Technical & Device Data – device model, OS version, IP address, timestamps, crash logs, push‑notification token. Purpose: diagnostics, fraud prevention, compatibility assurance.

We do not request or process sensitive categories of personal data (e.g., precise geolocation, biometric, or health information).

2.2 Cookies & Tracking Technologies

• App: secure local storage and Apple‑provided identifiers; no third‑party ad SDKs.
• Site: We use first-party cookies for session management and security via Cloudflare. Optional analytics via self-hosted Matomo are enabled only with user consent, consistent with best practices under the FTC and CPRA.

You may disable cookies in your browser, but certain functions may be limited.

2.3 How We Use Your Information

According to U.S. contract law and FTC privacy enforcement guidelines, we use your information to:

1. Operate and maintain the App, Site, and databases.
2. Deliver AI‑powered search results via OpenAI (ChatGPT), DeepSeek, and Google Cloud Vision.
3. Display anonymized user distribution on Apple Maps.
4. Process voluntary donations through Apple Pay and allocate water‑drops.
5. Send transactional communications (password resets) and occasional newsletters (max one per month; opt‑out anytime).
6. Detect and mitigate fraud, spam, and security threats.
7. Comply with legal obligations and enforce our Terms of Service.

2.4 Legal Bases for Processing

According to applicable privacy laws:

• United States: Contract performance, legitimate interests (e.g., system integrity), and user consent (e.g., for location, cookies, newsletters).
• EU/EEA & UK (GDPR/UK‑GDPR): Legal bases include GDPR Article 6(1)(a) (consent), (b) (contractual necessity), and (f) (legitimate interests).
• California (CCPA/CPRA): Data processing falls under "business purposes" as defined in Cal. Civ. Code §1798.140(e). We do not "sell" or "share" personal information under §1798.140(ad).

2.5 Sharing & Disclosure

According to the CCPA, FTC Data Security Guidelines, and standard U.S. contractual obligations:

• Service Providers – Apple (MapKit & Pay), OpenAI, DeepSeek, Google Cloud, Amazon SES (email), Cloudflare (security); all under written processor agreements.
• Aggregated Statistics – Non-personal metrics such as total user counts may be published publicly.
• Legal or Safety Requirements – when compelled by a valid request or to protect rights and safety.
• Corporate Events – merger, acquisition, or asset sale, provided successor honors this policy.
• With Your Consent – for any non‑routine disclosure.

2.6 Data Retention

According to U.S. data minimization principles and tax regulations (IRS Code §6501):

• Account data – retained while account is active plus 30 days after deletion request.
• Posts & comments – soft‑deleted immediately; purged from backups within 60 days.
• Analytics logs – anonymized after twelve months.

2.7 Security Measures

According to industry standards (e.g., SOC 2 Type II, NIST SP 800-53) and FTC enforcement guidance:

• TLS 1.3 encryption in transit; AES‑256 encryption at rest.
• Zero‑trust architecture; least‑privilege IAM roles.
• Quarterly penetration tests; annual SOC 2 Type II review.
• 72‑hour breach notification protocol (GDPR Art. 33).

2.8 Your Rights

According to:

• CCPA/CPRA (California) – Right to access, delete, correct, and opt out of sharing. Contact: +1 (203) 906-3887 or [email protected]
• GDPR / UK GDPR – Right to access, rectify, erase, restrict, object, and request data portability.
• Global Users – May access or manage personal data via Settings → Privacy → Manage My Data or contact us directly.

2.9 International Transfers

According to the U.S.-EU Data Privacy Framework and GDPR Chapter V, Data is stored in DigitalOcean's NYC3 data center (New York, USA). Transfers from the EEA/UK rely on Standard Contractual Clauses (2021/914/EU) together with the UK Addendum.

2.10 Children's Privacy

According to the Children's Online Privacy Protection Act (COPPA, 15 U.S. Code § 6501 et seq.): This service is not directed to children under 13. We do not knowingly collect or store data from minors. If we learn a user is under 13, their account will be deleted.

2.11 Changes to This Privacy Policy

According to the FTC's transparency guidelines, any material changes to this policy will be announced via in-app banners and email at least 14 days in advance. Prior versions will remain publicly accessible.

3. Terms of Service

Welcome to Releaf, a nonprofit environmental app dedicated to sustainability and community empowerment. These Terms of Service ("Terms") govern your use of the Releaf mobile application and related services ("Services"). By accessing or using the Services, you agree to be bound by these Terms.

3.1 Eligibility & Account Registration

• You must be at least 13 years old (or older if required by local law) and able to form a binding contract.
• Provide accurate information and keep credentials confidential.
• We may refuse registration or reclaim usernames at our discretion.

3.2 User Content & Community Guidelines

• Post only sustainability‑related content; no disinformation, hate speech, graphic violence, or commercial ads.
• You retain ownership of your content but grant us a worldwide, royalty‑free licence to host and display it within the Services.
• We may moderate or remove content and suspend accounts that violate these rules.
• Reporting tools allow users to flag inappropriate content; we review reports within 48 hours.

3.3 Intellectual Property

• The name "Releaf", its logo, and related visuals are the creative property of the app's co-founders: Yuhan Wang, Shengbo Jiang, and Haojun Zhao.
• All other original content, code, UI, and designs are protected under applicable copyright and intellectual property laws.
• Except for user-submitted content, you may not copy, distribute, or reuse any Releaf content without prior written consent from the team.

3.4 Third‑Party Services

The Services integrate APIs and links from Apple, Google, OpenAI, Deepseek, and others. We are not responsible for third‑party content or practices.

3.5 Disclaimers

The Services are provided "AS IS" and "AS AVAILABLE." We disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, accuracy, and non‑infringement.

3.6 Limitation of Liability

To the fullest extent permitted by applicable law, Releaf and its developers shall not be liable for any direct, indirect, incidental, special, consequential, or exemplary damages arising from your use of the App, even if we have been advised of the possibility of such damages. Because the App is provided free of charge and without any form of financial transaction, in no event shall the total liability of Releaf or its developers exceed one hundred U.S. dollars (US $100), regardless of the cause of action.

3.7 Indemnification

You agree to defend, indemnify, and hold harmless the co-founders of Releaf (Yuhan Wang, Shengbo Jiang, and Haojun Zhao) from any claims, damages, or liabilities arising from your use of the Services or violation of these Terms.

3.8 Termination

We reserve the right to suspend or terminate your account at any time if you violate these Terms or compromise the integrity of the Services. You may delete your account at any time. Sections related to intellectual property, disclaimers, indemnification, and dispute resolution will continue to apply even after account deletion.

3.9 Developer Status Declaration

Releaf is developed by full-time international students on F-1 visas in the United States. According to U.S. immigration law and USCIS regulations, our activities under Releaf:

• Are conducted voluntarily
• Generate no income or compensation
• Are in line with permissible volunteer work under F-1 status

No team member receives payment, equity, or financial benefit in any form from the operation of Releaf.

3.10 Governing Law & Dispute Resolution

These Terms are governed by the laws of the State of Connecticut and applicable U.S. federal law. All disputes shall be resolved individually in the state or federal courts located in New Haven County, Connecticut, USA. By using Releaf, you agree to waive any right to participate in class-action lawsuits or class-wide arbitration.

3.11 Changes to These Terms

We may update these Terms; continued use after the effective date constitutes acceptance. Material changes will be announced at least 14 days in advance.

4. Contact Information

5. Accessibility & Additional Disclosures

• We strive to meet WCAG 2.1 AA. Contact [email protected] with any barrier.
• Open‑source component licenses are listed in‑app under Settings → Open‑Source Credits.
• California users may request an annual list of third‑party data disclosures under Cal. Civ. Code §1798.83.