CarbonFreeLifeCarbonFreeLife

Privacy Policy

Last updated: 24 June 2026

This page is maintained by CarbonFreeLife ("we", "us") to explain how we handle personal information when you use carbonfreelife.pro and related services (the "Service"). If you have any questions, contact us at support@carbonfreelife.pro or via our contact form.

1. Data we collect

  • Account data: email address, display name, avatar URL, authentication identifiers (e.g. Google sub).
  • Usage data: flight routes you calculate, menu scans, CO₂ totals, certificates issued, offsets purchased.
  • Payment data: processed by Stripe. We store the resulting offset record and the Stripe customer/session ID — we do not store full card numbers.
  • Communication data: messages you send us via the contact form or email.
  • Technical data: IP address, browser/device type, basic analytics events.

2. How we use it

  • Provide the calculator, scan, offset and certificate features.
  • Process payments and deliver receipts/certificates.
  • Send transactional and (optional) product emails.
  • Prevent fraud, abuse, and secure the Service.
  • Comply with legal obligations (e.g. tax/accounting records).

3. Legal bases for processing (GDPR)

Where GDPR applies, we rely on the following legal bases for processing personal data:

  • Contract performance — providing calculations, offsets, certificates, and account services.
  • Consent — marketing communications and optional cookies (where required).
  • Legitimate interests — fraud prevention, security, and service improvement, balanced against your rights.
  • Legal obligations — tax, accounting, and regulatory compliance.

4. Data controller

CarbonFreeLife is the data controller responsible for processing personal information under this Privacy Policy.

Contact: support@carbonfreelife.pro

Once CarbonFreeLife LLC is formed, this section will be updated accordingly.

5. Sharing & subprocessors

We do not sell personal data. We share data only with subprocessors and partners necessary to run the Service:

  • Lovable Cloud / Supabase — authentication, database, storage.
  • Stripe — payment processing.
  • Cloudflare — hosting and DDoS protection.
  • Google Analytics — anonymized traffic analytics.
  • Lovable Emails — transactional email delivery.
  • Carbon project partners and verification providers — when purchasing carbon offsets, limited transaction information may be shared solely for issuance, tracking, validation, and audit purposes.

6. International transfers

Some subprocessors are located outside the EEA/UK. Where applicable, transfers are protected by Standard Contractual Clauses or equivalent safeguards.

7. Retention

We keep your account data while your account is active. Accounts that have been inactive for 24 consecutive months may be deleted after a 30-day notice email. Offset records and certificates are retained for at least 7 years for accounting and Gold Standard traceability. Backups are rotated and overwritten on a rolling schedule.

8. Data deletion

You may request deletion of your account at any time by contacting support@carbonfreelife.pro or through account settings where available.

Certain records may be retained where required for legal, accounting, fraud-prevention, or carbon-offset traceability purposes.

9. Trust, Safety & Transparency

For our full approach to artificial intelligence, carbon emissions calculations, carbon offset transparency, platform security, environmental integrity, responsible use, and responsible data practices, see our Trust, Safety & Transparency Policy.

We respect applicable privacy laws, including GDPR and CCPA/CPRA. If you are in the EU/EEA or UK, you have the right to access, correct, delete, or port your personal data, object to or restrict processing, and lodge a complaint with your local data protection authority. California residents may request to know what personal information we collect, request deletion, and opt out of any "sale" or "sharing" of personal information. We do not sell personal information. To exercise any of these rights, email support@carbonfreelife.pro. You may designate an authorized agent to act on your behalf.

10. Cookies

We use strictly necessary cookies (authentication, session) and analytics cookies (Google Analytics). We display a cookie consent banner to users where required by law. Analytics cookies are not set until consent is provided in applicable jurisdictions.

11. Automated processing

The Service uses automated systems and artificial intelligence to estimate emissions, analyze menu items, generate recommendations, and improve user experience. These outputs are informational estimates and should not be considered guarantees of actual emissions.

12. Carbon calculation disclaimer

Emissions calculations are estimates based on available methodologies, databases, and assumptions. While we strive for accuracy, results may vary and should not be relied upon as professional environmental, scientific, financial, or legal advice.

13. Security & breach notification

The Service is served exclusively over HTTPS (TLS). Passwords are hashed and never stored in plaintext. Database access is protected by row-level security. We follow defense-in-depth practices and respond to vulnerability reports at support@carbonfreelife.pro.

In the event of a security incident affecting personal information, we will investigate, take appropriate remedial measures, and provide notifications where required by applicable law.

14. Children

The Service is not directed to children under 16. We do not knowingly collect their data.

15. Changes

We may update this policy. Material changes will be announced on this page with a new "Last updated" date.