Privacy Policy

Last updated: 11 March 2026

1. Who We Are

AIrth is operated by Apple&Pear. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

Contact: hello@getairth.com

2. What We Collect

Account data

  • Email address (required for sign-in)
  • Display name (optional)
  • Google profile information if you use Google OAuth

AI usage metadata (via browser extension)

  • Which AI platform was used (e.g. ChatGPT, Claude)
  • Timestamps of interactions
  • Estimated token counts (input and output)
  • Number of queries per session

What we do NOT collect:

  • Your prompts or AI responses
  • Conversation content of any kind
  • Browsing history outside supported AI platforms
  • Personal files, documents, or media

Payment data

Payment processing is handled entirely by Stripe. We store your Stripe customer ID but never see or store your card details.

Derived data

  • Estimated carbon emissions (CO₂e), energy (kWh), and water usage (litres) calculated from your usage metadata
  • Monthly aggregated impact totals
  • Offset transaction records

3. How We Use Your Data

  • Provide the Service: Calculate and display your AI environmental impact, process offset transactions, and manage your account
  • Improve the Service: Aggregate, anonymised usage statistics to improve our carbon estimation methodology
  • Communicate: Send transactional emails (magic links, offset confirmations) and, if opted in, product updates
  • Legal compliance: Maintain records required by law (e.g. payment records for tax purposes)

We do not sell your data. We do not use your data for advertising.

4. Data Storage and Security

Your data is stored in Supabase (hosted on AWS in the EU region). Data is encrypted in transit (TLS) and at rest. Access to production databases is restricted to essential personnel only.

The browser extension stores usage data locally in Chrome storage and syncs aggregated monthly totals to our backend. Local data remains on your device unless you sign in.

5. Third-Party Services

We share limited data with the following services:

  • Supabase: Authentication, database, and serverless functions
  • Stripe: Payment processing and subscription management
  • Ecologi: Carbon offset purchasing (we share only the offset amount, not your personal data)
  • Google: OAuth authentication (only if you choose to sign in with Google)
  • Umami: Privacy-friendly, cookieless analytics on our marketing site only (see Website analytics)

Each third-party service operates under its own privacy policy.

6. Data Retention

  • Account data is retained while your account is active and deleted within 30 days of account deletion
  • Carbon usage data is retained for up to 24 months for trend analysis, then aggregated and anonymised
  • Payment records are retained for 7 years as required by UK tax law
  • Offset transaction records are retained permanently as proof of climate funding

7. Your Rights

Under UK GDPR, you have the right to:

  • Access: Request a copy of the data we hold about you
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data
  • Portability: Receive your data in a portable format
  • Object: Object to processing of your data
  • Withdraw consent: Uninstall the extension or delete your account at any time

To exercise these rights, email hello@getairth.com. We will respond within 30 days.

8. Cookies

We use essential cookies only — Supabase authentication session cookies required for the Service to function. We do not use advertising cookies or tracking pixels.

Our public marketing pages use Umami analytics, which does not set cookies and does not collect personally identifiable information.

9. Website analytics (Umami)

On our marketing website (e.g. homepage, pricing, and related pages), we use Umami, an open-source, privacy-focused analytics tool. Umami is hosted by us via Umami Cloud and helps us understand aggregate traffic — such as page views and referrers — so we can improve the site.

Umami does not use cookies, does not fingerprint visitors, and does not collect personal data. It is designed to be GDPR-friendly and aligns with our approach of minimising tracking. Logged-in areas of the Service (dashboard, onboarding) are not included in this analytics.

10. Children

The Service is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service.

12. Contact

For privacy-related questions, contact us at hello@getairth.com.

If you are unsatisfied with our response, you may contact the UK Information Commissioner's Office (ICO) at ico.org.uk.