Privacy Policy
Last updated: 11 March 2026
1. Who We Are
AIrth is operated by Apple&Pear. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.
Contact: hello@getairth.com
2. What We Collect
Account data
- Email address (required for sign-in)
- Display name (optional)
- Google profile information if you use Google OAuth
AI usage metadata (via browser extension)
- Which AI platform was used (e.g. ChatGPT, Claude)
- Timestamps of interactions
- Estimated token counts (input and output)
- Number of queries per session
What we do NOT collect:
- Your prompts or AI responses
- Conversation content of any kind
- Browsing history outside supported AI platforms
- Personal files, documents, or media
Payment data
Payment processing is handled entirely by Stripe. We store your Stripe customer ID but never see or store your card details.
Derived data
- Estimated carbon emissions (CO₂e), energy (kWh), and water usage (litres) calculated from your usage metadata
- Monthly aggregated impact totals
- Offset transaction records
3. How We Use Your Data
- Provide the Service: Calculate and display your AI environmental impact, process offset transactions, and manage your account
- Improve the Service: Aggregate, anonymised usage statistics to improve our carbon estimation methodology
- Communicate: Send transactional emails (magic links, offset confirmations) and, if opted in, product updates
- Legal compliance: Maintain records required by law (e.g. payment records for tax purposes)
We do not sell your data. We do not use your data for advertising.
4. Data Storage and Security
Your data is stored in Supabase (hosted on AWS in the EU region). Data is encrypted in transit (TLS) and at rest. Access to production databases is restricted to essential personnel only.
The browser extension stores usage data locally in Chrome storage and syncs aggregated monthly totals to our backend. Local data remains on your device unless you sign in.
5. Third-Party Services
We share limited data with the following services:
- Supabase: Authentication, database, and serverless functions
- Stripe: Payment processing and subscription management
- Ecologi: Carbon offset purchasing (we share only the offset amount, not your personal data)
- Google: OAuth authentication (only if you choose to sign in with Google)
- Umami: Privacy-friendly, cookieless analytics on our marketing site only (see Website analytics)
Each third-party service operates under its own privacy policy.
6. Data Retention
- Account data is retained while your account is active and deleted within 30 days of account deletion
- Carbon usage data is retained for up to 24 months for trend analysis, then aggregated and anonymised
- Payment records are retained for 7 years as required by UK tax law
- Offset transaction records are retained permanently as proof of climate funding
7. Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of the data we hold about you
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data
- Portability: Receive your data in a portable format
- Object: Object to processing of your data
- Withdraw consent: Uninstall the extension or delete your account at any time
To exercise these rights, email hello@getairth.com. We will respond within 30 days.
8. Cookies
We use essential cookies only — Supabase authentication session cookies required for the Service to function. We do not use advertising cookies or tracking pixels.
Our public marketing pages use Umami analytics, which does not set cookies and does not collect personally identifiable information.
9. Website analytics (Umami)
On our marketing website (e.g. homepage, pricing, and related pages), we use Umami, an open-source, privacy-focused analytics tool. Umami is hosted by us via Umami Cloud and helps us understand aggregate traffic — such as page views and referrers — so we can improve the site.
Umami does not use cookies, does not fingerprint visitors, and does not collect personal data. It is designed to be GDPR-friendly and aligns with our approach of minimising tracking. Logged-in areas of the Service (dashboard, onboarding) are not included in this analytics.
10. Children
The Service is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice on the Service.
12. Contact
For privacy-related questions, contact us at hello@getairth.com.
If you are unsatisfied with our response, you may contact the UK Information Commissioner's Office (ICO) at ico.org.uk.