Privacy Policy

Version date: 20 April 2026

Effective date: 20 April 2026

Welcome to EcoLove (愛環保) (hereinafter “this App”, “we”, or “us”). We value your personal data and privacy and are committed to handling your personal data in accordance with the Personal Data (Privacy) Ordinance, Cap. 486 of the Laws of Hong Kong (“PDPO”) and other applicable laws.

This Privacy Policy explains:

  1. What information we collect
  2. Why we collect it
  3. How we use, retain, disclose, and protect it
  4. How you can manage and exercise your rights in relation to your personal data

If you have any questions about this Policy, please contact us as follows:

1. Scope

This Policy applies to products and services we provide to you through:

  1. The EcoLove (愛環保) mobile application
  2. Online features, customer support, and after-sales communications related to this App
  3. Related electronic services we may launch in the course of our business

If a specific product, activity, or feature has its own privacy notice, supplementary terms, or terms of service, those documents take precedence for that feature where they conflict; where not specifically addressed, this Policy applies.

2. Principles for processing personal data

We will use reasonable endeavours to ensure that we:

  1. Collect only data that is directly related, necessary, and proportionate to our services
  2. Process personal data lawfully, transparently, and fairly
  3. Use data only for the purposes stated or purposes directly related to them
  4. Implement reasonable technical and administrative measures to protect data security
  5. Delete or anonymise data when it is no longer needed

3. Categories of personal data we may collect

Depending on the features you use, we may process the following categories of data.

3.1 Account and identity data

When you register, sign in, or maintain an account, we may process:

The App currently supports third-party sign-in, including:

3.2 Address book and contact details

When you add, edit, or use addresses, we may process:

3.3 Recycling requests and order data

When you submit a recycling request, use the recycling cart, or view orders, we may process:

3.4 Content you upload

When you use upload features, we may process:

3.5 Chat and customer support

When you use order chat or support, we may process:

3.6 Points, QR code, and account display

When you use account-related display features, we may process:

The QR screen is intended for staff or service personnel to identify your account for points or service workflows.

3.7 Local preferences and cache

To improve your experience, the App may store preferences and cache locally on your device, such as:

Such data is stored mainly on your device for faster loading and continuity.

3.8 Device and technical data

To keep the App running, we may process limited technical data, such as:

Unless required by law or necessary for a specific feature, we do not collect unrelated device data without justification.

4. How we collect personal data

We collect data mainly through:

4.1 Information you provide

For example when you input, select, upload, or submit data when:

4.2 Data generated when you use the service

For example:

4.3 Data from third-party services

For example when you use Sign in with Apple, Google Sign-In, or Firebase capabilities, those services provide necessary data under their authorisation mechanisms.

5. How we use your personal data

We process your personal data for purposes including:

5.1 Account features

5.2 Recycling orders and fulfilment

5.3 Uploads and attachments

5.4 Customer service and chat

5.5 Localisation and personalisation

5.7 Utilities such as copy address

We do not read other clipboard content because of this feature.

5.8 Security and stability

6. Device permissions and purposes

We do not enable sensitive permissions without your action. Permissions are usually requested when you use the related feature.

6.1 Camera

If you deny camera access, most features still work, but you cannot take photos in-app.

6.2 Photo library / media

If you deny access, you cannot pick from the library; other features are unaffected.

6.3 Files / documents

6.4 Clipboard (write)

We do not read unrelated clipboard content for this feature.

7. Local storage and cache

To improve experience, the App may save data locally on your device. It is generally used for preferences, cache, and quick restore, and is not automatically visible to other users.

Local data may include:

You may remove some local data by uninstalling the App, clearing app data, or removing content in relevant features.

8. Third-party services and SDKs

We may use:

8.1 Firebase Authentication

8.2 Firebase Firestore

8.3 Firebase Storage

8.4 Sign in with Apple

8.5 Google Sign-In

8.6 Expo / React Native components

Third parties may process technical data under their own privacy policies. We use reasonable efforts to limit third parties to what is necessary and to manage access and scope appropriately.

9. When we share personal data

We do not sell your personal data.

We share data only when necessary, for example:

9.1 To provide services you request

With authentication, database, storage, or infrastructure providers as needed for processing.

Such as when you choose Apple or Google sign-in.

When we must comply with law, court orders, regulators, or lawful process.

9.4 To protect rights and safety

Where necessary to protect this App, our users, staff, service providers, or the public.

9.5 Corporate transactions

In mergers, acquisitions, asset transfers, financing, or similar events, data may be transferred or reviewed as permitted by law. We will take reasonable steps to ensure recipients continue to protect the data appropriately.

10. Retention

We retain personal data only as long as needed for the purposes in this Policy, unless a longer period is required by law.

Generally:

  1. Account data is kept while your account exists.
  2. Address data is kept while you keep those records.
  3. Order data is kept as needed for operations, audit, disputes, and compliance.
  4. Chat and attachments are deleted or anonymised after service completion and a reasonable retention period.
  5. Local cache is removed or becomes unavailable when you delete content, clear app data, or uninstall the App.

When you request account deletion, we will delete or anonymise related data where permitted by law and technically feasible.

11. Cross-border transfer

Cloud and technology providers may be located outside Hong Kong; your data may be transferred, stored, or processed outside Hong Kong.

Where that occurs, we take reasonable measures to ensure a level of protection comparable to what Hong Kong law requires, such as contractual safeguards, access controls, encryption in transit, storage restrictions, and limited data access.

12. Security

We use reasonable technical and administrative measures, including:

  1. Authentication and access controls
  2. Data transmission protections
  3. Restricted cloud access
  4. Logging and error monitoring
  5. Limited internal access
  6. Minimising unnecessary processing

No internet or electronic storage is perfectly secure; we cannot guarantee zero risk but we continue to apply reasonable safeguards.

13. Your rights

Under applicable law and the PDPO, you may:

13.1 Access

Request confirmation of whether we hold your data and apply to access it.

13.2 Correction

Request correction if data is inaccurate, incomplete, or outdated.

13.3 Erasure

Where permitted by law, request deletion of certain personal data.

Where processing is consent-based, you may withdraw consent; withdrawal does not affect processing that already occurred lawfully before withdrawal.

13.5 Direct marketing

If we conduct direct marketing in future, we will seek consent as required by law; you may opt out at any time.

13.6 Local data

Manage some data in-app, e.g. edit or delete saved addresses, remove recycling cart items, clear store cart or favourites, change language or font size.

For access or correction requests, we may ask for information to verify your identity as permitted by law, and may charge a reasonable fee as allowed under the PDPO.

14. Minors

This App is not primarily directed at children. If you are under 18, please use the App only with a parent or guardian’s consent and guidance.

If we learn we have collected a minor’s data without appropriate consent, we will delete it as soon as reasonably practicable.

15. Changes to this Policy

We may update this Policy to reflect feature changes, service processes, legal or regulatory requirements, or security and operational arrangements.

Updated versions will be published in the App, on our website, or other appropriate channels and take effect on the stated effective date.

If an update is material, we will notify you in a prominent way.

16. Contact us

For questions about this Policy, how we process personal data, or access, correction, or deletion requests, contact:

If you believe our processing does not comply with applicable law, you may contact the Office of the Privacy Commissioner for Personal Data, Hong Kong.

Last updated: 20 April 2026

Effective date: 20 April 2026