Effective: 1st October, 2026 · Who we are: Sustainability Markers Group (“SMG”, “we”), operated by Gaurang C. This policy covers the Sustainability Markers iPhone app (“the app”) and our website, sustainabilitymarkers.com.
The short version
- The app is for city staff. We collect only what we need to run it: your work email address, the name you give when you sign up, and the city and role we grant you.
- The app doesn’t track you: no advertising, no analytics companies, nothing shared with other apps or websites. We never sell personal information, and we ask only for what’s listed here.
- Our website counts visits with Google Analytics, which uses cookies (below).
- The figures in the dashboards are about cities, not about people or individual households.
- You can delete your account in the app: Settings, then “Delete my account”.
What we collect, and why
When you sign up and sign in (app). Your work email address and the display name you enter, a user ID, the city or cities you can see and your role, and when you signed in. Sign-in uses a one-time code sent to your email, so there is no password. We use this to confirm who you are, show you your city’s dashboards and keep other cities’ data from you.
Files a city administrator uploads (app). The file, its category, subcategory and provider, the note you add, who sent it and when. Spreadsheets can carry the author’s name in their properties. SMG staff review each file. An accepted file moves into SMG’s own records and is removed from the app’s systems; a rejected file is deleted once your city is told.
Account deletion requests (app). We record your request and its time, so we can complete it.
On your iPhone. The app keeps your sign-in session in the iPhone’s Keychain, readable only while the phone is unlocked, and not copied to backups or other devices. Face ID and Touch ID run on the phone; the app never receives your face or fingerprint data.
Messages you send us (website and email). The contact form’s name, email address and message, and the Get Dashboards form’s details (your name, role, city, email and phone). We use them to reply and to set up service.
What we don’t collect. Your location, contacts, photos or advertising identifiers. The app never uses your camera or microphone: it doesn’t ask your iPhone for permission to, so it can’t. It contains no advertising or analytics tools and sends no push notifications.
On our website. sustainabilitymarkers.com uses Google Analytics (through Google’s Site Kit plugin) to count visits and see which pages people read. It sets cookies in your browser and sends Google information such as the pages you view, your browser and device, and your approximate location. You can block these cookies in your browser settings or with Google’s opt-out add-on. The forms use Google reCAPTCHA to stop spam, which also sends Google information about your browser.
Who processes information for us
We use these companies to run the service, under their own security and privacy terms, and only for that purpose:
- Supabase: our database and sign-in sessions (servers in the USA).
- Microsoft: sign-in and the one-time code email (Entra External ID), and file storage for our records and encrypted backups (OneDrive).
- Hostinger: hosting for sustainabilitymarkers.com.
- Google: Google Analytics on our website, and reCAPTCHA on our forms.
- Apple: delivering the app (TestFlight and the App Store).
We don’t sell personal information or share it for advertising. We may disclose it if the law requires.
Who can see it
SMG staff, to run the service. Your city’s administrator knows who has access to your city’s dashboards, because the city decides who is on its list. Staff at other cities never see your information or your city’s private figures.
How long we keep it
- Your account: while you have access. When you delete your account, or your city asks us to remove you, we delete it within 14 days and email you when it’s done. Encrypted backups keep a copy for up to about 40 days before they’re replaced. If your city’s subscription ends, we keep your account for 90 days, without access, in case your city renews; then we delete it.
- The record that you accepted the Terms: which version and when, under your anonymous account number, with no name or email. We keep it after your account is deleted, as our record of who agreed to which Terms.
- Uploaded files: as described above.
- Messages: only as long as we need them to answer and follow up, and never more than 12 months after the conversation ends. We don’t promise to keep them that long. A message that leads to your city subscribing becomes part of that city’s records.
Your choices
- Delete your account in the app (Settings, then “Delete my account”), or without the app as described at sustainabilitymarkers.com/delete-account.
- Ask us for a copy of your information, or to correct it, at info@sustainabilitymarkers.com. Depending on where you live, you may have other rights under state law; contact us and we’ll help.
Security
Information travels encrypted (HTTPS). Each city’s data is kept apart in the database itself, so one city can’t read another’s. Our backups are encrypted. No system is perfect: if a breach affects you, we’ll tell you and your city as the law requires.
Children
The app and the dashboards are for city staff and the public, not directed to children, and we don’t knowingly collect information from children.
Changes
We’ll post any change here with a new date. If a change matters to how we use your information, we’ll tell you in the app.