Privacy

Who is responsible

Weald is made and run by diggimedia, the developer named on its Google Play listing, which is responsible for your data. Write to [email protected] about anything on this page.

Without an account

Everything in the app except your own home, household and saved trails works without an account. Then:

• Where you are is used only on your phone, for nearest first, the map's blue dot and walking a trail, and only when you ask. It is never sent anywhere.
• What's on, food trucks, buses, weather and the map come from Weald's server at api.theweald.app. Like any server it sees your phone's IP address, which is kept in its logs for 30 days to keep it secure and fix problems.
• The map is Google Maps, so Google sees the requests for the map itself. Directions open the Google Maps app.
• Notifications come through Google's Firebase Cloud Messaging, sent to everyone who chose that kind, not to you by name. Reminders for an event you asked about work the same way. Weald's server does not know which phones get them.
• App analytics uses Google's Firebase Analytics: when the app is installed and opened, the app's version, the phone's model and Android version, and the country. Not who you are, your account, where you are or your advertising ID, and none of it is used for ads. You can turn it off in the app under More, Privacy, which also deletes the phone's analytics ID.

With an account

An account is optional. If you make one, Weald's server keeps:

• your email address and a scrambled (hashed) password, or the link to your Google account if you sign in with Google, to sign you in;
• your name, if you give it;
• your phone number, if you give it;
• your home: its address and where you put it on the map, if you set it, and who is in your household;
• the trails you save for an event.

The people in your household see your first name, your home and the trails you share with them. Weald's admins can see a home's address and who lives there, to verify it. Nobody else sees any of it, and none of it is sold or used for ads.

For your bin days, Weald's server asks Huntingdonshire District Council for the collections at your address, sending only the postcode and the property's reference number, never who is asking. When you look up your address in the app, your phone's own address search (Google's) is used.

Who else handles it

• Google: Firebase Cloud Messaging, Firebase Analytics, Google Maps and Google sign-in, as described above.
• Cloudflare, which carries the traffic to theweald.app and api.theweald.app.
• Purelymail, which sends Weald's emails, such as the code to confirm your address.

Why, and for how long

Weald uses your account details to give you what you asked for: signing in, your home on the map, your bin days, your household and your trails. Server logs and app analytics are kept because Weald has a legitimate interest in keeping the service secure and knowing how many residents use it; you can turn analytics off.

Your account details are kept until you delete your account. An address your household has moved on from is kept for up to a year. Server logs are kept for 30 days, and backups of Weald's database for 7 days.

Deleting your account

In the app, open More, then Account, then Delete account. Without the app, see deleting your Weald account. Your account is deleted at once; it is gone from backups within 7 days.

Your rights

You can ask for a copy of what Weald keeps about you, ask for it to be corrected or deleted, or object to how it is used, by writing to [email protected]. If you are not happy with the answer, you can complain to the Information Commissioner's Office at ico.org.uk.

Weald is not meant for children under 13.

If this page changes, the date at the top changes with it.