Privacy policy

Mupolink provides community mapping tools for tree planting, tree care, heat hotspots, water stress, and related city planning. The service is intended only for people aged 18 or older. We do not knowingly offer accounts to children.

• Account and profile: email address, authentication identifiers, display name, ward or organisation, role, and age-attestation version and timestamp.
• Location: precise coordinates when you choose a map point, planting, hotspot, or report; approximate area, ward, and geocoded address where available.
• Contributions: reports, notes, categories, planting and tree-care updates, water issues, timestamps, status, points, and badges.
• Photos: tree and planting images you upload, associated storage metadata, and duplicate-detection data.
• Technical information: session, device, request, and security information generated by our app, hosting, authentication, and infrastructure providers.
• Communications: information you provide when contacting support or making a privacy request.

Location and photo access depend on your device permissions and the action you choose. Mupolink does not need continuous background location for its described mapping features.

We use information to authenticate accounts; provide maps and community contributions; connect contributions to the correct ward; help authorised planners prioritise planting, cooling, water, and tree-care work; process photos; detect duplicate submissions; provide optional AI-assisted checks and guidance; maintain, secure, troubleshoot, and improve the service; respond to requests; enforce our terms; and meet legal obligations.

Optional AI features use Google Gemini through a protected Mupolink backend. Before an AI photo check, the app explains what will be sent and offers a manual path. For that check, the selected photo is sent to assess whether it depicts a tree and to support duplicate detection; location, address, ward, and report notes are not included in that photo-check request. Other AI features may process report details needed to generate tree-care or native-tree suggestions. AI output can be incomplete or wrong and is not professional, safety, or emergency advice.

We disclose information only as needed to operate the service, including to:

• Supabase for authentication, database, file storage, and server-side functions.
• Mapbox and geocoding services for map display, place search, and converting coordinates and addresses.
• Google Gemini for optional AI processing described above.
• Expo and hosting/infrastructure providers to build, distribute, host, secure, and deliver the mobile and web services.
• Authorised city, ward, or programme planners who use contributions within their permitted geographic or administrative scope.

Mupolink also retrieves reference information or images from Wikimedia Commons, Wikipedia, and iNaturalist. Those services may receive ordinary network request data when content is fetched, and their own terms and privacy notices apply.

We may also disclose information when reasonably necessary to comply with law, protect people or the service, investigate abuse, or complete a business reorganisation with appropriate safeguards. We do not describe Mupolink as selling personal information.

Mapping contributions are designed to be shared within the Mupolink community and with authorised planners. Depending on the feature and permissions, others may see a map location, contribution details, ward, status, and a display name or community label. Do not include unnecessary personal information in notes or photos.

We retain account and contribution information while needed to provide the service, support legitimate operational and security needs, resolve disputes, and comply with law. Retention can vary by data type and programme. When an account is deleted, Mupolink initiates deletion of the account, profile, contributions, reports, and uploaded photos covered by the deletion flow. Limited records may remain where required by law, needed for security or dispute resolution, or temporarily present in provider backups.

Use the account deletion page or contact us if you cannot access your account.

We use technical and organisational measures intended to protect information, including authenticated access and database access controls. No system is completely secure, so we cannot guarantee absolute security. Our providers may process information in countries other than your own, where privacy laws may differ. We use provider and contractual safeguards appropriate to the services involved.

You can manage device permissions, decline optional AI photo processing, review or edit profile information, and delete your account. Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to complain to a regulator. Rights may be subject to legal exceptions. We may need to verify your identity before completing a request.

We may update this policy as the service changes. We will update the effective date and provide additional notice when appropriate.

Privacy questions and requests: privacy@mupolink.com. The identity and postal address of the responsible legal entity or data controller must be confirmed before launch.