This Privacy Policy explains what information Trashium handles when you use the platform to schedule recyclables pickups, earn Green Credits, and redeem rewards. We've tried to write it in plain language rather than dense legalese.

To run pickups and rewards, Trashium may collect the following:

• Account data — your name, email, and the role your account is set to (household, collector, or admin).
• Contact details — phone number and email, used to confirm and coordinate pickups.
• Address & location data — your pickup address and operational area (for example Rishra, Howrah, Shyamnagar, Tarakeswar, or Hugli-Chinsura), used to route crews and quote area-specific rates.
• Pickup details — the waste category, estimated and verified quantity, scheduled date, and status of each request.
• Rewards data — your Green Credits balance, eco-level, badges, streaks, and redemption history.

• Scheduling, confirming, and tracking doorstep pickups.
• Calculating fair, area-specific scrap rates and crediting your rewards after a pickup is verified.
• Letting collectors and admins manage routes, verify weights, and run day-to-day operations.
• Improving the service — understanding which areas and materials see the most activity.
• Basic fraud prevention — spotting misuse such as inflated quantities or duplicate reward claims.
• Communicating with you about your pickups and account.

Trashium does not sell your data. Information is shared only with the people who need it to complete a pickup:

• Collectors see the pickup details and address needed to reach your door.
• Admins can view operational data to manage routes, pricing, and rewards.
• Recycling partners receive aggregated material, not your personal account details, where relevant.

Pickup routing and the collector route map use approximate, area-level coordinates tied to your registered address and operational sector. The map view is rendered with Leaflet using open map tiles. Trashium does not track your live device location in the background; location is only used in the context of scheduling and completing a pickup.

• Authentication and session handling run through Supabase Auth, so your login is protected by an established provider rather than home-grown code.
• Role-based access keeps household, collector, and admin views separated, with admin functions gated behind the admin role.
• Data lives in a managed Postgres database with row-level security policies on its core tables.
• Access to operational data is limited to the roles that need it.

You can:

• Access the account and pickup information held about you.
• Ask us to correct details that are wrong or out of date.
• Request deletion of your account data.

Because this is a demo project, please send these requests to the project team and allow a little time for us to action them manually.

As the project evolves, this policy may change. We'll update the date at the top of the page when it does. Significant changes will be reflected directly here rather than sent as notifications.