Privacy Notice

Charm Citizen Company is the data controller for the personal data collected through GreenRehab Audit. That means we decide why and how your data is used, and you can contact us with questions or requests about it.

• Account details: name, email address and login credentials.
• Audit content you create: project type, property location (address, ZIP, year built), rooms, material inventories, notes and photos you upload.
• Checklist and quote-request details you submit through the app.
• Support and contact messages you send us.
• Technical data such as device type, browser and IP address, used for security and product improvement.

• To create and secure your account (performance of our contract with you).
• To save your audits, photos and reports (performance of contract).
• To keep the service secure and prevent fraud (legitimate interests).
• To improve the product and fix problems (legitimate interests).
• To meet legal obligations where required.

• Service providers that host and operate the app (cloud hosting, authentication and storage providers), acting on our instructions.
• Paddle — when you buy a full report, our order process is conducted by our online reseller Paddle.com, which is the Merchant of Record for all our orders and processes your payment, tax and invoicing details. Payment card details go directly to Paddle and are never stored by us.
• Professional advisers (legal, accounting) where needed.
• Authorities where required by law.

We keep account and audit data while your account is active. If you delete your account, audit content and photos are deleted or anonymised; payment records processed by Paddle are retained as required by tax and accounting law. Technical logs are kept only as long as needed for security purposes.

You can request access to your data, a correction, a copy, or deletion of your data, and you can object to or restrict certain uses. Contact us to exercise any of these rights and we will respond within one month.

We use encryption in transit, access controls and per-account data isolation. Audit photos are stored privately and are only accessible to the account that uploaded them.

We use only essential cookies and browser storage needed to keep you signed in and run the app. We do not use advertising or third-party marketing cookies.

Questions about this notice or your data? Reach us through the contact details on our site, and we will respond as soon as possible.