Privacy Policy

1. Who we are

METIMO is a trading name of Calculate My Product Carbon Footprint Ltd (company number 11820814), registered at 11b Newton Court, Pendeford Business Park, Wolverhampton, West Midlands, WV9 5HB, United Kingdom. We are the data controller for personal data processed through the individual app. For company reporting features, we act as a processor on behalf of your employer (see section 8). Our ICO registration reference is ICO:00015440175.

We help you and your employer understand the greenhouse gas emissions from your commute, using UK Government (DEFRA/DESNZ) conversion factors. If you have any question about this policy or your data, contact us at privacy@metimo.io.

2. The data we collect

Depending on how you use METIMO, we collect the following categories of personal data:

• Account details: your name, email address, and a securely hashed password.
• Commute profile: your home postcode, your employer name and postcode, your approximate one-way commuting distance, the transport modes you use, and your typical working and work-from-home days.
• Commute activity: your weekly check-ins, calculated carbon emissions, holidays, and participation in low/no-carbon commute campaigns.
• Offset records: the offsets you purchase, the amount, and the certificate issued. Card payments are handled directly by Stripe — we never see or store your full card details.
• Usage data: basic technical information such as device type and pages visited, used to keep the service secure and working.

We use your home postcode only to estimate commuting distance. We do not track your live location. Please do not enter special category data (such as health information) into free-text fields.

3. How we use your data

• To provide the service: create your account, calculate your commuting carbon footprint, and show your history.
• To process carbon offsets and issue your certificates.
• To send service emails such as sign-in, invitations, password resets, and offset confirmations.
• To provide aggregated Scope 3 Category 7 reporting to your employer where you are part of a company account.
• To improve, secure, and troubleshoot the service.

4. Legal bases for processing

Under UK GDPR we rely on: performance of a contract (to provide the app you signed up for); our legitimate interests (to secure, maintain, and improve the service, and to help employers measure and reduce commuting emissions); your consent (where required, which you can withdraw at any time); and legal obligation (for example keeping records of transactions).

5. Carbon offsets and affiliate links

When you offset your commute, payment is processed by Stripe and a certificate is generated. When you shop low-carbon products, we may use affiliate links provided through AWIN; if you make a purchase we may earn a commission, which does not affect the price you pay. These partners process data under their own privacy policies.

6. Who we share data with

We do not sell your personal data. We share it only with the sub-processors that help us run the service, and with your employer where you belong to a company account (see section 8). Our current sub-processors are:

• Vercel — Application hosting and content delivery (USA / EU).
• Neon — Database hosting (account and commute data) (EU).
• Stripe — Payment processing for carbon offsets (USA / EU).
• Resend — Transactional email delivery (USA / EU).
• AWIN — Affiliate links for low-carbon products (EU / UK).

Where data is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or adequacy regulations.

7. How long we keep it

We keep your account and commute data for as long as your account is active. If you delete your account, we delete or anonymise your personal data, except where we must retain certain records (for example offset transaction records) to meet legal and accounting obligations.

8. Company accounts

If your employer provides METIMO to you, your employer is a data controller for the reporting they receive, and we process that data on their behalf as their processor under a data processing agreement — you should also refer to your employer's own staff privacy notice. Your employer receives aggregated commuting emissions for Scope 3 Category 7 reporting, and company administrators can see employee-level commute records within their own organisation for reporting and management. Administrators do not need your home postcode to view reports — it is used only to compute distance.

9. Your rights

You have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. You can download a copy of everything we hold about you, or permanently delete your account and commute history, from the Account & privacy page in the app. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Security

We protect your data with encryption in transit, hashed passwords, access controls, and reputable infrastructure providers. No system is completely secure, but we take reasonable measures to protect your information and to notify you and the regulator of any breach where required.

11. Children

METIMO is intended for use by working adults and is not directed at children under 16. We do not knowingly collect data from children.

12. Changes to this policy

We may update this policy from time to time. We will change the 'Last updated' date above and, for material changes, notify you in the app or by email.

13. Contact us

For any privacy question or to exercise your rights, email privacy@metimo.io or write to us at 11b Newton Court, Pendeford Business Park, Wolverhampton, West Midlands, WV9 5HB, United Kingdom. We will respond within one month, as required by UK GDPR.