GreenKeeper Privacy Policy
How GreenKeeper handles local route records, optional sync, customer sharing, support and connected services.
GreenKeeper is a local-first outdoor service route diary operated by Blue Sparrow. This policy explains the information involved in the mobile app, optional synchronized services and customer-facing pages, along with practical controls for operators and the people represented in their records.
Overview
Blue Sparrow operates GreenKeeper as a solo developer based in India. GreenKeeper helps outdoor service professionals organize customers, properties, routes, visits, photographs, communications, invoices and external payment records. Core work begins locally; account, synchronization, delivery and public-page features use connected services when configured and chosen.
Blue Sparrow applies privacy principles reflected in the EU General Data Protection Regulation, the United Kingdom GDPR, privacy laws in the United States including applicable state rights, India's Digital Personal Data Protection framework, and other applicable regional requirements. This describes an operational commitment and is not a regulatory certification.
Blue Sparrow does not sell or rent personal data and does not use GreenKeeper business content for targeted advertising.
Data We Handle
Account data can include a Firebase identifier and Google-provided name, email address and profile information. Device and service data can include a device identifier, platform, app version, locale, timezone, push-permission state, Firebase Cloud Messaging token, authentication events, synchronization operations, timestamps, request identifiers, entitlement state, delivery status, security events and error information.
Operator and business content can include business name, owner name, phone, email, website, address, currency, logo, invoice numbering, external payment instructions, payment destinations and payment QR images. Customer and property content can include names, companies, phone numbers, email addresses, billing details, addresses, coordinates derived from entered addresses, access notes, hazard notes, preferences, gate or property context, tags and pinned notes.
Route and service content can include service templates, recurring schedules, route order, planned dates, checklist items, visit status, internal notes, customer-visible notes, prices, equipment reminders and communication templates. Files can include captured or imported visit photos, captions, business logos, payment QR images, generated invoice PDFs and email attachments.
Billing records can include invoice lines, amounts, discounts, taxes, due dates, external payment instructions and manual records of payments received outside GreenKeeper. GreenKeeper does not collect a customer's card or bank credentials to process payment. Google Play and RevenueCat handle app-subscription purchase and entitlement information under their own services.
Support and communication data can include a message, subject, optional rating, optional reply email, authenticated account identifier and delivery status. Customer-facing service requests can include a name, phone, email, address, requested service, preferred date and notes. Appointment confirmation pages can collect confirmation status, a requested alternative date and a customer note.
How We Use Data
Information is used to provide the local route diary, maintain customer and property records, schedule visits and local notifications, build checklists, store photos, generate reports and invoices, record external payments, synchronize supported content, provide public pages, deliver supported emails and push messages, manage subscriptions, enforce plan limits, respond to support and maintain service security and reliability.
GreenKeeper does not request the device's GPS location. When address geocoding is used, an entered service address is sent through the Blue Sparrow API to Nominatim to obtain latitude and longitude for route planning. The resulting coordinates can be stored with the service location and synchronized when cloud sync is enabled.
Camera and photo-library access occurs only when the user chooses to capture or import an image. Notification permission is used for selected reminders and push delivery. Permissions can be changed in device settings, although related features may stop working.
Depending on context, processing is based on providing the requested service, the user's choices or consent, legitimate operational and security needs, a business user's instructions, or an applicable obligation.
Storage and Residency
GreenKeeper stores its working database, preferences and queued files in the app's device sandbox. Android application backup is disabled and the checked-in backup rules exclude app databases, files and preferences, although device and operating-system behavior can change outside Blue Sparrow's control.
Local export creates an unencrypted bundle of selected CSV, JSON and manifest files in temporary app storage for user-directed saving or sharing. Anyone who receives or gains access to an exported bundle may be able to read its contents. Users should protect exported copies and remove them when no longer needed.
Blue Sparrow-controlled synchronized records, uploaded files and service backups are intended to remain in European Union infrastructure, subject to confirmation of the active production and backup deployment. This qualified intention does not apply to every provider or every item of data.
Blue Sparrow is operated from India and support access can occur from India. Google, Firebase, RevenueCat, Nominatim, mail, store and device-platform providers may process limited identity, notification, billing, address-request, communication or security information in other regions under their own infrastructure and safeguards.
Cloud and Backups
Cloud synchronization is an optional connected capability rather than a condition of recording core local work. When it is enabled and available, supported business records move through an outbox to the GreenKeeper API, and supported photos or other media upload to private service storage. Public pages and server-delivered email require relevant content to reach the connected service.
Service backups are maintained for continuity according to the active production configuration. Their exact location, rotation period, restoration scope and deletion schedule have not yet been confirmed with production evidence. Backups can preserve older copies temporarily after an active record is changed or deleted, and they are not intended as a user-controlled archive or a guarantee that every record can be restored.
The local export feature is separate from service backups. It creates files under the user's control and does not automatically upload them to GreenKeeper. Blue Sparrow cannot govern copies saved to another device, cloud drive, messaging app or recipient location selected by the user.
Public Links
GreenKeeper can create tokenized links for selected visit summaries, invoice previews and appointment confirmations. Current app-generated links expire after 30 days and can be revoked. The service uses a hash of the presented token for lookup, but anyone who obtains a working URL may access the content permitted by it until expiry or revocation.
Visit pages can expose business details, customer name, property label and address, visit date, status, customer-visible notes, checklist results and selected customer-visible photos. Invoice pages can expose business and customer names, invoice dates, line items, amounts, payment instructions, payment destinations, notes and a downloadable PDF. Appointment pages can expose a customer name, scheduled date and business details and can accept confirmation, rescheduling information and a note.
The optional service-request page is addressed by workspace identifier rather than a secret recipient token. It can display business information and accept contact, address, service, date and note fields from a visitor. Operators should enable and share it with the understanding that it is a public intake surface.
Unlisted or tokenized does not mean confidential or impossible to discover. A recipient can forward, copy, download or capture accessible material. GreenKeeper does not currently promise effective search-exclusion controls on every customer-facing page or a complete public-access log. Users should review content and recipients, revoke links promptly and avoid publishing unnecessary personal, financial, access-code, hazard or security-sensitive information.
Business Operator Responsibilities
A GreenKeeper business operator generally decides why and how customer and property information is entered and shared. Blue Sparrow generally acts as a service provider or processor for synchronized business content, subject to the feature and applicable requirements.
Operators must provide appropriate notices, have a valid reason to handle customer and property information, respect applicable choices, restrict internal notes and access information, obtain permission for photographs and communications where required, and respond to requests from people represented in their records. A customer should contact the relevant business operator first when practical.
Retention
Local records remain until removed through app controls, app-data clearing or uninstalling, subject to device behavior. Signing out does not itself clear the GreenKeeper database. Temporary exports and shared copies can remain wherever a user or recipient saves them.
Synchronized records and files generally remain while needed to provide the workspace and for limited periods afterward for deletion processing, security, support, billing records, service recovery or backup rotation. Exact production schedules for public access, logs, support records and backup expiry require operational confirmation.
The current account-deletion page starts an email request. After verification, the backend can mark the GreenKeeper user as deleted and create a tombstone that prevents normal account recreation, but the checked-in deletion implementation does not demonstrate physical removal of all synchronized workspace rows or uploaded media. It also does not delete the separate Firebase Authentication identity, clear local app data or cancel a Google Play subscription. Blue Sparrow will coordinate applicable deletion steps and provider requests, while backups, security records, purchase records, support messages and recipient-held copies can remain for their applicable periods.
Security
Safeguards include HTTPS or TLS in transit, provider-issued identity tokens, authenticated API access, database and workspace access controls, device sandboxing, hashed lookup of public-link tokens, link expiry and revocation, media validation and separation of local synchronization queues from server operations.
No system can promise complete security. Users should secure their device and Google account, keep GreenKeeper updated, limit sensitive access and hazard notes, review public content, protect exports and revoke links that are no longer needed.
Your Rights
Depending on location and circumstances, a person may have rights to know or access personal data, correct it, receive a portable copy, delete it, restrict or object to processing, withdraw consent, opt out of qualifying sale or targeted advertising, and raise a concern with a privacy authority. GreenKeeper does not sell personal data or use business content for targeted advertising.
Users can edit many records, control permissions in device settings, revoke supported public links, create local exports and request account deletion. For information entered by an outdoor service business, contact that business first when practical because it controls the customer record.
To submit a request, email [email protected]. Blue Sparrow may verify identity, account access and authority before acting. Requests are handled within applicable timeframes and without unlawful discrimination. An authorized representative may be asked to show authority.
Children
GreenKeeper is a business tool and is not directed to children. Blue Sparrow does not knowingly invite a child to create an operator account. A business user's notes or photos could incidentally include a minor; users must avoid collecting or sharing a minor's information unless it is necessary, appropriate, permitted and accompanied by any required guardian notice or permission.
If a parent or guardian believes a child's information was handled improperly, contact [email protected] so it can be reviewed and removed where appropriate.
International Transfers
Blue Sparrow is operated from India, Blue Sparrow-controlled synchronized content is intended for European Union infrastructure subject to production confirmation, and providers can process limited information in other countries. Privacy protections differ between regions.
Where safeguards are required, Blue Sparrow relies on available measures such as contractual protections, provider data-protection terms, recognized adequacy arrangements or consent where appropriate. The rights and contact channel in this policy remain available globally.
Changes
Blue Sparrow may update this policy when GreenKeeper, its providers or applicable requirements change. The updated date will change, and material changes may also be announced in the app or on https://bluesparrow.dev. Additional notice or consent will be provided where required.
Contact
Blue Sparrow is operated by a solo developer based in India.
- Privacy and data requests: [email protected]
- General support: [email protected]
- Website: https://bluesparrow.dev
Email provides a practical way to verify and track requests without publishing additional contact details.