Privacy Policy
This policy explains what Pacio collects, why, and what you can do about it. It's written to be readable. Where we had to use a technical term, we explain it.
1. Who we are
Pacio is operated by Pacio LLC, a Michigan limited liability company ("we", "us", "our"). The Pacio Android app reminds you about trash and recycling pickup and the home safety tasks most people forget — dryer vents, smoke alarms, and more. Contact:
- Email: support@pacioapp.com
- Website: pacioapp.com
Pacio is currently offered in the United States only. If you are accessing the app from outside the United States, please do not provide personal information through it.
2. What we collect and why
We only collect what the app needs to work. Here's the full list:
| Data we collect | Why | When |
|---|---|---|
| Email address | To create and sign in to your account, send verification and password reset emails | When you sign up |
| Password | To secure your account (stored hashed by Firebase Authentication — we never see it in plain text) | When you sign up |
| Year you were born (month/year) | To verify you are at least 13 years old per Section 8. We check your age and immediately discard the value — we do not store your birthdate. | When you sign up |
| Street address, city, state | To look up your local pickup schedule from your city's open data API and to derive your climate zone | When you complete address setup |
| Climate zone (derived from your address) | To show you the right home maintenance tasks for your climate | Computed from your address |
| Equipment list (items you own, like furnace, water heater) | To show you maintenance reminders for the equipment you have, and (v2.0+) to match against publicly available recall data | When you add equipment in the Home Maintenance section |
| Custom task names you create (Premium) | To remind you about tasks you've added | When you create a custom maintenance task |
| Equipment-request descriptions, missing-data reports, manual pickup-schedule entries | To process your request, improve our shared schedule database, and help other users in your city | When you submit them |
| Optional photos uploaded with an equipment request | To help us identify the equipment you're asking us to add to our library, when you submit an equipment request | Only if you voluntarily upload a photo |
| Firebase push token (FCM token) | To deliver pickup and maintenance reminder notifications to your device | When the app starts |
| Pickup schedule (trash day, recycling day/week, contractor) | To show your schedule and send reminders | Computed from your address or from your manual entry |
| Purchase token and subscription status | To deliver Premium features to paying customers | When you subscribe |
| Device crash logs and error events | To find and fix bugs | When a crash or handled error occurs |
| Equipment catalog submissions (the "Other" make/model text you type, plus your user ID and timestamp) | To expand our equipment catalog and to send a one-time thank-you push when we integrate your suggestion | When you type "Other" for make or model |
User content. Some text you type into Pacio (equipment requests, manual schedule entries, custom task names, no-data reports) is stored on our servers to deliver the feature you used and to improve accuracy for other users. Do not include sensitive personal information in these fields. You can edit or delete this content from the relevant screen, or by deleting your account.
What we do not collect. We do not request GPS permission. We do not collect contacts, phone number, browsing history, microphone or camera data outside of the optional photo upload, health data, financial data, or precise location. We derive an approximate latitude/longitude from your street address only for elevation-based climate-zone lookup — see Section 3.
Recall matching (v2.0+). The equipment you've added in the app — including any brand and model information you've entered or selected from our catalog — is used to match against recall data we pull from the U.S. Consumer Product Safety Commission's publicly available SaferProducts API. Matching happens on Pacio's own servers. Your equipment data is not sent to CPSC or to any other third party for matching. We pull the CPSC recall feed in bulk on a recurring schedule, store it in our database, and run matches against your equipment list there. A match produces a push notification (if you have notifications enabled) and an in-app recall card on the home screen. Recall coverage applies to any equipment you add, on both the free and Premium tiers.
Equipment catalog submissions (v2.0+). When you type "Other" for the make or model of your equipment instead of selecting from our catalog, we store the brand and model text you entered, your user ID, and a timestamp in our equipment catalog submissions collection. We use this to (a) expand the Pacio equipment catalog so future users can select the same brand from a dropdown, (b) notify you with a one-time thank-you push if and when your suggested brand is added, inviting you to switch your equipment entry to the standard catalog version, and (c) prevent abuse such as spam submissions. We do not share equipment catalog submissions with any third party. When you delete your account, we remove your user ID from these submission records; the brand and model text you submitted may remain in our catalog in unlinked form so other users can still benefit from the contribution.
3. Who we share with
Pacio uses the following third-party services. Each only gets the data it needs to do its job. We do not sell your data to anyone, and we do not share it with advertisers, data brokers, or marketers beyond the AdMob ad-serving integration in the free version.
| Service | What they receive | Purpose |
|---|---|---|
| Google Firebase (Auth, Firestore, Cloud Messaging, Cloud Functions, Storage, Crashlytics, App Check) — see Google Privacy Policy | Everything from Section 2 | Account, data storage, notifications, crash reporting — our backend |
| Google Play Billing — see Google Privacy Policy | Purchase token, product ID | Process subscriptions and verify purchases |
| Google AdMob (free tier only) — see Google Privacy Policy | Advertising ID, approximate location (city-level), device model | Show ads in the free version of the app |
| Google Geocoder (Android system service that proxies geocoding to Google) — see Google Maps Platform Terms | Street address, city | Convert your address to coordinates for climate-zone and pickup-schedule lookups |
| Open-Elevation (open-source elevation API operated by an independent maintainer at open-elevation.com) | Approximate latitude/longitude derived from your address (no street number, no name, no email) | Look up your home's elevation so we can determine your climate zone for relevant maintenance reminders |
SendGrid (a Twilio company; via our pacioapp.com domain) — see Twilio Privacy Notice | Email address and email body content | Send you verification, password-reset, email-change, multi-factor-enrollment, and other transactional emails |
| Your city / hauler's public API (varies by city — e.g. ArcGIS, Recollect, Socrata) | Street address, city | Look up your pickup schedule (not stored by them in any persistent user profile on our behalf) |
4. Where your data lives
Data is stored on Google Firebase servers in the United States.
5. How long we keep data
- Account data (email, address, equipment, pickup schedule, custom tasks): kept until you delete your account.
- Crash and error logs (
error_audit): kept for 14 days, then automatically deleted. - Crowdsource and accuracy data. When you correct a pickup schedule, report a missed pickup, or contribute to our city schedule database, we store that contribution along with your user ID so we can credit you, prevent abuse, and ask follow-up questions if needed. This makes the data pseudonymous — we can link it to you while your account exists, but we do not share it externally in a way that identifies you. When you delete your account, we remove your user ID from these records and keep only the corrected schedule, the city, and the contribution date. After that step we cannot link the record back to you, and we keep it indefinitely to improve accuracy for other users in your city. Where we publish or share city-level statistics, we share only aggregate counts that cannot be traced to any individual.
- Consent records. When you accept the Terms of Service or Privacy Policy at signup, we record a small audit entry containing your user ID, a timestamp, and the version of the document you accepted. We retain consent records for the life of your account plus 7 years after deletion, in line with Michigan's statute of limitations for contract claims.
- Account-deletion records. When you delete your account, we keep a short-term deletion confirmation in our primary database for 90 days (in case of a recovery dispute) and a long-term hashed record in a separate audit dataset (Google BigQuery) for 7 years. The long-term record contains only a one-way hash of your former Firebase user ID, the deletion date, and the deletion method. The hash cannot be reversed back to your account or email.
6. Your rights
You can do any of these at any time:
- Access your data — email us at support@pacioapp.com and we'll send you everything we have on you within 30 days.
- Correct your data — edit your address or equipment in the app's Account Settings.
- Delete your account and all data — use the "Delete Account" option in Account Settings, or email us at support@pacioapp.com. Deletion removes your Firebase account, all documents tied to you, and your stored photos. The audit records described in Section 5 (consent records and hashed deletion records) survive deletion as required by law.
- Export your data — email us and we'll send a JSON file of your account data.
- Object to processing — email us.
If you live in California, you have additional rights — see Section 7. If you live in another US state with a comprehensive privacy law (Virginia, Colorado, Connecticut, Utah, and others), the rights above apply to you, and we'll honor them on the same terms.
7. California Residents
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you additional rights described below.
Categories of personal information we collect. In the past 12 months we have collected the following CCPA categories of personal information from California residents:
| CCPA category | What it is for Pacio | Source |
|---|---|---|
| A. Identifiers | Email, Firebase user ID, FCM push token, advertising ID (free tier only) | You; your device |
| B. Customer records (Cal. Civ. Code §1798.80) | Street address, city, state | You |
| F. Internet/network activity | App interactions, crash logs, error events | Your device |
| G. Geolocation (approximate, not precise) | City-level location for ads (free tier only) | Your device, AdMob |
| K. Inferences | Climate zone derived from your address | Computed from your address |
| Other user content | Equipment list, schedule overrides, custom task names, request descriptions, optional photos | You |
We do not collect the following CCPA categories: biometric information, sensitive personal information (SSN, driver's license, precise geolocation, racial/ethnic origin, religion, union membership, genetic data, health, sex life), professional/employment data, education records, or audio/visual recordings (other than the optional equipment photo you choose to upload).
Sources. We collect personal information directly from you and automatically from your device.
Business purposes for which we use it. Account creation and authentication; delivering pickup and maintenance reminders; serving ads in the free tier; debugging crashes; preventing fraud and abuse; complying with law.
Categories of third parties we share with. Cloud infrastructure providers (Google Firebase), payment processors (Google Play Billing), email service providers (SendGrid), advertising networks (Google AdMob — free tier only), open-data city APIs, geocoding/elevation services. See Section 3 for details.
We do not sell or share your personal information as those terms are defined under the CCPA. We do not knowingly sell or share the personal information of consumers under 16 years of age.
Your CCPA rights. You have the right to:
- Know what personal information we have collected about you, the categories of sources and recipients, and the purposes of collection.
- Delete your personal information (subject to legal exceptions, including the consent and deletion records described in Section 5).
- Correct inaccurate personal information.
- Opt out of sale or sharing — we do not sell or share, so there is nothing to opt out of.
- Limit the use of sensitive personal information — we do not collect SPI.
- Non-discrimination — we will not deny service, charge a different price, or provide a different level of quality because you exercised a CCPA right.
How to exercise your rights. Email support@pacioapp.com from the address tied to your Pacio account, or use the in-app Settings → Account → Delete Account option. We will verify your identity by matching your email and confirming a one-time code. We respond within 45 days (extendable to 90).
Authorized agents. You may designate an authorized agent to make a request on your behalf. The agent must provide written, signed authorization, and we will verify your identity directly before acting.
Shine the Light (Cal. Civ. Code §1798.83). We do not share personal information with third parties for their direct marketing purposes.
8. Children
Pacio is intended for users aged 13 and older and is not directed at children under 13. We use a neutral age screen at signup that asks for your month and year of birth; we check the value against the 13+ floor and immediately discard it without storing. We do not knowingly collect data from children under 13. If you believe we have, email us at support@pacioapp.com and we'll delete it promptly.
9. Notifications
Pacio sends push notifications to deliver the core service: pickup reminders, maintenance reminders, and a monthly recap summarizing your activity. The monthly recap is enabled by default; you can turn it off at any time in Settings → Notifications → Monthly Recap. The recap body reads: on the free tier, "3 done, 5 coming up. 12 more unlock with Premium — for $2.99/mo." On Premium, "3 done, 5 coming up next month." (numbers vary by your activity that month). Pickup and maintenance reminders are core functionality and remain on while you have an active address or equipment. You can also disable all Pacio notifications at the Android OS level in your device's Settings → Apps → Pacio → Notifications.
10. Security
We use industry-standard measures to protect your data:
- Passwords are hashed by Firebase Authentication (we never see the plaintext).
- All data in transit uses HTTPS/TLS.
- Firestore security rules restrict access to your own data.
- Firebase App Check is configured to enforce in production builds and blocks abusive clients at the platform layer.
- Admin access to our backend is limited and requires Google account authentication with two-factor verification.
No system is 100% secure. If a breach ever affects your data, we will notify you by email within 72 hours as required by applicable law.
11. Advertising (free tier only)
The free version of Pacio shows ads served by Google AdMob. AdMob may collect your advertising ID and approximate location to show relevant ads. You can reset your advertising ID or opt out of personalized ads in your Android device settings under Privacy → Ads.
Premium subscribers see no ads and no ad-related data is collected.
12. Changes to this policy
If we update this policy, we'll post the new version at pacioapp.com/privacy-policy and update the "Last updated" date. If the changes are significant, we'll also notify you inside the app or by email.
13. Contact us
Questions about this policy or your data:
- Email: support@pacioapp.com
- Mail: Pacio LLC, PO Box 144, Davison, MI 48423