Privacy Policy

What is North and Tomorrow?

The North app is built by Tomorrow. Tomorrow provides services that helps you track and improve your carbon footprint (the "Services"), which is powered by data from your phone and connected third-party services.

The entire purpose of the Services is to process and store information for you. Our Services are designed so all of this processing and storage can happen in your app on your phone, without having to occur on our servers.

Some functionalities will require processing and storing of this data on our servers - most of our users find the improvements and other benefits from the Service far outweigh the slight reduction in privacy. However, if you are not comfortable with us processing and storing your information, then you are under no obligations to send us any data and should not use these functionalities.

TLDR

Your privacy is critically important to us. At Tomorrow, we have a few fundamental principles:

  • Your account is completely private by default.

  • You can add as much or as little data as you want.

  • You can delete your account and data at any time.

  • We are very protective of our user's data and privacy.

  • We intend to make it easy to share your profile with friends or the public, but you do not have to.

  • Information you post or sync may be seen by others depending on your settings.

  • We do not sell your data - we only make money from people paying us directly.

  • Aggregate information may be used for research, quality assurance, and improving the Service with your explicit permission ---for example, using the taps on a screen to improve the placement of buttons, or categories of transactions to improve the categorization.

  • We will tell you when connecting a third-party service gives us access to that data (if that service requires Tomorrow to act as a middle-man, but does not send your North info to them. It is a one way connection. For example, if you connect your smart meter in some specific countries, that gives us access to your electricity usage, but does not give your utility company access to any of your North data.

Who We Are

We are Tomorrow acting through the Danish company Tmrow ApS, company reg. (CVR) no. 39101211, (collectively referred to herein as "Tomorrow," "we," "us," or "our"). We provide the Services through web and mobile apps including those listed below ("Mobile Apps" or "Apps"):

  • North iPhone App

  • North Android App

  • Tomorrow Company Dashboard

BY USING THE APPS AND SERVICES, YOU CONSENT TO THE COLLECTION, USE AND TRANSFER OF YOUR PERSONAL DATA FOR PROCESSING AS DESCRIBED IN THIS PRIVACY POLICY.

In order to comply with the requirements of the Danish Data Protection Act and the European General Data Protection Regulation (together "GDPR") for our consumers and users, this Privacy Policy outlines the legal basis on which we process your Personal Data and provides other information required by GDPR.

Information About Your Personal Data

This Privacy Policy relates to data about you, your devices, and your interaction with our Services.

"Personal Data" is information that can be used to identify you, directly or indirectly, alone or together with other information. This includes things such as your full name, email address, phone number, precise location, device IDs, certain cookie and network identifiers, and "Activity Data"

Tomorrow collects, uses, discloses and processes Personal Data as outlined in this Privacy Policy, including to operate and improve the Services and our business; for advertising and marketing; and to provide you with innovative carbon footprint tools and services, as further described in this Privacy Policy.

How to Contact Us and our Data Protection Officer

If you have any questions, comments, or concerns about how we handle your Personal Data, you may contact us by sending a message to [email protected] or contacting us at Tmrow ApS, Njalsgade 19D, 2300 Copenhagen, Denmark.

Privacy Settings

Within our Services there are multiple privacy sharing settings: Private, and Shared, and Public. Tomorrow's Services are designed to measure and reduce your carbon footprint. As such, you are able to control what Personal Data you share and with whom you share it.

By default, your privacy settings are set to "Private", and no data will be shared with us or others. We encourage you to adjust the sharing settings to best meet your objectives and sharing comfort level.

Deleting Information and Accounts

You may delete your account at any time by contacting us at [email protected] Once deleted, your data, including your account, username, or any other related content, cannot be restored.

Note that the content you have shared with others (for example, through saving photos), exported from the Services, or that others have copied may also remain visible after you have deleted your account or deleted the information from your own profile. Your public profile may be displayed in search engine results until the search engine refreshes its cache.

What information do we collect?

When you sign up for an account, we start building your profile and adding data to it. A basic user account has details like your email address. This can be pre-filled via a connected account by a social login like Facebook login, or manually entered.

The App tracks activities you have input manually but it is mostly powered by the other services and devices you connect to it. We have many integrations and are constantly adding more. We will update this list as the data we collect evolves. The more services you connect to your account, the more data you will be able to see on your profile and in the App. What you feel comfortable connecting and sharing is up to you.

Each type of account has different content and various amounts of personally identifiable information, so you may be comfortable with connecting some and not others. For example, you might be comfortable connecting your trips from your Uber account, but not the transactions from your bank account.

In most cases, your App will connect directly to your accounts, without reaching our servers. Tomorrow will in these cases not be able to read, write or modify the data, unless you decide to share it with us.

In the cases where you allow us to be the middle-man in order to provide you access to your data in your App, we use our access to your accounts only to load the information we need, never to write or modify your data in any way.

In the cases where you allow us to be the middle-man in order to provide you access to your data in the App, we load data once when your account is first connected, and then periodically to keep your account up to date. This data is processed and stored on Tomorrow servers so it can be accessed through your App. In these cases, when you disconnect an account, we also delete all of the associated data that was imported from that account.

In addition to the integrations to third-party services, you can enter information manually into the App. This data will not be shared with Tomorrow or anyone else, unless you decide to do so.

COOKIES

These are required to log in to your North account and for basic web browsing features. When you visit the Services, a cookie will be stored on your computer.

What Are Cookies

As is common practice with almost all professional websites this site uses cookies, which are tiny files that are downloaded to your computer, to improve your experience. This page describes what information they gather, how we use it and why we sometimes need to store these cookies. We will also share how you can prevent these cookies from being stored however this may downgrade or 'break' certain elements of the sites functionality.

For more general information on cookies see the Wikipedia article on HTTP Cookies.

How We Use Cookies

We use cookies for a variety of reasons detailed below. Unfortunately in most cases there are no industry standard options for disabling cookies without completely disabling the functionality and features they add to this site. It is recommended that you leave on all cookies if you are not sure whether you need them or not in case they are used to provide a service that you use.

Disabling Cookies

You can prevent the setting of cookies by adjusting the settings on your browser (see your browser Help for how to do this). Be aware that disabling cookies will affect the functionality of this and many other websites that you visit. Disabling cookies will usually result in also disabling certain functionality and features of the this site. Therefore it is recommended that you do not disable cookies.

The Cookies We Set

  • Email newsletters related cookies: This site offers newsletter or email subscription services and cookies may be used to remember if you are already registered and whether to show certain notifications which might only be valid to subscribed/unsubscribed users.

  • Surveys related cookies: From time to time we offer user surveys and questionnaires to provide you with interesting insights, helpful tools, or to understand our user base more accurately. These surveys may use cookies to remember who has already taken part in a survey or to provide you with accurate results after you change pages.

  • Forms related cookies: When you submit data to through a form such as those found on contact pages or comment forms cookies may be set to remember your user details for future correspondence.

Third Party Cookies

In some special cases we also use cookies provided by trusted third parties. The following section details which third party cookies you might encounter through this site.

  • This site uses Google Analytics which is one of the most widespread and trusted analytics solution on the web for helping us to understand how you use the site and ways that we can improve your experience. These cookies may track things such as how long you spend on the site and the pages that you visit so we can continue to produce engaging content.\ For more information on Google Analytics cookies, see the official Google Analytics page.

More Information on cookies

Hopefully that has clarified things for you and as was previously mentioned if there is something that you aren't sure whether you need or not it's usually safer to leave cookies enabled in case it does interact with one of the features you use on our site.

However if you are still looking for more information then you can contact us by sending us an information at [email protected].

LOG FILES

The Services use log files. Stored information does not store IP addresses, browser type, internet service provider (ISP), but stores referring/exit pages, platform type, date/time stamp, and number of clicks. This information is used to analyze trends, administer, protect and secure the Services, track member movement in the aggregate, and gather broad demographic information for aggregate use. These files may be stored on our servers or on analytics platforms that we use.

Who can see your content?

By default, your account is set to private and you are the only one who can see your profile and your data. There are three simple visibility options: Private, Shared or Public.

The default is Private, so your account starts off as completely private.

If people add you as a friend (and you accept), or you request that someone be your friend, they will be able to see your profile and all your weekly reports. Be careful when adding friends on the Service, and only accept people that you know and trust. If you do not wish to give them access to view your complete Tomorrow profile, then you should not accept their friend request.

If you decide to become part of an organization or a public community, members of this organization and this community will be able to see your profile and your weekly reports.

That said, some people may choose to make their page completely public and transparently share it with the world. We have designed most of the views of the Apps with this in mind, to analyze and share your stats in a way that is not embarrassing or dangerous. Public profiles can be viewed by anyone, and may occasionally be featured on our homepage and other parts of the Services.

Tomorrow staff can not view your profile, unless you share your data for testing or support purposes, but will never share anything not made public.

Even if you decide to share your data with us, we will never share or sell your details to any third-parties.

API ACCESS & EXPORTING

There is currently no public API to get data out of the Services. Your account data can be exported in the App.

YOUR COMPANY ON TOMORROW

If your company has a Tomorrow membership, you may be able to join your company on the Services. Joining will give you a Pro membership, and it may also give other members in the company access to certain details from your account--- depending on what you agree to share.

GDPR Details

HOW WE COLLECT AND USE PERSONAL DATA

We collect your Personal Data in a number of ways and for various purposes, including:

  1. When you register for an account

  2. When you decide to share your data with us

  3. When you connect an integration that requires us to act as a middle-man to sync data to your account.

  4. When you purchase products or services through our Services

  5. When you communicate with us or sign up for promotional materials.

  6. When you engage with our online communities or advertising.

  7. When you access third party products and services.

  8. When we collect data from third parties or publicly-available sources.

  9. When we leverage and/or collect cookies, device IDs, location, data from the environment, and other tracking technologies.

  10. When we aggregate or centralize data.

  11. When we link you to friends or communities across platforms.

  12. When you take carbon footprint tests or assessments; share content or achievements; or invite friends.

  13. When we provide you geographically relevant Services, offers, or advertising.

  14. When you ask us to customize products, or Services.

  15. When we comply with Legal Requirements or Obligations, Law Enforcement, and for Public Safety Purposes (Country/Region-Specific Disclosures may apply).

HOW INFORMATION IS SHARED

We may disclose your Personal Data for the purposes as described in the prior section of this Privacy Policy, and in the following ways:

  1. To the public if you set your account to public

  2. To people you have approved as friends on the Service

  3. To other Users/Tomorrow/North Registered Users

  4. To affiliates and partners

  5. To Service Providers and Vendors

  6. For Advertising and Marketing

  7. For Certain Analytics and Improvement

  8. For Interest-Based Advertising

  9. For Legal Compliance, Law Enforcement, and Public Safety Purposes

  10. In the event of an actual or contemplated sale of Tomorrow

PUBLICLY AVAILABLE INFORMATION

Subject to your privacy settings, some of your information and content may be publicly accessible.

AFFILIATES AND ACQUIRORS OF OUR BUSINESS OR ASSETS

We may share your Personal Data with affiliates under common control with us, who are required to comply with the terms of this Privacy Policy with regard to your Personal Data. If Tomorrow becomes involved in a business combination, securities offering, bankruptcy, reorganization, dissolution or other similar transaction, we may share or transfer your Personal Data in connection with such transaction.

TRANSFERS OF YOUR PERSONAL DATA TO OTHER COUNTRIES

The Personal Data Tomorrow processes, and all associated services and systems, including registration, is kept on servers in the European Union. If you are located outside of the European Union, please be aware that Personal Data we collect will be processed and stored in the European Union (the data protection and privacy laws in the European Union may offer a lower level of protection than in your country/region).

By using our Services and submitting your Personal Data, you agree to the transfer, storage, and/or processing of your Personal Data in the European Union. Where and as required, we will seek your explicit consent as outlined in this Privacy Policy.

European Union rights

If you are habitually located in the European Union, you have the right to access, rectify, download or erase your information, as well as the right to restrict and object to certain processing of your information. While some of these rights apply generally, certain rights apply only in certain limited circumstances. We describe these rights below:

ACCESS AND PORTING

You can access much of your information by logging into your account. People in the EU can find and export their history in the App.

RECTIFY, RESTRICT, LIMIT, DELETE

You can also rectify, restrict, limit or delete much of your information by logging into your account and deleting particular integrations, data points, or the entire account.

OBJECT

Where we process your information based on our legitimate interests explained above, or in the public interest, you can object to this processing in certain circumstances. In such cases, we will cease processing your information unless we have compelling legitimate grounds to continue processing or where it is needed for legal reasons.

REVOKE CONSENT

Where you have previously provided your consent, such as to permit us to process data about you, you have the right to withdraw your consent to the processing of your information at any time. For example, you can withdraw your consent by updating your settings or disconnecting an integration. In certain cases, we may continue to process your information after you have withdrawn consent if we have a legal basis to do so or if your withdrawal of consent was limited to certain processing activities.

COMPLAIN

Should you wish to raise a concern about our use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local supervisory authority.

Legal Basis for Processing

This section addresses the legal basis for processing your data if you reside outside Denmark. Some processing is addressed in multiple sections because more than one legal basis may apply depending on the circumstances or service.

For the purposes of applicable data protection laws, Tomorrow is the controller of the Personal Data you provide to us ("Data Controller"). As a Data Controller, we process the Personal Data we maintain about you in accordance with this Privacy Policy.

We collect and process your Personal Data for a variety of purposes outlined in this Privacy Policy. In certain cases, separate consent is not required, including:

  1. For the performance of a contract

  2. To meet legal obligations

  3. For Legitimate Interests

Consent as a Basis for Processing

In some cases, we will ask for your consent to process your Personal Data. You may indicate your consent in a number of ways, including, as permitted by law, ticking a box or connecting an integration, to indicate your consent when (i) providing us with your Personal Data through our Services or a form (including enrolling in Promotions); or (ii) registering or creating an account with us. Due to different countries' laws governing consent for the collection and use of Personal Data, the requirements for consent will differ across regions. We may request your consent for a number of activities including:

  1. Tomorrow Marketing and Communication

  2. Third Party Marketing

  3. Collecting Mobile Device IDs, Advertising IDs, and Data from Sensors

  4. Processing Sensitive Personal Data

  5. Collecting and Sharing Location Data

  6. Research

  7. Advertising

  8. Transfer of Data

  9. Automated Processing

  10. To Enable Social Sharing and Connect with Us on Social Media

  11. Promotions

MANAGING PREFERENCES AND WITHDRAWING CONSENT

You may at any time withdraw your consent with future effect and without affecting the lawfulness of processing of your Personal Data based on the consent you provided before you withdrew it, and exercise other controls regarding website and online data collection, interest-based advertising, your communication settings, and app preferences. Depending on the Service, collection and use of Personal Data may be required for the Services to work. To withdraw your consent, you can delete your account which will stop the future processing of Personal Data.

INTEREST-BASED ADVERTISING

We do very little advertising, and mostly rely on word of mouth for growth. Occasionally we will do advertisements to get more users for the Service. Interest-based advertising is advertising that is targeted to you based on your web browsing and app usage over time and across websites or apps.

How We Protect Information

DATA RETENTION

We will retain your Personal Data for as long as you maintain an account or as otherwise necessary to provide you the Services. Since part of the Service is keeping your history for you to view later, we will generally retain data as much as possible. We will also retain your Personal Data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Where we no longer need to process your Personal Data for the purposes set out in this Privacy Policy, we will delete your Personal Data from our systems, unless we are required to keep data according to applicable legislation.

Where permissible, we will also delete your Personal Data upon your request. If you have questions about our data retention practices, please contact us through our Support Team at [email protected]

SECURITY

We implement appropriate technical and organizational safeguards to protect against unauthorized or unlawful processing of Personal Data and against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to Personal Data. Please be advised, however, that we cannot fully eliminate security risks associated with the storage and transmission of Personal Data.

Although we strive to employ reasonable protections for your information that are appropriate to its sensitivity, we do not guarantee or warrant the security of the information you share with us and we are not responsible for the theft, destruction, loss or inadvertent disclosure of your information or content.

LINKS TO OTHER WEBSITES

Please note that this Privacy Policy does not apply to the practices of companies that we do not own or control or to people that we do not employ or manage. Our Services may provide a link, recommendations or otherwise provide access to third party sites. We provide these links merely for your convenience. We have no control over, do not review, and are not responsible for third party sites, their content, or any goods or services available through the third party sites. Our Privacy Policy does not apply to third party sites, and any data you provide to third party sites, you provide at your own risk. We encourage you to review the privacy policies of any third party sites with that you interact with.

CHILDREN

We do not knowingly collect Personal Data online from children under 16 (note that the minimum age may vary based on country/region, and on local law). If you become aware that a child has provided us with Personal Data without parental consent, please contact us through our Support Team. If we become aware that a child under 16 has provided us with Personal Data without parental consent, we will take steps to remove the data and cancel the child's account.

Privacy Policy Changes

Although most changes are likely to be minor, Tomorrow may change its Privacy Policy from time to time, especially as we add new features and improvements to the Services.

Tomorrow encourages visitors, members and users to frequently check this page for any changes to its Privacy Policy. Most changes will be around keeping the details up to date or in updating it to reflect changes in legal requirements, and not material changes to how we actually handle your privacy. If we make significant changes, we may send you a notification through email. Your further use of the Services after a change to our Privacy Policy will be subject to the updated policy.

If you object to anything in this Privacy Policy, you should stop using the Services and delete your account.

That's it! Thanks for reading.