Bidò · Privacy notice

Bidò is an Android app, an Alexa skill and this website: they remind you of waste collection days. This page explains what data they use.

Android app

The app works on your phone and keeps your calendar, reminders and settings there. It does not require an account and contains no tracking tools.

• Approximate location: only if you tap «Use my location», to suggest your municipality. The location stays on your phone: only the name of the municipality to search for reaches the service.
• Camera: only to read the QR code of a shared calendar. Images are neither saved nor sent.
• Notifications and alarms: for collection reminders, scheduled on your phone.
• Online calendars: to search for, download or publish a calendar, the app sends the service a random identifier of the installation, stored only as a cryptographic fingerprint.
• Municipality notices: if a municipality writes service notices, we keep the referent's institutional email, the municipality, the date of last login and only a cryptographic fingerprint of the password (never the password in clear) or of the reserved key, in order to know who wrote what.
• Error reports: if the app closes because of an error you can choose to share the report (for example by email). Nothing is sent automatically.
• Backup: you save the backup file wherever you prefer; it contains the keys of the calendars you published and of the Alexa links, so keep it carefully.

Bidò is not an official app of municipalities or waste collection operators, is not affiliated with government bodies and does not represent them: if in doubt, your municipality's calendar prevails.

Alexa skill

The skill receives from Amazon the interpreted text of the request (for example «what is being collected tomorrow») and an anonymous identifier of the Alexa account. Voice recordings stay with Amazon: Bidò does not receive them.

To remember which calendar you use, the service keeps a cryptographic fingerprint (hash) of that identifier, linked to the chosen calendar, and an encrypted copy of the same identifier, which is only used to send the skill the app's messages (for example «collection already put out», to remove Alexa's reminders). When you unlink the calendar or disable the skill, both are deleted. We do not keep name, address, email, location or the history of requests.

Calendar sent by the app

When you tap «Link to Alexa» in the app, the app sends a copy of your collection calendar (types of waste, days, any notes) and the name you gave to the place. The copy is private: it does not appear in the public catalogue and only the skill reads it. The pairing code is valid for ten minutes and can be used only once.

This website

The website uses no cookies, analytics tools or third-party advertising. When you search for a municipality, the text you type is sent to the Bidò service only to find matching municipalities, without associating it with you. The municipality pages show published calendars, without personal data. If you arrive from a link sent by email to a municipality, the service increments a visit counter for that municipality (date of first and last access and number of visits): no IP address, identifiers or other data about visitors are stored. The website is hosted on Cloudflare Pages, which may record visitors' IP addresses for a short time for security and to make the service work.

Web reminders on your phone

If on a municipality's page you tap «Turn on reminders», the Bidò service keeps: the technical delivery address that your browser assigns you for notifications (with its encryption keys), the municipality, the calendar and the area, the time you chose, the waste you want to follow and the date of the last reminder sent. We do not keep name, email, phone number or IP address.

They are only used to send you the notification with the waste to put out, at the time you chose. Messages travel encrypted through the browsers' notification services (Google for Chrome and Android, Apple for Safari and iPhone, Mozilla for Firefox, Microsoft for Edge): those services see that a message is arriving, not its content. We do not pass this data on to third parties.

The data is deleted by tapping «Turn off» on the same page or by writing to bido.app.rifiuti@gmail.com. It is deleted automatically when the browser's notification service reports that the address is no longer valid (for example after revoking the permission or uninstalling the app) and after five failed deliveries in a row. Reminders are optional: the website works without them too.

Invite a friend (referral)

In the app, under «Info», you can share a personal link (www.bidoapp.it/r/…) with a random code. If someone installs Bidò from that link, Google Play passes the code to the app, which communicates it to the service only once; when the app is then actually used (on at least two different days and with a municipality chosen) the invitation counts for you. You only see your own number of invitations and your position: there is no public list and we do not see names, emails or contacts, only the code and a cryptographic fingerprint of the installation and of the network. Any recognition for those who spread the word about recycling is not guaranteed: if it is provided for in future, it will have a published set of rules.

Reports to the municipality

From the app you can report to your municipality abandoned waste, a full or broken bin, an illegal dump, or that today's collection did not happen, and ask the municipality to publish its calendar. For a report of neglect the app sends the type of problem, a note, the address you write and, only if you choose, your location at the time of the report (with a permission requested at that moment) and an optional photo. Before sending, the app rebuilds the photo removing hidden data (for example the location and the phone model). Avoid showing people and number plates.

Reports are private: they are seen only by you, the municipality concerned (from its reserved area, without name or contact) and the service administrator. The municipality can reply with a sentence that you read in the app. You can delete your reports at any time; closed ones are deleted automatically after 90 days, the others after one year, photos included. We do not ask for name, email or phone: the person reporting is recognised only by a cryptographic fingerprint of the installation.

How long we keep the data

As long as the link is active. Data on the phone is deleted by uninstalling the app. The Alexa link can be deleted at any time: by telling Alexa «unlink the calendar», by disabling the skill from the Alexa app (the data is deleted automatically), or from the Bidò app with «Unlink Alexa».

Public calendars

Calendars and guides that users choose to publish in the catalogue are visible to everyone, without personal data. To limit abuse the service keeps cryptographic fingerprints of the IP address and of the app installation, never the original values.

To understand where a calendar is missing we count, anonymously and per day, how many times each municipality is opened in the app or asked about on Alexa: only the number is saved, not who searched for it.

Infrastructure and contact

The service is hosted on Cloudflare. We do not pass data on to third parties. For questions or to ask for your data to be deleted write to bido.app.rifiuti@gmail.com.

Last updated: 26 October 2026 (added invite a friend and reports to the municipality).