Privacy Policy

1.1 Information You Provide

• Account Information: Email address, password (hashed), display name
• Receipt Images: Photos of receipts you upload for price extraction
• Profile Data: Household settings, notification preferences, location preferences

1.2 Information We Extract

• Price Data: Product names, prices, quantities, units from your receipts
• Store Information: Store name, location, date of purchase

1.3 Automatically Collected

• Device Information: Device type, operating system, browser type
• Location Data: Approximate location (city/region level) for store matching
• Usage Data: Features used, pages visited, time spent
• Analytics: Aggregated usage patterns via Vercel Analytics

• To provide and improve our price tracking service
• To extract and process price data from receipts
• To generate personalized price recommendations
• To build aggregated, anonymized price intelligence datasets
• To prevent fraud, abuse, and data manipulation
• To communicate service updates and notifications
• To comply with legal obligations

We store data using Supabase (PostgreSQL) with servers located in North America. Receipt images are stored temporarily in secure cloud storage.

We may share data with:

• Service Providers: Cloud hosting (Vercel, Supabase), analytics, AI processing
• Community Features: Anonymized, aggregated price data is shared with other users
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Under PIPEDA (Canada) and applicable privacy laws, you have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Export: Receive your data in a portable format
• Withdraw Consent: Opt out of non-essential data processing

We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS) and at rest
• Row-Level Security (RLS) for database access control
• Secure authentication via Supabase Auth
• Rate limiting and abuse prevention
• Regular security audits

If you are accessing our service from outside Canada, your data will be transferred to and processed in Canada. By using our service, you consent to this transfer.

For EU/UK Users: We process data under legitimate interests for service provision. You may have additional rights under GDPR.

For California Users: Under CCPA, you have the right to know what data we collect and request its deletion. We do not sell personal information.

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification. Your continued use after changes constitutes acceptance.