Privacy Policy

1. Who's accountable

A real person is responsible for your information at Faircart. Reach our Privacy Officer any time at privacy@faircart.ca with questions, access requests, or complaints.

2. What we collect

• Email — only if you create an account. We use magic-link / Google sign-in; we never store passwords.
• Shopping lists — items you add, saved to your account. Anonymous lists stay in your browser's local storage, not our database.
• Postal code — only if you provide one, to show prices for your area. We never collect precise/GPS location.
• Receipt photos — if you use the receipt scanner, the image is read entirely in your browser (on-device OCR). The photo is not uploaded to us; only the line items you choose to submit are saved.
• Basic, privacy-respecting analytics — aggregate usage to improve the tool. No ad-tracking, no selling.

3. Why we collect it (and your consent)

We use your information only to run the service: sign you in, save and sync your lists, show prices for your area, and improve our data and shrinkflation detection. We ask for it as you use the relevant feature, and you can withdraw consent at any time by deleting your account or emailing us.

4. Who we share it with

We do not sell your personal information, and we never share it with grocery retailers. We rely on a small set of service providers (“sub-processors”) to operate:

• Supabase — database & authentication
• Vercel — application hosting
• Google — optional sign-in (OAuth)
• Resend — transactional email (e.g. price alerts), if you opt in

5. Where your data lives (cross-border)

Our providers above may store and process data on servers in the United States. While there, your information may be accessible to U.S. authorities under U.S. law. By using Faircart you consent to this cross-border processing. We use providers that protect data in transit (HTTPS) and at rest.

6. How long we keep it

We keep your account data only as long as your account is active. Delete your account and we remove your personal data (email, lists, alerts) within 30 days, except where law requires us to retain something longer. Anonymous, aggregate price/shrinkflation data is not personal information and may be kept.

7. Your rights

• Access the personal data we hold about you
• Correct anything that's wrong
• Delete your account and associated data at any time
• Withdraw consent / use Faircart without an account
• Complain to the Office of the Privacy Commissioner of Canada if you're unhappy with our response

Email privacy@faircart.ca and we'll action requests promptly.

8. Safeguards & breach notification

Your data is protected with row-level security in Supabase and encrypted in transit over HTTPS. If a breach ever creates a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada as required by law.

9. Cookies

Only essential cookies for sign-in and session management. No third-party advertising cookies.

10. Changes

If we update this policy we'll change the date above and, for material changes, give notice in the app. Questions? privacy@faircart.ca.