Privacy Policy

1. Who's accountable

A real person is responsible for your information at Faircart. Reach our Privacy Officer any time at privacy@faircart.ca with questions, access requests, or complaints.

2. What we collect

• Email — only if you create an account. We use magic-link / Google sign-in; we never store passwords.
• Shopping lists — items you add, saved to your account. Anonymous lists stay in your browser's local storage, not our database.
• Postal code — only if you provide one, to show prices for your area. We never collect precise/GPS location.
• Receipt photos — if you use the receipt scanner, the image is read entirely in your browser (on-device OCR). The photo is not uploaded to us; only the line items you choose to submit are saved.
• Privacy-first, cookieless analytics — anonymous, aggregate counts of what's used and what's broken, so we can fix it. That's it. The exact list of what we measure — and the red lines we won't cross — is in section 9. Open your dev tools and check us.

3. Why we collect it (and your consent)

We use your information only to run the service: sign you in, save and sync your lists, show prices for your area, and improve our data and shrinkflation detection. We ask for it as you use the relevant feature, and you can withdraw consent at any time by deleting your account or emailing us.

4. Who we share it with

We do not sell your personal information, and we never share it with grocery retailers. We rely on a small set of service providers (“sub-processors”) to operate:

• Supabase — database & authentication
• Vercel — application hosting
• Google — optional sign-in (OAuth)
• Resend — transactional email (e.g. price alerts), if you opt in

5. Where your data lives (cross-border)

Our providers above may store and process data on servers in the United States. While there, your information may be accessible to U.S. authorities under U.S. law. By using Faircart you consent to this cross-border processing. We use providers that protect data in transit (HTTPS) and at rest.

6. How long we keep it

We keep your account data only as long as your account is active. Delete your account and we remove your personal data (email, lists, alerts) within 30 days, except where law requires us to retain something longer. Anonymous, aggregate price/shrinkflation data is not personal information and may be kept.

7. Your rights

• Access the personal data we hold about you
• Correct anything that's wrong
• Delete your account and associated data at any time
• Withdraw consent / use Faircart without an account
• Complain to the Office of the Privacy Commissioner of Canada if you're unhappy with our response

Email privacy@faircart.ca and we'll action requests promptly.

8. Safeguards & breach notification

Your data is protected with row-level security in Supabase and encrypted in transit over HTTPS. If a breach ever creates a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada as required by law.

9. Analytics — exactly what we measure, and the red lines

We use PostHog, a privacy-first product-analytics tool, configured as locked-down as it goes: cookieless (a random anonymous token in your browser's local storage — no cookies, no cross-site anything), no auto-capture, no session recording, and your IP is not kept. Our host, Vercel, also gives us aggregate cookie-free page counts served from our own domain. If your browser sends Do Not Track or Global Privacy Control, we don't send analytics at all — zero requests.

The short honest list of what we actually record:

• Page views — the page path only. Never the query string (that's where your list rides), so your list never tags along.
• The compare funnel — that a list was submitted (how many items — a number, not the items), that a comparison ran, and what rendered: how many stores ranked, how many items matched, how long it took.
• Honest-absence states — how often people hit “no matches”, partial results, errors, or our data-outage page. This is how we find what's broken.
• Unmatched items only — if we can't match an item anywhere (say, “oat milk 2L”), we record that one term so we know what to cover next. Never your whole list, never who searched it. Anything that looks like personal info (an email, a phone number, a postal code) is dropped before it leaves your browser.
• A came-back marker — whether a browser runs a second, different comparison within 14 days. The comparison itself stays on your device; only the fact “yes, a second one happened” is counted.

And the red lines. We do not: use Google Analytics, any Meta/Facebook pixel, any ad network, or any cross-site tracker; fingerprint your device; record your session or keystrokes; build a profile on you; follow you around the web; or sell data. Ever. Your grocery list is used to run your comparison — it is not attached to any identity, and there is no account needed to use it.

10. Cookies

Only essential cookies for sign-in and session management. Analytics uses no cookies at all. No third-party advertising cookies, ever.

11. Changes

If we update this policy we'll change the date above and, for material changes, give notice in the app. Questions? privacy@faircart.ca.