Privacy Policy

Effective date: 2026-09-28

Grocery Insights helps you turn grocery receipts into organized purchase records and understand your spending. This Privacy Policy explains how A3C Labs Inc. ("A3C Labs", "we", "us", or "our") handles personal information when you use the Grocery Insights app, the Grocery Insights websites, and related services (the "Service").

Receipt information can reveal personal purchasing habits. We treat receipt content and information derived from it as personal information when it can be associated with you.

1. Who is responsible for your information?

A3C Labs Inc., a Canadian corporation, is responsible for personal information under its control.

For privacy questions, requests, or complaints, contact our Privacy Officer at support@groceryinsights.ca. Include "Privacy Request" in the subject line so we can direct your message appropriately.

This policy describes our practices; it does not replace a consent request where one is required. We explain relevant processing when you use a feature and obtain consent where required by law.

2. Information we collect

Account and sign-in information

We collect account information such as your account identifier, name and email address when provided, preferences, and information needed to authenticate and secure your account. When you use Sign in with Apple, Apple supplies an identifier and the information you choose to share, which may include a private relay email address. We do not receive your Apple Account password.

Receipts and information you enter

We collect the receipt images you submit and information extracted from them. This can include retailer names and addresses, transaction dates, item descriptions, quantities, weights, prices, discounts, taxes, totals, currency, and identifiers or payment details visible on the receipt.

We also collect your corrections, categories, manual purchase entries, budgets, preferences, and other information you enter into features you use. Where available, this includes grocery lists, notes, and household-inventory records. Reports, comparisons, classifications, and other information generated from your records may also be linked to your account.

Please avoid uploading unnecessary sensitive information. A receipt can contain a loyalty number, a personal address, or payment details even when these are not needed to organize your purchases.

Subscription information

We receive information needed to recognize and support your App Store subscription, such as the product purchased, transaction identifiers, subscription status, relevant purchase and renewal dates, and expiry or cancellation information. We also record relevant purchase, restore, and subscription-screen interactions to operate and troubleshoot subscriptions.

Apple handles App Store payment processing. We do not receive your full payment-card number from Apple.

Technical and usage information

When you use the Service, we collect information needed for its operation, security, troubleshooting, and improvement. This can include your IP address, app and operating-system versions, device information, language, timestamps, request identifiers, feature interactions, processing status, performance information, and error or security logs.

Support communications

We collect the messages, contact details, attachments, and troubleshooting information you provide when you contact us. Please do not send passwords, verification codes, full payment-card numbers, or unrelated personal documents.

3. How and why we use information

We receive information directly from you, through your use of the Service, from Apple for sign-in and subscriptions, and from providers that process information for us.

We use it to:

Create, authenticate, maintain, and protect your account.
Process receipts, identify purchases, assign categories, check amounts, and provide the records, reports, budgets, and other features you request.
Verify subscription access, process subscription-status updates, and help with purchase or restoration problems.
Respond to support and privacy requests and send necessary account, service, and security communications.
Understand feature use, diagnose problems, improve parsing and categorization, and maintain service reliability, using information appropriate to those purposes.
Prevent fraud and misuse, investigate security incidents, comply with legal obligations, and establish or defend legal claims.

We do not sell your personal information or provide your receipt content to advertisers. We do not use receipt content for targeted advertising.

4. Receipt processing and artificial intelligence

Receipt processing uses optical character recognition (OCR), automated checks, product matching, and artificial intelligence (AI). These systems interpret receipt content, identify purchases, assign categories, and help generate your requested insights.

Cloud processing is involved. Depending on the feature and processing route, receipt images, extracted text, item descriptions, and relevant context may be sent to OpenAI or Google's Gemini services. A processing request may involve more than one provider, including a fallback provider when an earlier attempt cannot complete successfully. Not every provider receives every receipt.

We explain third-party AI sharing and request your permission before personal information is sent for that processing. Camera or photo-library permission is separate from permission to share information with AI providers. Declining AI processing prevents the features that need that processing from operating; it does not authorize us to send the information anyway.

Provider-side processing can involve temporary storage, processing caches, and security or abuse-monitoring records. These are separate from the receipts saved in your Grocery Insights account. Their retention depends on the service used, applicable settings, and legal or security requirements. Contact our Privacy Officer for information about the processing arrangements relevant to your request.

Consent to receipt processing is not consent to publishing your receipts, using them for advertising, or using identifiable receipt content to train a general-purpose AI model. A materially different use would require an appropriate notice and any additional consent required by law.

Reports and comparisons may analyze your purchase history to describe your spending habits. We do not use this processing to decide your eligibility for credit, insurance, employment, or similarly significant opportunities. Automated results may be incomplete or incorrect. Review them against your original receipt and use available correction tools or contact support.

5. Who may receive information?

We disclose information only as needed for the purposes in this policy, including to:

Infrastructure providers, including Amazon Web Services, for hosting, databases, storage, networking, backups, and operational security.
AI and OCR providers, including OpenAI and Google Gemini as described above, for receipt interpretation and related processing.
Apple, for account authentication, app distribution, subscriptions, entitlement verification, and related platform functions.
Support and business-service providers, such as email, diagnostics, security, and professional advisers, where needed to support and operate the Service.
Authorities or other parties, where disclosure is required or permitted by law, or is necessary and lawful to protect rights, investigate fraud, or respond to a security incident.
Parties involved in a business transaction, such as a proposed merger or transfer of the Service, subject to applicable law and appropriate confidentiality and use restrictions.
Other recipients you authorize, when you direct us to share information or provide the required consent.

We require providers handling information on our behalf to protect it and restrict its use through appropriate service terms and safeguards. Authorized personnel may access information when reasonably needed for support, security, or operation of the Service. Receipt records are not a public feed.

Apple and other third parties may also collect information directly from you under their own relationship with you. Their own privacy policies govern that independent collection.

6. Where information is processed

Information may be stored or processed in Canada, the United States, and other countries where our providers operate. Hosting some parts of the Service in Canada does not mean that all receipt processing, authentication, support, or backups remain in Canada.

Information processed outside your province or country may be subject to local laws and lawful access by courts or public authorities. We remain responsible for information under our control and use appropriate contractual, organizational, and technical safeguards for provider processing.

7. Permissions, storage technologies, and your choices

You choose which receipts or other content to submit. Camera access enables receipt capture; photo access or the system photo picker enables you to select an existing image. You can manage the permissions available to the app in your device settings. Restricting access may prevent the corresponding feature from working.

The Service may store session information and preferences using app storage, browser storage, or similar technologies. Operational records help us understand whether features work correctly. Where we offer optional analytics or similar non-essential technologies that require consent, we explain them and request that consent before enabling them.

You may withdraw consent for processing that relies on consent by contacting our Privacy Officer or using an available in-app control. We will explain any consequences for features that need the information and any legal restrictions on withdrawal. Withdrawing consent does not undo processing already lawfully completed.

Necessary service and security communications are separate from promotional messages. We send promotional electronic messages only where permitted by law and provide a way to unsubscribe from them.

8. How long we retain information

We keep personal information only for as long as reasonably needed for the purposes described in this policy, taking account of legal obligations and the sensitivity of the information.

Account and receipt records: We generally retain your account information, submitted receipt content, corrections, and associated records while needed to provide your account and the features you use, or until deletion is completed.

Support, security, and subscription records: Limited records may need to remain after account closure to resolve an open support issue or dispute, prevent fraud, verify a transaction, or meet a legal obligation. We limit this retention to the relevant purpose rather than retaining all receipt content indefinitely.

Backups and recovery copies: Deleted information may remain in restricted backup or recovery copies until those copies expire or are replaced under the applicable retention schedule. It is not available for normal account use during that period. Recovery procedures must respect completed deletion requests.

Provider records: Temporary AI processing records, caches, and provider security logs have separate retention arrangements, as described in Section 4.

Information that has been genuinely anonymized so that it can no longer reasonably identify you may be retained for service analysis and improvement. Removing a name alone does not make information anonymous.

9. Deleting your account

You can initiate account deletion using the account-deletion option in the app. Contact support@groceryinsights.ca if you need help accessing or completing the process.

We may verify your identity before acting on a deletion request. Deletion removes or anonymizes account-linked information from active systems, except for limited information that must or may lawfully be retained for the purposes described above. Where processing takes time, we will explain the process and relevant timing. Backup and provider copies are handled under their applicable retention arrangements.

Deleting an account is different from signing out, uninstalling the app, or cancelling a subscription. Deleting your Grocery Insights account does not automatically cancel an Apple subscription. Manage cancellation separately through your Apple Account. Restoring a purchase does not restore deleted Grocery Insights records.

10. Access, correction, and privacy requests

Subject to applicable law, you may request access to your personal information, correction of inaccurate information, deletion, withdrawal of consent, or a portable copy of eligible information. These rights are not dependent on having an active paid subscription.

Send your request to our Privacy Officer. We may need to verify your identity using information proportionate to the request. We respond within the time required by applicable law and explain any lawful limitation, refusal, or extension.

You may also raise a privacy complaint with us. You do not have to give up the right to contact the Office of the Privacy Commissioner of Canada or the appropriate provincial privacy regulator, including the Commission d'accès à l'information du Québec where applicable.

11. Safeguards

We use administrative and technical safeguards appropriate to the information, including access restrictions and protections for information transmitted to the Service. Security controls are intended to prevent unauthorized access, disclosure, alteration, or loss; no service can guarantee that these events will never occur.

Protect your device and sign-in credentials. Contact support promptly if you believe someone has accessed your Grocery Insights account without permission.

12. Children and minors

Grocery Insights is not directed to children under 13. We do not knowingly collect personal information from a child without the consent required by applicable law. Where local law requires parental or guardian consent for a higher age threshold, that requirement applies.

A minor should use the Service with the involvement of a parent or legal guardian, particularly when making a subscription purchase. Contact our Privacy Officer if you believe a child has provided information without the required consent so we can investigate and take appropriate action.

13. Changes to this policy

We may update this policy as the Service, our practices, or legal requirements change. We will publish the revised policy with an updated effective date, provide additional notice for material changes where appropriate or required, and obtain new consent where required. A policy update alone does not authorize a new use that requires your consent.

14. Contact

Privacy Officer, A3C Labs Inc. support@groceryinsights.ca