Privacy policy

This page is a placeholder until a lawyer reviews a privacy policy (PIPEDA and Québec Law 25). It is not a privacy policy and is not legal advice.

A public beta policy should say, at minimum:

• What is stored: email, bar data, orders, photos.
• Supabase as processor, and the region of that database.
• If LLM_PROVIDER is xAI or OpenAI, ingredient-normalization prompts may leave Canada (often the US). Local Ollama keeps those prompts on the host machine.
• How to request deletion or anonymization of a host_id.
• Cookies or analytics, if any are added later.

See docs/DEPLOY.md in the source repo for the full checklist to take to counsel.