FreshLeft — Privacy Policy (Canada)

PIPEDA / Alberta PIPA compliant; App Store & Google Play ready

Last updated: November 6, 2025

This Privacy Policy explains how FreshLeft Technologies inc. ("FreshLeft", "we", "us") collects, uses, discloses

and protects personal information when you use the FreshLeft mobile application, website and services (the

"Platform"). We operate in Canada and are committed to complying with applicable privacy laws including the

Personal Information Protection and Electronic Documents Act (PIPEDA) and Alberta’s Personal Information

Protection Act (PIPA).

1. Who is the controller?

FreshLeft Technologies inc., Calgary, Alberta, Canada (support@freshleft.com) is responsible for your personal

information. For some processing (payments, sign in, hosting) we act together with service providers as

described below.

2. What information we collect

We collect information you provide and information generated by your use of the Platform:

• Account data: name, email, authentication method (email/password or Google/Apple), preferred language,

notification settings.

• Order & payment data: items ordered, pricing, pick up time, order history, payment tokens and status

(processed by Stripe or similar). We do not store full card numbers.

• Merchant data (for partners): business name, contact details, payout details, listing information, compliance

attestations.

• Device & usage data: app version, device identifiers, OS, logs, crash data, approximate location (when you

enable), cookies and similar technologies on our website.

• Communications: messages to support, feedback, survey responses.

3. Purposes of processing & legal bases

We use personal information to: provide and operate the Platform; process orders and payments; authenticate

and secure accounts; send transactional notifications (orders, receipts, service messages); provide customer

support; prevent fraud and abuse; comply with law; and improve the Platform (analytics, debugging).

Legal bases under PIPEDA/PIPA include: performance of a contract (providing the service), your consent (e.g.,

marketing notifications), and our legitimate interests (security, fraud prevention, service improvement),

balanced with your rights.

4. Push notifications & marketing

We may send transactional notifications that are necessary to provide the service (e.g., order status). We only

send marketing communications with your consent, which you can withdraw at any time via Settings or yourdevice OS settings.

5. Cookies & analytics

Our website may use cookies and similar technologies for essential functions and analytics. You can control

cookies via your browser settings. Within the app, we may use privacy friendly analytics to understand

aggregate usage and improve performance.

6. Sharing of information

We share personal information with trusted service providers solely to operate the Platform, subject to

contractual safeguards:

• Hosting & database: Supabase (managed Postgres/auth).

• Payments: Stripe (payment processing, tokens, payouts).

• Authentication: Google Sign In, Sign in with Apple (when you choose those options).

• Notifications: Apple Push Notification service (APNs), Firebase Cloud Messaging (FCM).

• Operational tools: customer support and email services.

7. International transfers

Some service providers may process data outside your province or outside Canada (e.g., in the United States).

We take reasonable contractual and technical measures to protect your information during such transfers.

8. Retention

We retain personal information only as long as necessary for the purposes above. Order and financial records

may be retained to meet legal, tax and accounting obligations. When no longer needed, data is securely

deleted or de identified.

9. Your rights

Subject to legal limits, you may request access to, correction of, or deletion of your personal information;

withdraw consent for marketing; and challenge our compliance. We will respond within a reasonable time. To

exercise rights, contact support@freshleft.com from your account email.

10. Account deletion

You can delete your account in app (Settings → Delete Account). This permanently removes your profile and

authentication. Certain records (e.g., transaction logs, aggregated analytics) may be retained as required by

law or for fraud prevention.

11. Security

We implement administrative, technical and physical safeguards appropriate to the sensitivity of the

information, including encryption in transit, role based access and logging. No system is perfectly secure;please protect your credentials.

12. Children

The Platform is not directed to children under 13. If we learn that a child under 13 has provided personal

information, we will delete it.

13. Third party links

The Platform may link to third party sites or services. Their privacy practices are governed by their own

policies.

14. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified in app or by email. Continued

use after an update means you accept the revised Policy.

15. Contact & complaints

To contact our Privacy Officer or submit a complaint, email privacy@freshleft.com or write to FreshLeft

Technologies inc., Calgary, Alberta, Canada. You may also contact the Office of the Information and Privacy

Commissioner of Alberta or the Office of the Privacy Commissioner of Canada.

© 2025 FreshLeft Technologies inc. All rights reserved.