← Back to Celiac Sentry

Privacy Policy

Last updated: April 2026

Who we are

Celiac Sentry is operated by Harwick Digital, a registered Canadian business based in New Brunswick. Contact us at support@celiacsentry.ca

What data we collect

Celiac Sentry is designed with privacy first. We collect the minimum data necessary to provide the service:

• Receipt images: When you scan a receipt, the image is sent securely (encrypted in transit) from your device to our Supabase edge function (hosted in Canada), which forwards it to Anthropic's AI for gluten-free item identification. Receipt images pass through our servers for processing only — they are not permanently stored on our servers. A copy is retained in your device's local storage so you can review past receipts. You may also choose to manually share images to a cloud service from the app.
• Receipt data: Item names, prices, calculations, store names, dates, and eligible-amount summaries are stored in our Canadian-hosted Supabase database, associated with your anonymous identifier, and cached on your device. This data is encrypted in transit.
• Manually edited data: Any items you add, edit, or mark as verified are stored locally on your device alongside the original AI-detected data.
• Item sharing splits: If you use the shared item splitting feature, the number of people sharing and the resulting eligible amount are stored locally with the receipt.
• Anonymous device identifier: Celiac Sentry uses anonymous authentication — no account creation or email address is required. We assign an anonymous identifier to your device via Supabase (a PIPEDA-compliant database hosted in Canada, ca-central-1 region) for scan rate-limiting and abuse prevention purposes only. This identifier cannot be linked back to you personally.
• Subscription and purchase status: We receive your subscription status from Google Play via RevenueCat, our subscription management provider. We do not store your payment information — billing is handled entirely by Google Play.
• Receipt and financial data: Item names, prices, calculations, store names, dates, and tax summaries are stored in your Supabase account associated with your anonymous identifier. All data is encrypted in transit.
• Usage data: We collect anonymous scan counts for rate limiting purposes. This data cannot identify you personally.
• Display name (optional): If you choose to enter a name during onboarding, it is stored on your device for display purposes only and is not required to use the app.
• Terms acceptance record: When you tap "I Agree" on the terms acceptance screen, we store the date, time, and version of the terms you accepted both locally on your device and in our secure Supabase database hosted in Canada (ca-central-1). This record exists to confirm your informed consent and to determine whether you need to re-accept updated terms in future.

Smart Features — local learning data

To reduce repetitive data entry Celiac Sentry stores two types of learning data locally on your device:

• Weight memory: When you enter a GF product's weight and category, that information is saved so future scans of the same product can apply the weight, category, and eligible amount automatically.
• GF corrections: When you manually mark an item as gluten-free, the item name keywords are stored locally and passed to the Anthropic AI as part of future scan prompts to help it identify the same item automatically. These keywords are treated the same as receipt images — processed by Anthropic's commercial API and subject to the same privacy protections.

Both features can be disabled in Settings → Smart Features. Disabling weight memory stops auto-fill but does not delete saved data. You can clear all smart feature data by uninstalling the app or using the backup/restore feature.

What we do NOT collect

• We do not sell your data to any third party — ever.
• We do not require account creation or an email address to use the app.
• We do not link your anonymous device identifier to any personally identifying information.
• We do not share your personal financial data with advertisers.
• We do not collect your precise location.
• We do not use your data to train AI models.
• We do not permanently store your receipt images on our servers — they pass through only for processing.
• We do not access any cloud storage you use for manual backups.

Our commitment to your data protection

Celiac Sentry handles health-adjacent and financial data. We take this seriously. Here is why we chose Anthropic as our AI provider specifically for privacy reasons: Unlike some AI providers whose free tiers allow human reviewers to read your submitted data, Anthropic's commercial API — which Celiac Sentry uses — contractually prohibits using your data for model training and applies contractual limits on data retention. Receipt images are sent for processing only and are not permanently stored by us. We will never switch to an AI provider with weaker privacy protections without notifying you in advance.

AI processing and explicit consent

When you scan a receipt, the image is compressed on your device and sent securely to our Supabase edge function (hosted in Canada), which forwards it to Anthropic's AI to identify gluten-free items and extract receipt data. The processing flow is: your device → our Canadian-hosted Supabase edge function → Anthropic's AI. While our database and edge function are hosted in Canada, Anthropic performs the AI processing in the United States. By using the scan feature, you explicitly consent to your receipt images being sent to Anthropic's AI (a US-based provider) for processing.

Anthropic's commercial API does not use your data to train AI models and applies contractual limits on data retention. No personally identifying information is sent alongside the image — only the compressed image data itself. Because Celiac Sentry uses anonymous authentication, no name, email, or account information accompanies your scans.

During onboarding, you will be asked to explicitly confirm your understanding and consent to this AI processing before scanning is enabled. You may withdraw consent at any time by discontinuing use of the scan feature. For full details see Anthropic's privacy policy at anthropic.com/privacy.

Third-party AI provider: Anthropic, PBC — 548 Market St, San Francisco, CA 94104, USA. anthropic.com

Subscription management: RevenueCat, Inc. — subscription status and purchase verification is handled by RevenueCat. RevenueCat receives your Google Play purchase token to verify subscription status. No payment card data is shared with us or RevenueCat. See RevenueCat's privacy policy at revenuecat.com/privacy.

Database provider: Supabase, Inc. — your anonymous identifier and receipt data are stored in Supabase's Canada (ca-central-1) region, and our scanning edge function runs in Canada. All data is encrypted in transit. Note that while data storage and the edge function are Canadian-hosted, the AI processing step is performed by Anthropic in the United States.

Receipt image storage and backup

Receipt images are stored in your device's permanent documents directory and will survive cache clearing and app restarts. They will not survive an uninstall or phone replacement unless you manually back them up using the in-app backup feature. We are not responsible for data loss resulting from device failure, loss, or theft. Automatic cloud backup is planned for a future update.

Your rights under PIPEDA

As a Canadian resident, you have the right to access, correct, or delete your personal information. Since most data is stored locally on your device, you control it directly. For server-held data (your anonymous identifier and subscription status), contact support@celiacsentry.ca. We will respond within 30 days.

Data retention

Receipt data and images are stored on your device until you delete them or uninstall the app. Account data is retained while your account is active and for a reasonable period after cancellation. You may request deletion by contacting support@celiacsentry.ca

Children

Celiac Sentry is not directed at children under 13. We do not knowingly collect information from children under 13.

Changes to this policy

We will notify users of material changes via the app with at least 30 days notice. For material changes, we will require users to explicitly re-accept the updated terms before continuing to use the app.

Contact

Privacy questions: support@celiacsentry.ca