Privacy Policy

Last updated: December 11, 2025

This Privacy Policy explains how Supa (the "App") collects, uses, shares, and protects information when you use the App.

1. Who We Are

Supa is developed and operated by Yeswelldone Creative Inc.("we", "us", "our"), a Canadian corporation located in Langley, British Columbia, Canada.

If you have questions about this policy or your data, contact us at hello@supafood.app.

2. What We Collect

We collect the information needed to provide the App’s core features (inventory tracking, recipes, meal planning, and account access).

  • Account information: email address and authentication details required to sign in (email/password, Sign in with Apple, or Google).
  • App content you add: food items, quantities, notes, categories, expiration dates, and similar information you choose to store.
  • Images and media: images you upload or associate with items/recipes (stored in our backend storage).
  • Email communications: when you request an authorization code, register, or reset your password, we send you transactional emails. If you opt in, we may also send project news updates or tester communications.
  • Device/technical data: basic device and app information (such as device type and operating system version) that may be logged by our infrastructure to keep the service reliable and secure.

We do not intentionally collect precise location data or sensitive government identifiers.

3. How We Use Your Information

  • Provide and operate the App and your account
  • Store and sync your inventory and related content
  • Generate recipe suggestions and meal planning features based on your content
  • Send transactional emails (sign-in codes, registration, password reset)
  • Send optional communications you consent to (newsletters, tester updates)
  • Maintain security, prevent abuse, and debug issues

4. Legal Basis and Consent

We process personal information with your consent or as needed to provide the App. You can withdraw consent for optional communications at any time (for example, by unsubscribing from emails).

5. Where Your Data Is Stored

Supa stores user data and uploaded images in Supabase(database and storage). Your data may be processed or stored in locations outside of Canada depending on Supabase’s infrastructure. We take reasonable steps to protect your information regardless of where it is processed.

6. Sharing and Third Parties

We do not sell your personal information. We share information only as needed to operate the App, comply with law, or protect our rights.

  • Supabase: hosts our database, authentication, and file storage.
  • Apple and Google: if you choose Sign in with Apple or Google, those providers process authentication and provide us with certain account identifiers and profile information according to your settings and their policies.
  • Email delivery: transactional and optional emails may be delivered through our authentication and infrastructure providers.

7. Data Retention

We keep your information only as long as necessary to provide the App, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account (or request deletion), we will delete or anonymize your personal information within a reasonable time, unless we must retain certain data to comply with law.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. No method of transmission or storage is 100% secure, but we work to protect your data.

9. Your Rights (Canada)

Under applicable Canadian privacy laws (including PIPEDA), you may have rights to access, correct, or request deletion of your personal information, and to withdraw consent in certain circumstances.

To make a request, contact hello@supafood.app.

10. Children’s Privacy

Supa is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

11. Analytics

At this time, the App does not use third-party analytics SDKs. If this changes, we will update this policy before enabling analytics.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the "Last updated" date above.