Privacy Policy — Guardia

Last updated: 2026-10-05 · Version française

1. Who we are

Guardia is a mobile app that helps you get back the money you're owed: it tracks return windows and warranties from your purchase receipts. Contact: contact@reseau-emergence.ca.

2. Data we collect

• Account: e-mail address (or Google / Apple identifier if you use social sign-in).
• Receipts: photos of receipts you scan, imported PDF invoices, and the extracted data (merchant, date, amount, items, warranties).
• E-mails (optional, with your explicit authorization): if you connect Gmail or Outlook, we read receipt-like messages in read-only mode to extract purchase details. E-mails themselves are never stored — only the extracted receipt data and, where present, the attached PDF invoice are kept.
• Credit cards (optional): if you save a card to track the warranty extensions it provides, we keep only the card type (e.g. "Visa Infinite"), the last 4 digits and an optional nickname. We never collect the full card number, expiry date or security code — that information is never requested, transmitted or stored. This data is used solely to tell you the extended warranty period that applies to your purchases.
• Subscription: subscription status managed by RevenueCat, the App Store and Google Play (we never see your payment details).
• Ad measurement (optional, only with your consent): see section 6.

3. AI processing

Receipt data extraction uses AI models (Google Gemini and/or Anthropic Claude). Receipt images and text are sent to these services solely for extraction, under their terms; they are not used to train models. AI-estimated warranty durations are clearly flagged in the app.

4. Where your data lives

Your data is hosted on Supabase (AWS infrastructure, US West region), encrypted at rest and in transit. Receipt images and PDFs live in private storage accessible only by your account.

Disclosure outside Québec. Your personal information is therefore stored and processed outside Québec and Canada, primarily in the United States. We have assessed that it receives adequate protection there, taking into account its sensitivity, the purposes for which it is used, the contractual and technical safeguards in place (encryption at rest and in transit, per-account isolation) and the legal framework applicable in the destination country. By using Guardia, you are informed of this disclosure outside Québec.

5. Sharing

We do not sell or rent your data. It is shared only with the technical processors required to operate the service: Supabase (hosting), Google Gemini / Anthropic (AI extraction), RevenueCat (subscriptions), Google / Microsoft (if you connect your mailbox) and, only if you agree, Meta (ad measurement, section 6).

6. Ad measurement (Meta)

Since version 1.2.0, Guardia can tell Meta Platforms (Facebook, Instagram) which ads led you to the app, so we know which ones work. This feature is off by default: it is only turned on if you agree, once, after you save your first receipt (on iPhone through Apple's "Allow tracking" prompt; on Android through a question in the app).

What is sent to Meta, only with your consent: your device's advertising identifier (IDFA or Google advertising ID), an anonymous identifier assigned by Meta, technical information (device model, system version, language, IP address) and a few events: app opened, sign-up completed, first receipt added, start or renewal of a Guardia Pro subscription (the latter is sent by RevenueCat). Your receipt contents, emails, name and email address are never sent to Meta.

Without your consent, none of these events are sent. The Meta module built into the app only contacts Meta's servers at launch to load its technical settings, with no advertising identifier and no events.

Withdraw your consent at any time: Settings → Ad measurement (Meta) in the app, or, on iPhone, Settings → Privacy & Security → Tracking. Sending stops immediately.

Meta processes this data under its own policy (facebook.com/privacy/policy), including in the United States and Ireland, so it is communicated outside Québec under the conditions described in section 4. This feature allows advertising profiling within the meaning of Québec's Law 25, which is why it is only turned on at your request.

7. Your rights and deletion

You can permanently delete your account and all your data directly in the app: Settings → Delete my account. Deletion is immediate and irreversible (account, receipts, images, import data). You can also revoke Gmail/Outlook access at any time from your Google/Microsoft security settings. For any request (access, rectification, portability): contact@reseau-emergence.ca.

8. Retention

Data is kept for as long as your account exists. After account deletion, all data is removed from our active systems immediately.

9. Privacy officer

In accordance with Québec's Law 25, the person with the highest authority within Réseau É-Mergence Inc. acts as the person in charge of the protection of personal information. For any question, complaint or request regarding your personal information, you may contact them at: contact@reseau-emergence.ca.

10. Confidentiality incidents

In the event of a confidentiality incident presenting a risk of serious injury, we will notify you promptly and will inform the Commission d'accès à l'information du Québec, in accordance with our legal obligations. We maintain a register of confidentiality incidents.

11. Changes

Any change to this policy will be published on this page with a new update date.