Privacy Policy — Guardia

Last updated: 2026-08-06 · Version française

1. Who we are

Guardia is a mobile app that helps you get back the money you're owed: it tracks return windows, warranties and price adjustments from your purchase receipts. Contact: contact@reseau-emergence.ca.

2. Data we collect

• Account: e-mail address (or Google / Apple identifier if you use social sign-in).
• Receipts: photos of receipts you scan, imported PDF invoices, and the extracted data (merchant, date, amount, items, warranties).
• E-mails (optional, with your explicit authorization): if you connect Gmail or Outlook, we read receipt-like messages in read-only mode to extract purchase details. E-mails themselves are never stored — only the extracted receipt data and, where present, the attached PDF invoice are kept.
• Credit cards (optional): if you save a card to track the warranty extensions it provides, we keep only the card type (e.g. "Visa Infinite"), the last 4 digits and an optional nickname. We never collect the full card number, expiry date or security code — that information is never requested, transmitted or stored. This data is used solely to tell you the extended warranty period that applies to your purchases.
• Subscription: subscription status managed by RevenueCat and the App Store (we never see your payment information).

3. AI processing

Receipt data extraction uses AI models (Google Gemini and/or Anthropic Claude). Receipt images and text are sent to these services solely for extraction, under their terms; they are not used to train models. AI-estimated warranty durations are clearly flagged in the app.

4. Where your data lives

Your data is hosted on Supabase (AWS infrastructure, US West region), encrypted at rest and in transit. Receipt images and PDFs live in private storage accessible only by your account.

Disclosure outside Québec. Your personal information is therefore stored and processed outside Québec and Canada, primarily in the United States. We have assessed that it receives adequate protection there, taking into account its sensitivity, the purposes for which it is used, the contractual and technical safeguards in place (encryption at rest and in transit, per-account isolation) and the legal framework applicable in the destination country. By using Guardia, you are informed of this disclosure outside Québec.

5. Sharing

We do not sell or rent your data. It is shared only with the technical processors required to operate the service: Supabase (hosting), Google Gemini / Anthropic (AI extraction), RevenueCat (subscriptions), Google / Microsoft (if you connect your mailbox).

6. Your rights and deletion

You can permanently delete your account and all your data directly in the app: Settings → Delete my account. Deletion is immediate and irreversible (account, receipts, images, import data). You can also revoke Gmail/Outlook access at any time from your Google/Microsoft security settings. For any request (access, rectification, portability): contact@reseau-emergence.ca.

7. Retention

Data is kept for as long as your account exists. After account deletion, all data is removed from our active systems immediately.

8. Privacy officer

In accordance with Québec's Law 25, the person with the highest authority within Réseau É-Mergence Inc. acts as the person in charge of the protection of personal information. For any question, complaint or request regarding your personal information, you may contact them at: contact@reseau-emergence.ca.

9. Confidentiality incidents

In the event of a confidentiality incident presenting a risk of serious injury, we will notify you promptly and will inform the Commission d'accès à l'information du Québec, in accordance with our legal obligations. We maintain a register of confidentiality incidents.

10. Changes

Any change to this policy will be published on this page with a new update date.