Privacy Policy
Last updated: ⬜ [date] · Effective: ⬜ [date]
Who we are
Gatherer ("we") is a crowdsourced restaurant macro tracker operated by ⬜ [legal entity or "Vithu Namasivayam, operating as Gatherer", pending incorporation] in Montréal, Québec, Canada.
Person in charge of the protection of personal information (required by Québec's Law 25): ⬜ [name] · ⬜ [email]. You can contact this person about anything in this policy.
The short version
- We hold health information — your weight, your goals, your training schedule, and what you ate. We treat it as sensitive, because it is.
- We do not sell your personal information.
- We do not advertise to you, and we do not share your data with advertisers.
- Your food photos are processed by an AI provider (Anthropic) to estimate macros.
- You can get a copy of your data, correct it, or delete your account — from inside the app.
What we collect
You give us: contact details (phone for the diner waitlist; name, email and phone for restaurants) · account email for sign-in · health and fitness data — body weight, protein and calorie goals, training schedule and sessions, and your meal log · photos of food you submit · restaurants you save.
We collect automatically: basic usage analytics · your IP address, used transiently to rate-limit abuse and not stored by us in that form · standard server logs. Our analytics are cookieless — we set no analytics cookies, which is why you are not asked to accept any.
Location: if you allow it, your device's location is used in your browser or app to show what's near you and how far away it is. We do not store your coordinates.
Why, and on what basis
We use it to estimate macros, show you food that fits your goals, keep your meal log, run your account, prevent abuse, and improve estimate accuracy. We ask for your consent for anything beyond what running the service requires, and you can withdraw it at any time.
Who we share it with
We use service providers who process data on our behalf, under contract, and only on our instructions:
| Provider | What they process | Where |
|---|---|---|
| Supabase | our database, sign-in, uploaded photos | US — Oregon (us-west-2) |
| Vercel | hosting | US — Washington DC (iad1) |
| Anthropic | your food photos, to estimate macros | ⬜ |
| Google (Places) | restaurant search text you type | ⬜ |
| Resend | your email address, to deliver sign-in emails | ⬜ |
Data may be processed outside Québec and outside Canada. ⬜ Three of the five processing regions above are not yet confirmed. This document does not publish until they are — they must be confirmed, never guessed.
How long we keep it
⬜ This is a proposal, not a decision. Law 25 requires a real retention schedule and this document does not publish without one.
| Data | Proposed |
|---|---|
| Account + profile | While your account exists, then deleted within ⬜ [30] days |
| Meal log | Yours until you delete it; archived items recoverable for ⬜ [30] days, then destroyed |
| Submitted photos | ⬜ — see the note on the public corpus in our Terms |
| Waitlist contact | Until you ask us to remove it, or ⬜ [24] months of no contact |
| Server/bot logs | ⬜ [90] days |
Your rights
Access · correction · deletion · portability (a copy in a portable format) · withdraw consent · de-indexing.
To exercise any of these: ⬜ [email], or from Settings in the app.
You may also complain to the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
Security & breaches
⬜ A truthful description of our security posture goes here — encryption in transit, row-level security, and writes confined to gated API routes. It must say only what is true.
If a breach creates a risk of serious injury we will notify the CAI and affected users as Law 25 requires.
Children
Gatherer is not directed at children under ⬜ [age].
Changes
We'll post changes here and update the date. Material changes get notice before they take effect.