Privacy Policy

Last updated: July 2026

• You can scan and score food without an account. Guest mode is real — no email, no sign-up required to use the core product.
• We don’t sell your data. Ever. Not to brands, not to data brokers, not to anyone.
• No brand can pay to change a score. Not a privacy point exactly, but it’s the promise this whole policy sits inside of.
• If you create an account, we store your email, your pets’ names/species/conditions (so the app can personalize scores), and your scan history.
• Payment is handled by Stripe. We never see or store your card details.

TrueBowl (“TrueBowl,” “we,” “us,” “our”) is based in Ontario, Canada. This policy explains what information we collect when you use the TrueBowl app and website, why we collect it, and what choices you have.

Questions about this policy: privacy@truebowl.app

Information you give us directly

• Account info: your email address, used only to sign you in (via a passwordless magic link) and to sync your data across devices.
• Pet profiles: names, species, and any health conditions you choose to add (e.g. “kidney support,” “chicken allergy”). This is what lets the score adapt to your specific animal — it’s the core of the product, not incidental data collection.
• Submissions and issue reports: if you submit a new product or flag an issue with an existing one, we collect what you provide — product name, brand, ingredients, photos if applicable, and any notes you write.
• Payment information, if you go Premium: handled entirely by Stripe. We receive confirmation that you’ve paid and your subscription status — never your card number. Stripe’s own privacy policy: stripe.com/privacy.

Information collected automatically

• Scan history: the products you’ve scanned, so History and Favorites work. Guest scans stay on your device only and are never sent to our servers. Signed-in users’ scans sync via our database (Supabase) so they carry across devices.
• Basic technical data: standard web request logs (IP address, browser type, general device info) collected by our hosting infrastructure (Cloudflare) for security and to keep the service running. We don’t use this for tracking or advertising — TrueBowl doesn’t run ads and doesn’t have an advertising business.
• Camera access: used only to scan a barcode or photograph a label. We don’t store the raw photo beyond what’s needed to complete the scan or submission you initiated.

What we do not collect

• We do not collect sensitive personal information (health data about you, not your pet; biometric data; precise location beyond what your browser reports for basic function).
• We do not use tracking pixels, ad networks, or third-party advertising cookies.
• We do not buy data about you from anyone else.

We use a small number of service providers to run TrueBowl, each only for the specific job listed:

Each of these processes data on our behalf under their own security commitments — they don’t get to use your information for their own purposes. We do not otherwise share your personal information with third parties, and we have never sold personal information to anyone.

We may disclose information if required by law, to protect the safety of a person, or in connection with a genuine business transfer (e.g. if TrueBowl were ever acquired) — in which case this policy would continue to apply under the new owner.

• Delete your account at any time from Settings, or by emailing us. This removes your pet profiles, scan history, and account data from our active systems.
• Guest mode is always available if you’d rather not create an account at all.
• Access or correct your data by emailing us — we’ll respond within a reasonable time.
• If you’re a Canadian resident, these rights are grounded in PIPEDA (the Personal Information Protection and Electronic Documents Act). If you’re a US resident, you may have additional rights under your state’s privacy law (e.g. CCPA in California) — contact us and we’ll honor applicable requests regardless of which state you’re in.

We keep your account data for as long as you have an account. If you delete your account, we remove your personal data from active systems promptly, except where we’re required to retain something for legal or fraud-prevention reasons.

TrueBowl is not directed at children, and we don’t knowingly collect personal information from anyone under 13 (or the relevant minimum age in your jurisdiction). If you believe a child has created an account, contact us and we’ll delete it.

We use reasonable technical safeguards (encrypted connections, access-controlled databases, no client-side storage of payment data) to protect your information. No system is perfectly secure, and we can’t guarantee absolute protection against a determined attacker — but we don’t treat that as license to be careless, either.

Our infrastructure providers (Supabase, Cloudflare, Stripe, Anthropic) may process data outside of Canada, including in the United States. Each maintains its own compliance commitments for cross-border data handling.

If we make material changes, we’ll update the date at the top and, for significant changes, make a reasonable effort to notify active users directly.

privacy@truebowl.app