Privacy Policy

MaSemaine (“we”, “our”, or “MaSemaine”) is committed to protecting the privacy of its users. This privacy policy explains how we collect, use, disclose, and protect your personal information when you use our meal planning web application at masemaine.ca.

By using MaSemaine, you agree to the practices described in this policy. If you do not agree with this policy, please do not use our service.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account and use MaSemaine, we collect:

• Account information: email address, display name, password (stored in encrypted form)
• Dietary preferences: dietary restrictions, foods you dislike, serving size preferences
• Created content: recipes, meal plans, and grocery lists you create or import
• Favourite deals: promotional items you have marked as favourites in flyers
• External recipes: URLs of recipes imported from other websites
• Images: recipe photos you upload
• Application preferences: preferred language, week start day, display settings
• AI interactions: questions asked about recipes and preferences used for content generation

1.2 Information Collected Automatically

We automatically collect certain information when you use the app:

• Usage data: features used, frequency of use, interactions with the app
• Technical information: browser type, operating system, IP address, device identifiers
• AI generation data: number of recipes generated, types of requests (to enforce usage limits)

1.3 Payment Information

If you subscribe to a paid plan, payment information (credit card, billing address) is collected and processed directly by our payment provider Stripe. We do not store your full credit card details. We receive only a Stripe customer identifier and limited information about your subscription status.

2. How We Use Your Information

We use your personal information to:

• Provide our services: create and manage your account, save your recipes and meal plans, generate grocery lists
• Personalize your experience: tailor recipe suggestions based on your dietary preferences and restrictions
• Generate AI content: use your preferences to create personalized recipes via our artificial intelligence services
• Manage subscriptions: process payments, manage trial periods and renewals
• Facilitate account sharing: enable access to your recipes and meal plans from multiple devices
• Improve our services: analyze usage to develop new features and enhance the experience
• Communicate with you: send confirmations, important notifications, and, with your consent, promotional communications
• Ensure security: detect and prevent fraud, abuse, and unauthorized activities

3. Sharing Your Information

3.1 Account Sharing

If you share your login credentials with others (spouse, family), those individuals will have access to your recipes, meal plans, and grocery lists. Sharing your credentials is entirely voluntary and your responsibility.

3.2 Third-Party Service Providers

We share certain information with trusted service providers:

• Supabase: database hosting and authentication (servers located in Canada or the United States)
• Stripe: payment processing and subscription management
• AI services (Anthropic Claude): recipe generation and personalized suggestions
• Pexels: provision of royalty-free recipe images
• Vercel: web application hosting

These providers are contractually required to protect your data and use it only to deliver their services.

3.3 Legal Obligations

We may disclose your information when required by law, including in response to a court order, subpoena, or request from a government authority.

3.4 Business Transfers

In the event of a merger, acquisition, or asset sale, your information may be transferred. You will be notified of any change in ownership or use of your information.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. Specifically:

• Account data: retained until you delete your account
• Recipes and content: retained until deleted by you or upon account deletion
• Payment data: retained as required by legal and tax obligations (generally 7 years)
• Usage logs: retained for a maximum of 12 months for analytical purposes

After your account is deleted, we will delete or anonymize your data within 30 days, unless retention is required by law.

5. Security of Your Data

We implement appropriate security measures to protect your data:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Passwords stored as a secure hash (bcrypt)
• Strict database access controls (Row Level Security)
• Hashed, single-use invitation tokens
• Regular security audits

Privacy by default: By default, your recipes and content are private and accessible only to you (and those with whom you share your credentials).

Despite these measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.

6. Your Rights

In accordance with Quebec's Act respecting the protection of personal information in the private sector (Law 25) and applicable laws, you have the following rights:

• Right of access: obtain a copy of the personal information we hold about you
• Right of rectification: correct inaccurate or incomplete information
• Right of deletion: request the deletion of your personal information
• Right of portability: receive your data in a structured, commonly used format
• Right to withdraw consent: withdraw your consent at any time for processing based on consent
• Right to file a complaint: with the Commission d’accès à l’information du Québec

To exercise these rights, contact us at hello@masemaine.ca. We will respond to your request within 30 days.

7. Cookies and Similar Technologies

We use cookies and similar technologies to:

• Essential cookies: maintain your login session and preferences
• Functional cookies: remember your choices (language, display)
• Local storage: store data offline for use without a connection

We do not use advertising or third-party tracking cookies. You can manage cookies through your browser settings, but some features may not work correctly.

8. International Data Transfers

Your data may be transferred to and processed in countries other than Canada, including the United States where some of our service providers are located. These transfers are carried out in compliance with the requirements of Law 25, including appropriate contractual clauses and adequacy assessments.

9. Minors

MaSemaine is not intended for persons under the age of 14. We do not knowingly collect personal information from children under 14. If you are a parent or guardian and believe your child has provided us with information, please contact us so we can delete it.

10. Changes to This Policy

We may update this privacy policy periodically. In the event of significant changes, we will notify you by email or by a prominent notice within the application at least 30 days before the changes take effect. The “Last updated” date at the top of this page indicates when the policy was last revised.

11. Privacy Officer

In accordance with Law 25, we have designated a privacy officer. For any questions regarding this policy or your personal data, please contact:

12. Commission d’accès à l’information

If you are not satisfied with our response to your request, or if you have concerns about how we handle your personal information, you may file a complaint with: