Cuizy Privacy Policy

Last updated: October 13, 2026

This policy explains what personal information Cuizy collects, how it's used, and your rights, in accordance with Quebec's Act respecting the protection of personal information in the private sector (Law 25) and Canada's federal PIPEDA.

1. Who We Are

Cuizy is currently operated by Amine Gemayel, an individual based in Saint-Laurent, Montreal, Quebec, Canada, registered with the Registraire des entreprises du Québec under Quebec enterprise number (NEQ) 2282462946. Amine Gemayel is designated as the person responsible for the protection of personal information for Cuizy, as required under Quebec Law 25.

Privacy contact: info.cuizy@gmail.com

2. What Information We Collect

• Account information: email address, name.
• Preference information (used to generate meal plans): grocery store choice, weekly budget, cooking skill level, time available, household size, favorite foods/cuisines, kitchen appliances.
• Dietary and allergy information: allergies and dietary restrictions (e.g. vegan, gluten-free, halal). This is sensitive personal information used specifically to filter recipe suggestions for your safety, and is not used for any other purpose.
• Payment and subscription information: website payments are processed by Stripe; iOS in-app subscriptions are processed by Apple. Cuizy does not receive or store your full card number. We store subscription identifiers, the purchased plan and subscription status or expiry to provide and restore Premium access. Apple purchases use a Cuizy account identifier to associate the transaction with your account.
• Cooking notes and feedback: private notes you save for your recipes and optional feedback choices. Notes are stored for your own use and are not sent to the recipe-generation model or analytics. Feedback choices can influence future dinner suggestions.
• Recipes you add or import: recipes you save yourself, kept private to your account. When you use Import from a link, Cuizy's server requests that one page on your behalf and keeps only the recipe's name, ingredients, steps, time and servings, the page address and the site's name; photos and descriptions are not copied. The site receives the request from Cuizy's server, not from your device. Like other saved recipes, a saved recipe's name can be used as a taste preference when Cuizy prepares your plans.
• Usage data: meal plans generated, recipes swapped, general app usage, for the purpose of operating and improving the Service.
• Technical data: IP address (used for rate limiting/security purposes), browser/device locale (used to determine display language).

Weekly specials email (no account needed). If you sign up on our flyer dinners page, we keep your email address, the store and language you chose, and a record of your consent: when you gave it, the exact wording you agreed to and its version, a keyed digest of your IP address (not the address itself) and, if you arrived through a link with a referral code, that short label. We use them only to send that weekly email, which shows the week of dinners built around your store's flyer and occasionally Cuizy news, and only after you confirm through the link we email you. The data is stored with Supabase and the emails are sent through Resend. Every email carries an unsubscribe link that takes effect immediately. A request you never confirm is deleted after 30 days. When you unsubscribe, sending stops at once; we keep the email address and consent record only as long as the law requires us to be able to show that we had your consent, and you may ask us to delete them sooner where the law allows.

3. How We Use Your Information

We use your information to: generate personalized meal plans and grocery lists; filter out recipes conflicting with your stated allergies/dietary restrictions; process your subscription payment; provide customer support; maintain the security of the Service (e.g. rate limiting, bot protection); and communicate essential account/service information to you (e.g. password resets, billing notices).

We do not sell your personal information. We do not use your dietary/allergy information for advertising or share it with advertisers.

4. Legal Basis for Processing

We collect and use your information based on your consent (given at signup and through your ongoing use of the Service) and, for payment-related information, as necessary to perform our contract with you (providing the subscription service you signed up for).

5. Third-Party Service Providers

We share personal information with the following service providers, solely as necessary to operate Cuizy:

Cross-border data transfer notice: Some of the above providers (including Stripe and Anthropic) may process data on servers located outside Quebec/Canada, including in the United States. By using Cuizy, you acknowledge that your information may be processed in jurisdictions with different privacy laws than Quebec's. We select providers who maintain industry-standard security and privacy practices.

6. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where retention is required for legal, tax, or accounting purposes (e.g. billing records).

7. Your Rights

Under Quebec Law 25 and PIPEDA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information (subject to legal retention requirements)
• Withdraw consent at any time (which may limit your ability to use certain features)
• Request portability of your information in a structured format
• File a complaint with the Commission d'accès à l'information du Québec (CAI) if you believe your rights have been violated

To exercise any of these rights, contact info.cuizy@gmail.com. You can delete your account from Settings or follow the account deletion instructions. Deleting your Cuizy account does not cancel an App Store subscription; manage or cancel it separately in your Apple subscription settings.

8. Data Security

We take reasonable technical and organizational measures to protect your personal information, including encrypted data transmission, access controls limiting data to your own account, and regular security review of the Service. No system is completely secure, and we cannot guarantee absolute security.

We measure selected signup and onboarding steps, page visits and feature actions to understand where the service is difficult to use. Ordinary browser events use a random identifier held only in page memory; a full reload starts a new visit. For CSU Soccer Fest QR links, we also keep the campaign label and a separate random visit identifier in this browser tab’s session storage for up to 24 hours. This lets us measure visits, App Store link clicks, and website account creation and first dinner plans associated with that visit. This does not identify App Store downloads or connect visits across browsers or devices. We do not record form contents, passwords, private notes, dietary answers, keystrokes or screen recordings in these events. Browser event collection respects Do Not Track and Global Privacy Control signals. When you arrive through a link that carries a referral code or campaign tags (such as ?ref= or utm_source), we keep that short label and the date of the visit in a first-party cookie for up to 60 days and, if you create an account in that browser, save them to your account once, together with your optional answer to “How did you hear about Cuizy?”, to learn which channels bring new households; the label is not kept when your browser sends Do Not Track or Global Privacy Control, and it is not shared with third parties. Signed-in product events may be associated with your account; anonymous visits are not linked across devices. Vercel also provides aggregate traffic statistics without advertising cookies.

9. Cookies and Similar Technologies

Cuizy uses tab session storage for the limited campaign measurement described above. Cuizy uses cookies and local storage for authentication (keeping you logged in), language preferences, the referral label described above, unfinished onboarding answers and Cloudflare Turnstile's bot-protection challenge. After you open your grocery list, a copy is saved on your device so it can be read without a connection. This copy contains the store, grocery item names and amounts, estimated prices and checked items; it is cleared when you log out or use the in-app account deletion control on that device. The iOS app also stores this copy in its local app storage for offline startup. We do not currently use third-party advertising or tracking cookies.

10. Children's Privacy

Cuizy is not directed at, and is not intended for use by, anyone under 18 years of age. We do not knowingly collect personal information from anyone under 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email where appropriate.

12. Contact Us

For any privacy questions, requests, or concerns: info.cuizy@gmail.com

Cuizy is operated by Amine Gemayel, Saint-Laurent, Montreal, Quebec, Canada. NEQ 2282462946.

Onboarding answers can be kept in this browser tab for up to 24 hours so you can resume after a refresh. A guest signup handoff is kept in browser local storage for up to 24 hours and is transferred once to the signed-in account’s tab. These drafts are removed after a successful save. AI-sharing permission is never stored in a draft and must be given explicitly.