Privacy Policy

1.Information We Collect

We collect information that you provide directly as well as information generated automatically when you use GreenTable. The categories of information we collect include:

Account Information

When you create a GreenTable account, we collect your name, email address, password (stored in hashed form), and optional profile details such as your location and profile photo.

Household Profiles

To personalize your experience, you may create household member profiles that include names, ages, dietary restrictions, allergies, nutritional goals, and food preferences. This information is used exclusively to generate tailored meal recommendations.

Pet Information

If you use GreenTable for pet nutrition, we collect your pet’s name, species, breed, age, weight, health conditions, allergies, and dietary needs. This allows our AI to create safe, species-appropriate whole-food meals for your companion animals.

Recipe Preferences & Interactions

We store your saved recipes, favourites, ratings, cooking history, ingredient substitution preferences, and any feedback you provide to our AI chat assistant. This data helps us continuously refine your personalized meal plans.

Usage Data

We automatically collect technical information including your IP address, browser type and version, operating system, device identifiers, pages visited, time spent on pages, referring URLs, and interaction patterns within the application. This data is collected through cookies and similar technologies as described in the Cookies & Tracking section below.

2.How We Use Your Information

We use the information we collect for the following purposes:

• Personalize your recipes and meal plans. Your household profiles, dietary preferences, and feedback drive our AI to generate meals uniquely suited to your needs and the needs of your pets.
• Improve our AI models. Aggregated and de-identified usage data helps us train and improve our recipe generation algorithms. We do not use individually identifiable information to train AI models without your explicit consent.
• Provide analytics and insights. We analyze usage patterns to understand how our platform is used, identify areas for improvement, and ensure a smooth user experience.
• Communicate with you. We may send you account-related notifications, meal plan reminders, feature announcements, and promotional communications. You can opt out of promotional emails at any time using the unsubscribe link provided in each message.
• Ensure security and prevent fraud. We use technical data to detect and prevent unauthorized access, abuse, and fraudulent activity on our platform.
• Comply with legal obligations. We may process your information as required by applicable law, regulation, or legal process.

3.Information Sharing

We do not sell, rent, or trade your personal information. We only share your data in the following limited circumstances:

Service Providers

We work with trusted third-party service providers who perform services on our behalf, including cloud hosting (Vercel, Supabase), payment processing, email delivery, and analytics. These providers are contractually obligated to use your information only for the purposes of providing their services to us and are bound by confidentiality obligations consistent with this Privacy Policy.

Legal Requirements

We may disclose your information if required to do so by law, in response to a valid court order, subpoena, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to an emergency.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our platform before your information becomes subject to a different privacy policy.

4.Data Security

We take the security of your personal information seriously and implement industry-standard technical and organizational measures to protect it, including:

• Encryption in transit and at rest. All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher. Sensitive data stored in our databases is encrypted at rest using AES-256 encryption.
• Secure storage. Your data is hosted on infrastructure provided by Supabase and Vercel, which maintain SOC 2 Type II compliance and undergo regular security audits.
• Access controls. We enforce strict role-based access controls within our organization. Only authorized personnel with a legitimate business need can access personal information, and all access is logged and audited.
• Password security. User passwords are hashed using bcrypt with appropriate cost factors. We never store passwords in plain text.

While we strive to use commercially acceptable means to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to promptly addressing any security incident.

5.Your Rights

GreenTable is based in Montreal, Canada, and we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) as well as Quebec’s Act respecting the protection of personal information in the private sector (Law 25). Under these laws, you have the following rights:

• Right of access. You may request a copy of the personal information we hold about you. We will respond to your request within 30 days.
• Right to correction. You may request that we correct any inaccurate or incomplete personal information. You can also update much of your information directly through your account settings.
• Right to deletion. You may request that we delete your personal information, subject to certain exceptions required by law (such as information we must retain for legal or regulatory purposes). Upon account deletion, we will remove or de-identify your personal data within 30 days.
• Right to data portability. You may request a copy of your data in a structured, commonly-used, machine-readable format (such as JSON or CSV) so that you can transfer it to another service.
• Right to withdraw consent. Where we rely on your consent to process personal information, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
• Right to file a complaint. If you believe your privacy rights have been violated, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada (OPC) or the Commission d’acces a l’information du Quebec (CAI).

To exercise any of these rights, please contact us at privacy@greentable.com. We will verify your identity before processing your request and respond within the timeframes required by applicable law.

6.Cookies & Tracking

GreenTable uses cookies and similar tracking technologies to enhance your experience. The types of cookies we use include:

Essential Cookies

These cookies are strictly necessary for the operation of our platform. They enable core functionality such as user authentication, session management, and security features. You cannot opt out of essential cookies as they are required for the service to function.

Analytics Cookies

We use analytics cookies to understand how visitors interact with our platform, which pages are most popular, and where users encounter difficulties. This information is aggregated and used to improve GreenTable. You may opt out of analytics cookies through your browser settings or our cookie preferences panel.

Preference Cookies

These cookies remember your preferences, such as your preferred language, measurement units (metric or imperial), and display settings, so that we can provide a more personalized experience when you return to GreenTable.

Most web browsers allow you to control cookies through their settings. Please note that disabling certain cookies may affect the functionality of our platform.

7.Children’s Privacy

GreenTable is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at privacy@greentable.com and we will promptly delete the information.

While household profiles may include information about children in your family for the purpose of meal planning, this information is provided and managed by the parent or legal guardian who holds the account. We treat all household member data with the same level of protection regardless of the member’s age.

8.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Update the “Last updated” date at the top of this page.
• Send a notification to the email address associated with your account at least 30 days before the changes take effect.
• Display a prominent notice within the GreenTable application upon your next login.

We encourage you to review this Privacy Policy periodically. Your continued use of GreenTable after the effective date of any changes constitutes your acceptance of the updated policy.

9.Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We aim to respond to all privacy-related inquiries within 10 business days.