Privacy Policy

Kydel (“we”, “us”, “our”) is a Canadian grocery price-comparison service that calculates your Net Effective Price (NEP) after cashback, loyalty points, and flyer discounts. We are subject to the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

• Account information: Email address when you create an account.
• Location: Postal code you enter to identify nearby stores. We do not collect precise GPS coordinates.
• Card and loyalty selections: The credit card types and loyalty programs you choose. We store card slugs (e.g., “amex-cobalt”), not card numbers or financial account details.
• Shopping list: Product names you add to your in-app list.
• Usage data: Search queries and page views, used to improve search relevance. Not linked to your identity for anonymous sessions.
• Anonymous interaction events (if enabled):When analytics is enabled in Settings (on by default), we record a small set of interaction events: which deal categories you view, which stores’ flyer links you click, which items you add to your shopping list, and which cards you view. Each event is tagged with an anonymous session identifier that rotates at least monthly and is not linked to your email, name, or account. We never record precise location, IP address, or device fingerprints in these events.
• Device platform (coarse): On the first event of each session we record three coarse, non-identifying signals so we can understand how many people use Kydel on iPhone, Android, or a desktop browser, and whether they opened the app from a home-screen icon or a regular browser tab. We record only one of iOS, Android, or web; one of standalone or browser; and a true/false flag indicating whether you are using the installed native app. We do not store your raw user-agent string, screen size, timezone, or any other value that could be combined into a device fingerprint.
• Favourite stores (optional): Stores you mark as favourites to personalise your deal feed. These are stored locally on your device and, if you have an account, synced to your Kydel profile.
• Affiliate link clicks:When you click “Apply” on a credit card, we record that a click occurred so we can measure which cards our users find useful and so the card issuer can attribute the application to Kydel. We do not receive your application details, approval status, or any financial information from the issuer.
• Early access signup: If you sign up for early access updates, we collect your email and optionally your postal code and referral source.

• To calculate and display your personalised Net Effective Price.
• To remember your card and loyalty selections across sessions.
• To identify deals at stores near your postal code.
• To improve our search relevance and product matching (aggregate analytics only).
• To communicate service updates if you have an account.
• To produce aggregated, anonymised reportsthat we may share with retail or card partners — for example, “X% of Hamilton sessions included Store Y’s deals in top results last week.” These reports never contain personal information and are subject to a minimum-session threshold that prevents individual re-identification.
• To attribute credit card applications to Kydel when you click an affiliate “Apply” link, so that the card issuer can pay us a referral commission. Click attribution uses only the issuer’s tracking parameters and does not include your personal information.

We do notsell your personal information to third parties. We do not use your information for advertising profiling. Some deals may display a “Sponsored” or “Featured” badge indicating a brand has paid for highlight placement — this never changes how we calculate the Net Effective Price of any deal.

Your data is stored in Supabase (a Canadian and US-based cloud database provider). All data is encrypted in transit (TLS 1.2+) and at rest. Access to your account data is restricted by row-level security policies — only you can read or modify your own card and loyalty selections.

We use the following third-party services to operate Kydel. Each processes data only as needed for their stated function:

• Supabase Inc. — Database, authentication, and data storage. Your account data and selections are stored here with row-level security.
• Vercel Inc. — Web hosting and content delivery. Serves the app and processes incoming requests.
• Sentry (Functional Software Inc.) — Error monitoring. When the app encounters a technical error, diagnostic information (not personal data) is sent to Sentry to help us fix bugs.
• Resend Inc.— Transactional email delivery. Used to send early-access signup confirmation emails and product updates. Account-related emails (such as password resets) are delivered through Supabase’s built-in email service.

We do not share personal information with grocery retailers, credit card issuers, or advertising networks. Where we work with credit card affiliate networks (such as Fintel Connect) to process referral commissions, they receive only an anonymous click identifier — never your name, email, or application details.

For server-side data processing (such as extracting deal information from flyer documents), we use AI-powered tools to read and structure publicly available promotional content. These services process flyer content only — they do not receive your personal information.

Some product images are sourced from Open Food Facts, used under the Open Database License (ODbL). Other product images may be cropped from retailer flyer pages (displayed with store attribution) or generated using AI tools for illustration purposes. Product images may not represent exact product appearance or packaging available in-store.

Account information and preferences: retained until you delete your account.

Flyer page images:Retailer flyer pages displayed in the app are retained for the duration of the flyer’s advertised validity period plus 14 days, after which they are automatically and permanently deleted from our servers. We do not archive or redistribute expired flyer content.

Raw anonymous usage events (individual interaction records tied to a rotating session identifier): retained for up to 14 monthsand then permanently deleted. We chose 14 months over 12 so at least one full prior seasonal peak (e.g., last year’s back-to-school, Black Friday, or Christmas) is available for year-over-year comparison when the corresponding season comes around again.

Aggregated, non-identifying metrics (daily and monthly counts of impressions, clicks, list adds, and similar activity per store and region) are retained indefinitely. These aggregates contain no session identifiers, no device details, and no behavioural trails that could be linked back to an individual user. They are used for long-term trend analysis, seasonal reporting, and retailer/card-issuer partnership conversations.

Under PIPEDA you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and all associated personal data.
• Withdraw consent at any time (this may limit your ability to use personalised features).
• Turn off anonymous analytics from Settings → Privacy & Data. This stops the recording of interaction events immediately. Core features (Net Effective Price, shopping list, deal browsing) continue to work exactly the same.

To exercise any of these rights, email privacy@kydel.ca with the subject line “Data Request” and include the email address associated with your account. We will verify your identity and respond within 30 calendar days. If we need more time, we will notify you of the extension and the reason.

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

Kydel uses browser localStorage to persist your card selections, loyalty programs, shopping list, preferences, and an anonymous session identifier (a random code that rotates at least monthly) between visits.

For product analytics, we use our own anonymous event store, which may use local storage to track anonymous usage sessions. Analytics data is not linked to your personal identity and uses the rotating session identifier described above. You can disable analytics at any time from Settings → Privacy & Data.

When you click a credit card “Apply” link, the URL may include affiliate tracking parameters (for example, a click ID) that allow the card issuer to attribute your application to Kydel. These parameters do not contain your personal information.

We do not use third-party advertising cookies or tracking pixels. We do not participate in ad networks or sell data to advertisers.

Kydel is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with their information, please contact us at privacy@kydel.ca.

We may update this Privacy Policy to reflect changes in our practices or applicable law. We will notify registered users of material changes by email and will update the effective date at the top of this page.

If we make material changes, we will ask you to review and re-accept the updated policy before continuing to use the app.

Questions or concerns about this Privacy Policy or your personal information?

Privacy Officer, Kydel
Email: privacy@kydel.ca