Privacy Policy

• Name and email address: Account creation and management, authentication, essential communications, support and tax reports.
• Province: Profile and report settings.
• Postal address: Kept in your local profile and sent to the server when needed to render your PDF report. The rendering flow uses this address temporarily in memory; the generation record separately retains the profile and report information submitted to it (section 2.2).
• Account identifiers and consent records: Glutax identifier, creation and acceptance dates, accepted document versions and communication preferences. Apple or Google authentication information depends on your chosen sign-in method.

• Receipts and expenses: Images, products, prices, quantities, dates, categories and totals are managed on your device. OCR sends the required data as described in section 4; cloud synchronization may retain a copy as described in section 5.
• Annual totals: Annual deduction amounts are transmitted and stored on the server.
• Tax reports: Generation sends the required profile, expenses, category summaries, year and amounts to the server. The server retains a snapshot of this information, a report identifier and authenticity verification information; it can produce a PDF from that snapshot. Exported PDFs and ZIP files are also stored on your device or in your cloud space if enabled.
• Price supporting documents: You may attach your own supporting documents. Images and information needed for a PDF appendix are transmitted for temporary rendering; this rendering flow does not retain them as server files.

• Sign-in and security: Sign-in method (email, Apple or Google), technical identifiers, IP address and information needed for security and abuse prevention.
• Subscriptions: Purchase store (App Store or Google Play), transaction or purchase identifiers, product, status, renewal dates and billing events associated with your Glutax account.
• Notifications: Device or installation token, platform and preferences needed for delivery through APNs on iOS or Firebase Cloud Messaging on Android. This token is separate from your account and purchase identifiers.
• Operation and errors: App version, language, technical diagnostic information and, when necessary, user identifier. OCR captures are described in section 4.3.

When you choose “Continue with Google”, Glutax receives your Google identifier, email address and verification status, and your first and last names when provided. This information is used to create, find, link or authenticate your Glutax account. Glutax does not receive your Google password or collect your profile photo through this flow.

Google sign-in does not enable Google Drive. Synchronization requires separate, optional authorization (section 5.4). You can sign in with Google without enabling Drive, or authorize Drive separately from your Glutax sign-in method.

You may choose to add a medical letter or certificate to keep it with the documents you export for your dealings with the Canada Revenue Agency (CRA). Adding it to Glutax is optional and does not affect the calculation of the additional cost of gluten-free food.

Glutax does not analyse this letter through the receipt OCR service or use it to establish a diagnosis or provide care. The document remains on your device or, if you enable the synchronization available on your platform, in your iCloud or Google Drive storage. Our servers may retain an indicator that a letter has been added, without receiving its contents through this feature.

You choose to export and share this document; Glutax does not automatically send it to the CRA. If the letter contains a medical attestation or diagnosis, that information is sensitive personal information. You may replace or delete the letter in the app; copies you have already exported or shared must be managed separately.

Price supporting documents and tax documents are described in 2.2. Before enabling synchronization, consider optional documents already added, which may also be transferred.

• Tax deduction automation: Processing receipts through OpenRouter and variable artificial intelligence models to extract their information and reduce manual entry. Transmissions and temporary diagnostics are described in section 4.
• Tax report generation: Creation of annual reports summarizing your annual deductions with references to source receipts
• User experience improvement: Local memorization on your device of your product-to-category assignments to accelerate future processing. Useful for recurring purchases of the same item.
• Usage statistics: Analysis of annual tax credit amounts to improve the application.

• Support and security: Respond to requests, correct errors and prevent abuse.
• Essential communications: Account security, subscription status and important changes to the service or legal documents.
• Optional marketing communications: With your separate consent, Noriven uses your contact details and preferences to send the communications you subscribed to. You can unsubscribe in the app or through the email link. Google Drive authorization is not marketing consent.
• Claims management: Only information needed for a legal obligation or an identified dispute may be retained under section 5.3; this purpose does not authorize permanent retention of every report.

Glutax uses OpenRouter and AI providers to analyse your receipt photo or the text extracted from it. Depending on the processing pipeline, Mistral AI may first read the receipt. We do not add the name or email address from your Glutax account. The receipt itself may contain personal information.

Models and their providers may change. Noriven does not use this content to train AI models. We instruct OpenRouter to use only providers that exclude this use. Their retention and logging practices may vary; see OpenRouter’s information on providers. Noriven’s temporary diagnostics are described in section 4.3.

You remain in control of reviewing, changing, correcting or rejecting the extracted information. Results may contain errors or omissions regardless of the model used. If a receipt cannot be analysed, you can retake the photo or enter the information manually. Automated analysis does not replace your review of the information used in your tax records.

When diagnostic mode is enabled, a limited number of failed analyses may be retained on Noriven’s private infrastructure in Montréal to investigate and fix problems. These diagnostics may include the received image, the image prepared for analysis, extracted results and technical failure information.

Access is restricted to authorized administration for troubleshooting. Captures expire after seven days and are deleted by the periodic automatic cleanup; they may also be deleted earlier. They are not a backup of your receipts and are not used by Noriven to train an artificial intelligence model. You may contact contact@glutax.ca about a failed analysis.

• Noriven infrastructure: Our main account and report infrastructure is hosted on a Servarica VPS in Montréal, Québec. It retains account and subscription data, annual totals and report snapshots described in section 2. OCR and PDF rendering transmissions are described separately.
• Device: Expenses, categories, prices, receipts, added documents, exported reports and preferences are managed locally. Local data may also be transmitted for a feature you request.
• iCloud on iOS: If you enable the available synchronization feature, the relevant data and documents are also processed in your Apple space.
• Google Drive on Android: Optional synchronization is described in section 5.4. iCloud and Google Drive are separate spaces; we do not promise synchronization between iOS and Android.

Noriven’s main hosting in Montréal does not mean that all processing occurs in Canada. Apple, Google, OpenRouter, model execution providers, RevenueCat, Amazon and the other providers listed in section 6.2 may process information in other provinces or countries, including the United States, depending on their services and infrastructure. They may be subject to the laws and lawful requests of those jurisdictions.

We do not guarantee a single country for iCloud or Drive copies, notifications, OCR analysis or third-party services. Transfers outside Québec must be assessed under applicable requirements and governed by appropriate safeguards; consent to synchronization does not replace these obligations.

We limit retention to the stated purposes and applicable obligations. The rules for each category are:

• Account, sessions, notifications and annual totals: During the service relationship, followed by deletion when account closure is processed, subject to the documented exceptions below. Subscription expiry alone does not trigger deletion.
• Server reports and snapshots: Kept to provide history and rendering while the account is in use. After closure, information needed to verify report authenticity, prevent falsification and defend Noriven’s rights is retained in an archive restricted to authorized administration for three years from account closure. The archive includes the name, email address, province, report data, reference and hash; the postal address is not included in the snapshot submitted for archiving. The deadline is recorded when the account is closed. The archives must be deleted at that deadline. A specific legal obligation or identified dispute may suspend deletion only for necessary documents, with a documented reason and review. They are deleted when that exception ends and the normal deadline has passed. You may request a review of the need for this retention or earlier erasure; we explain the outcome and any applicable exception.
• Billing, consent, requests and security: While the relevant transaction, request or incident is handled, then only for as long as an applicable obligation or necessary evidence for an identified dispute justifies it. Where a deletion request is subject to an exception, we explain the reason and applicable duration or criterion unless legally prohibited.
• Local, cloud and exported copies: Until you or the relevant synchronization process delete them; closing a Glutax account does not automatically delete all these copies (section 8.7).
• OCR diagnostics: Seven-day expiry and periodic cleanup under section 4.3. For providers, see section 4.1.
• Technical backups: Our daily database backups have a configured 14-day rotation cycle. They are held separately in Noriven’s Google Drive space, distinct from your personal Drive. Residual copies may remain during this rotation; they support service recovery and must not be reused for another purpose. After restoration, deletions and retention deadlines must be reapplied before the service is reopened.

You remain responsible for keeping your own tax evidence. The three-year period is Noriven’s retention rule; it is not presented as a general CRA retention requirement. Contact the person identified in 14.1 to ask what information is still held and request a review.

On Android, you may enable Google Drive to access your Glutax data and documents on authorized compatible devices. Synchronization includes expenses, categories, annual prices, receipts, PDF and ZIP reports, price supporting documents, the optional letter if you added it, and identifiers and metadata needed for synchronization.

Documents are placed in visible Glutax folders in your Drive. Structured data and synchronization information are stored in the private application space (appDataFolder), separate from visible folders.

Glutax requests drive.file permission (files created by Glutax or authorized by you) and drive.appdata permission (its own application data). These permissions do not grant access to your entire Drive. Your authorization covers data used by this feature, including optional documents already added.

The app exchanges Drive data with Google. Synchronized content may subsequently be used for Glutax features you request, as described in sections 2 to 4. It is not public by default, and synchronization does not send it to the CRA. Your Google storage limits, connectivity and synchronization delays can affect the service. Disabling synchronization does not delete existing copies or automatically revoke Google authorization; see 8.7.

We do not sell or rent your personal information. Disclosures to providers are limited to the purposes described below and the necessary consent or other legal authority. Data obtained through Google APIs is also subject to section 6.4.

• Servarica: Hosting of Noriven’s main infrastructure in Montréal (accounts, reports and service operations).
• Apple: Sign in with Apple, App Store purchases, APNs notifications and iCloud synchronization, depending on the features used.
• Google Identity: Google account authentication and information described in 2.4.
• Google Drive: Optional storage and synchronization in your personal space (5.4), plus separate technical backups in Noriven’s space (5.3).
• Google Play: Payments, renewals, refunds and purchase events on Android.
• Firebase Cloud Messaging (Google): Installation tokens and information required to deliver Android notifications.
• OpenRouter and OCR/inference providers: Receipt processing under section 4; Mistral AI may be involved depending on the pipeline used.
• RevenueCat: Subscription entitlement management using your Glutax identifier and store transaction data. This identifier is pseudonymous but remains linked to your account; it is not anonymous.
• Amazon SES: Email delivery, including recipient address, required content, and delivery or bounce events.
• Meta: Campaign measurement through available integrations, including on iOS and through subscription events sent by RevenueCat. Technical identifiers and conversion events may be processed; we do not guarantee anonymity or the impossibility of linking them to other information. Tax documents, receipts and data obtained through Google APIs are not intended for these advertising integrations.
• Umami: Public website audience measurement hosted by Noriven, described in section 9.

Each provider receives information needed for its role. Relevant policies include those of Apple, Google, RevenueCat, Amazon and Meta; OpenRouter is detailed in section 4.

We may disclose your personal information only in the following circumstances:
• With your explicit consent
• To government authorities in case of legally binding request (e.g., court order, CRA request). We will endeavor to inform the affected user within a reasonable time before disclosing their information, unless we are legally prohibited from doing so or in exceptional circumstances (imminent danger, serious fraud, etc.)
• To protect our legal rights in case of litigation, claim or necessity to defend our legitimate interests

Glutax’s use and transfer of information received from Google APIs must comply with the Google API Services User Data Policy and the Google Workspace user data policy, including applicable Limited Use requirements.

This information supports requested, clearly described features: authentication, synchronization and use of your documents within Glutax. Noriven does not sell it, use it for advertising targeting or use it to train general-purpose AI models. Transfers and human access are limited to providing authorized features, troubleshooting with your agreement when required, security or legal obligations. A new use requiring your consent is presented before it begins. Drive authorization is not general permission to use your documents for other purposes.

• Transmission: HTTPS/TLS between the app, our servers and the APIs used.
• Authentication: Verified email and password, Apple or Google depending on platform, with protected sessions and tokens.
• Optional biometrics: Face ID/Touch ID on iOS or Android biometric authentication, managed by the device operating system. Glutax receives the authentication result, not a copy of your face or fingerprints.
• Abuse prevention: Access controls and temporary rate limits based on risk and load.
• Backups: Restricted-access technical copies for service recovery.

Cloud account and transmission protection is not end-to-end encryption implemented by Glutax for Google Drive. No measure can guarantee zero risk.

• Restricted access: Only the lead developer has access to systems containing your personal data
• Continuous monitoring: Monitoring of access and suspicious activities on our servers
• Security updates: Regular application of security patches for all our systems

We assess incidents, take reasonable steps to reduce harm and prevent recurrence, and maintain required records. Notices to individuals and authorities follow section 12 and applicable legal deadlines.

You can view and correct your profile and information available in the app. To access information held by Noriven that is not displayed in the app, or request a correction, contact the person identified in 14.1. Proportionate identity verification may be necessary; third-party rights and legal exceptions apply.

PDF and ZIP exports help assemble your tax records and share them with recipients you choose. A PDF alone does not fully satisfy every data portability right.

You can ask contact@glutax.ca for computerized personal information collected from you in a structured, commonly used technological format, subject to legal conditions and exceptions. Your request may also identify an authorized recipient. Information created or inferred by the service and information about third parties may require separate handling.

You can start deletion in the app’s account settings or request it without installing the app through our Delete my Glutax account page. Email requests require proportionate identity verification.

Closure deletes the Glutax account and associated operational data, including sessions, notification tokens, subscription records held by us and annual totals. It does not cancel billing with Apple or Google. Report archives follow the three-year period after closure and the targeted exceptions described in 5.3. Logs, communications, backups and data a provider must retain follow the retention criteria and erasure requests in that same section. Information needed for another Noriven service you use is handled separately.

Account deletion does not automatically revoke Google access or purge Drive, iCloud, exported copies or copies on other devices. Follow section 8.7 for those copies. First export the supporting documents you need to keep.

You may withdraw optional consent by disabling notifications in system settings, unsubscribing from marketing emails or disabling cloud synchronization. For Google, see 8.7. Withdrawal may make the relevant feature unavailable; it does not automatically erase existing copies or invalidate earlier lawful processing.

You can object to certain processing of your personal data, including:
• Use of your annual tax credit amounts for statistical purposes
• Non-essential communications

To exercise this right, contact us at contact@glutax.ca or modify your preferences in application settings.

If you believe that your personal information protection rights have not been respected, you have the right to file a complaint with the competent authorities:

• In Quebec: Commission d'accès à l'information du Québec
Website: www.cai.gouv.qc.ca
Phone: 1-888-528-7741

• In Canada: Privacy Commissioner of Canada
Website: www.priv.gc.ca
Phone: 1-800-282-1376

You can also contact us directly at contact@glutax.ca for any concerns regarding your personal data.

These are separate actions:

• Stop synchronization: Disable Google Drive in Glutax’s storage settings on the relevant devices. Previously transferred data remains in Drive.
• Revoke authorization: In your Google account’s third-party connections, remove Glutax access. Check the relevant sign-in and Drive connections. This may prevent later sign-ins or synchronization without deleting your Glutax account.
• Delete Drive copies: After stopping synchronization on all devices, manage visible Glutax folders and their trash in Drive. Private application data is separate: on the Drive website, use the app-management settings and the option to delete application data when offered. Contact us if you cannot find it.
• Delete the Glutax account: Use the process in 8.3. It does not automatically erase your Google account data.

Deleting data in Glutax may propagate to other devices while synchronization is active. Keep needed exports before deleting anything. iCloud copies are managed through the relevant Apple settings; exported, shared or unsynchronized device copies must be managed separately.

In-app purchases are processed by the App Store on iOS and Google Play on Android, subject to offer availability. The store handles payment details; Glutax does not receive your full payment card number.

RevenueCat and our server receive information needed to verify purchases and manage entitlements: Glutax identifier, store, product, transaction or purchase token, dates and status. This data is linked to the account and is not anonymous. The store presents the price, period, taxes and any trial offer before confirmation; offers may vary by platform and eligibility.

Manage and cancel your subscription in the original purchase store: Apple subscriptions or Google Play subscriptions. Refund requests follow that store’s rules and your legal rights. Uninstalling Glutax, removing Google access or deleting your Glutax account does not automatically cancel the subscription.

When a subscription expires, Premium features are restricted according to the offer. Expiry does not automatically erase data; retention follows section 5.3. You may still contact us to request access, export or deletion of your information without an active subscription.

Responsible role: Noriven’s management, as the person exercising the highest authority within the enterprise, is responsible for personal information protection.
Service: Glutax, operated by Noriven.
Email: contact@glutax.ca (suggested subject: “Personal information protection — Glutax”).

Use this contact for access, correction, portability or erasure requests, or a complaint. We verify identity proportionately and respond within applicable legal deadlines. Do not send your password or sensitive documents unnecessary for your request.

If you are not satisfied with our response to your concerns regarding personal information protection, you may file a complaint with the competent authorities. Complete contact information for these authorities is available in section 8.6 of this policy.

For Quebec residents:
Commission d'accès à l'information du Québec (CAI)
Website: www.cai.gouv.qc.ca
Phone: 1-888-528-7741

For other Canadian residents:
Privacy Commissioner of Canada
Website: www.priv.gc.ca
Phone: 1-800-282-1376

This privacy policy is governed by the laws of Quebec and Canada. Any dispute arising from this policy or the use of the application will be resolved before the competent courts of the province of Quebec, to the extent permitted by applicable law.

In the event of a merger, acquisition, asset sale or bankruptcy, your personal data could be transferred to a third party. In this case:
• We will inform you by email at least 30 days before the transfer
• The third party must respect this privacy policy or obtain your consent for a new policy
• For information received through Google APIs, section 6.4 restrictions continue to apply; your prior explicit consent is obtained for a business transfer when required by Google policies
• You will have the option to delete your account before the transfer