Privacy Policy

1. Who We Are

Aneth (“we”, “us”, “our”) is an ambient intelligence service operated by Aneth. We can be reached at hello@aneth.ca.

2. What We Collect

We collect only the information needed to run the service:

• Account information: Your email address, used to communicate with you and manage your account.
• Profile & preferences: Information you provide to personalize your experience (e.g. household, language, timezone, goals). Used exclusively to tailor the service to you.
• Inventory and household records: Products, quantities, purchase dates, estimated best-before dates, usage confirmations, shopping needs, and emergency-reserve targets that you add or ask Aneth to maintain.
• Billing information: Processed securely by Stripe. We never store your card details.
• Phone number (optional): If you connect WhatsApp, we collect your phone number to deliver inventory alerts and receive your updates on that channel. You can disconnect it at any time from your settings.
• Calendar events (optional): If you connect a calendar (Google Calendar or an ICS link), we access event times and titles solely to time non-urgent household reminders around your schedule.
• Receipts and purchase records (optional): When you forward a receipt by email or share it through a compatible assistant, we process the store name, items, prices, and totals to update your household inventory and savings history. Aneth does not require an in-app camera.
• Usage analytics: Anonymized data about how the app is used, collected only with your explicit cookie consent.

3. How We Use Your Information

Your information is used strictly to operate and improve Aneth:

• Maintain your household inventory and provide expiry, replenishment, savings, and emergency-reserve priorities
• Apply your confirmations and corrections to keep future inventory estimates useful
• Manage your subscription and process payments
• Send transactional emails (account updates, subscription notices, important alerts)
• Improve the service through aggregated, anonymized usage analysis

5. Third-Party Services

We use a small number of trusted third-party services to operate Aneth. Each processes only the data strictly necessary for their function. These providers may store and process data in the United States and Canada:

• Supabase — Authentication and database hosting. Stores your account, preferences, and interaction history.
• Stripe — Payment processing. Handles all billing data in a PCI-DSS compliant environment. We never store card details.
• Resend — Transactional email delivery. Receives your email address solely to deliver communications from Aneth.
• Twilio — WhatsApp message delivery. Receives your phone number and message content only if you connect the WhatsApp channel for inventory updates and alerts.
• Google Calendar API — Only if you choose to connect Google Calendar, we access your events (read-only) to time non-urgent reminders around your schedule. Aneth's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• AI model providers and connected assistants — Used to interpret receipts you choose to forward, classify inventory items, rank household priorities, or answer an MCP request you initiate. Requests include only the data needed for the task — never your name, email, or account identifiers. A connected assistant may also process data under its own privacy terms.
• Google Analytics — Usage analytics, loaded only after you accept cookies. Data is anonymized and used solely to understand how the app is used in aggregate.

6. Cookies

Aneth uses cookies solely for authentication (keeping you logged in) and, with your explicit consent, for anonymized usage analytics. We do not use advertising cookies or tracking pixels. You can withdraw your consent at any time via the cookie banner.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we permanently delete your personal data within 30 days. Anonymized, aggregated data may be retained indefinitely as it cannot be linked back to you.

8. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete data via your account settings.
• Right to Erasure: Delete your account and all associated personal data permanently.
• Right to Portability: Export your data in a machine-readable format.
• Right to Object: Object to processing based on legitimate interests.

To exercise any of these rights, contact us at hello@aneth.ca. We will respond within 30 days.

9. US State Privacy Rights

Depending on your state of residence (including California, Colorado, Connecticut, Texas, Utah, Virginia, and others), you may have the right to: know and access the personal information we hold about you; correct inaccurate information; delete your personal information; obtain a portable copy; and opt out of the sale or sharing of personal information and of targeted advertising.

Aneth does not sell your personal information and does not share it for cross-context behavioral advertising. We do not use or disclose sensitive personal information for purposes that would require a right to limit. We will never discriminate against you for exercising your rights.

To exercise any of these rights, email hello@aneth.ca. We will verify your request using the email associated with your account and respond within 45 days. You may use an authorized agent, and if we decline a request, you may appeal by replying to our decision.

10. Canada — PIPEDA & Quebec Law 25

Aneth is based in Quebec, Canada. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector (Law 25). The person in charge of the protection of personal information can be reached at hello@aneth.ca. You have the right to access and rectify your personal information and to withdraw your consent. You may also file a complaint with the Commission d'accès à l'information du Québec (CAI) or the Office of the Privacy Commissioner of Canada (OPC). Your data may be stored and processed outside your province or country — including in the United States — by the service providers listed above.

11. Children's Privacy

Aneth is not directed to children. You must be at least 16 years old to create an account, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact hello@aneth.ca and we will delete it.

12. Security

We use industry-standard security measures: encrypted connections (HTTPS/TLS), secure authentication, and strict access controls. No payment data is stored on our servers — Stripe handles all financial data in a PCI-DSS compliant environment.

13. Changes to This Policy

If we make material changes to this policy, we will notify you by email before they take effect. Continued use of Aneth after that date constitutes acceptance of the updated policy.

14. Contact

Questions about this policy? We are happy to help. hello@aneth.ca