Privacy policy
NutriBakes and NutriBakes Staff, apps of NUTRIBAKES. Effective November 14, 2026.
What we collect
NutriBakes (customers): your name, email, phone, delivery addresses, your orders and notes (including a message on a cake), your language, and, if you allow notifications, your device's notification token. When you pay by card, Square, our payment processor, also collects your card details and information about your device and how you use its card form (see "Who helps us").
NutriBakes Staff (the bakery's team): the owner's and drivers' name, email, phone, and account ID, the deliveries assigned to each driver, the notification token of their device, and what the bakery enters to run its business: customers' contact details and orders, notes, product photos, the business logo, and expense records with their receipt photos.
Both apps: when an app crashes, freezes, or uses too much power, a short technical report from Apple's MetricKit: the app and iOS versions, the device model (such as "iPhone 17"), what went wrong, and where in the app's code. It carries no name, account, or device identifier, so it is not linked to you.
Why we use it
To take, prepare, and deliver your orders, to tell you about them, to answer your questions, and, with crash and freeze reports, to fix problems in the apps. We do not sell your information, use it for advertising, or track you across other apps and websites.
Who helps us
- Supabase stores our data and runs our server.
- Square handles card payments. Its payment form also collects information about your device and how you use the form, to process payments and prevent fraud.
- Resend sends order emails to customers.
- Apple delivers notifications.
They use your information only to provide those services to us. Some of them may store it outside Canada.
Card details
Your card number goes directly to Square. The bakery never sees or stores it.
How long we keep it
Your account data stays until you delete your account. Orders are kept for at least 6 years for tax records (Canada Revenue Agency). After you delete your account, those orders show "Deleted customer" instead of your name, keep no notes or messages from you, and keep only the city, province, and postal code of the addresses they were delivered to. Crash and freeze reports are deleted after 90 days.
Your choices
- Update your profile and addresses, and turn notifications on or off, in the app.
- Delete your account in the app: the Account tab, then Delete account (the last row). You can do this once you have no order in progress. It removes your sign-in, name, email, phone, and the addresses no order used; your notification tokens, settings, and notifications; your notes and messages on your orders; the bakery's notes about you; and it anonymizes the phone-order contact the bakery keeps for you.
- Ask to see or correct the information we hold about you by writing to hello@nutribakes.ca.
Children
The apps are not directed to children under 13, and we do not knowingly collect their information.
Questions
We follow Canada's privacy law (PIPEDA). Write to hello@nutribakes.ca or NUTRIBAKES, 144 Newman Dr, Cambridge, ON, N1S 0C4, Canada. We will post any change to this policy on this page with its new date.