Tot Recall Privacy Policy

We keep the list of products you save so we can check it against recalls and alert you. It is stored in Canada, under an anonymous ID unless you sign in. We don't sell your data, show ads, or track you across apps, and photos you scan stay on your phone. You can ask for a copy of your data or delete it at any time.

A product list can reveal health information (for example, a medicine). We treat it as sensitive and ask for your express consent before storing it.

Bazaar Supply and Digital Inc. ("we", "us") is responsible for the personal information collected by the Tot Recall app. Our person in charge of the protection of personal information, our Privacy Officer, is reachable at privacy@totrecall.ca.

• Products you save: name, brand, category and, if you add them, barcode, model number, lot or date code, DIN or NPN, and car seat make, model and year.
• Archived products: products you archive stay in your list but are no longer checked for recalls and trigger no alerts. You can restore or delete them at any time.
• An anonymous account ID, created the first time you save a product. If you sign in with Apple or Google, your list is linked to that account and we receive the account's ID and its email address. Google always shares the email address. Apple shares it unless you choose Hide My Email; we then receive a private relay address from Apple instead.
• The result of each check: the recall found, whether it is confirmed, possible or related, the reason shown, and your answer (for example "not mine" or "handled").
• Your consent: the version of the Terms of Use and Privacy Policy you accepted, the language shown, and the date.
• Notification settings: your device's notification token, your language, and your choices (alerts on, product names hidden).
• Anonymous usage counts: an event name (for example "product added", "product archived", "product restored" or "product deleted"), the platform (iOS or Android), the app version and the date. No ID or product is attached.
• Crash reports with personal data removed, only if you turn them on (off by default).
• What you send us if you contact support. If you use "Report a problem" in Settings, the app opens your own email app with the app version, your platform and your anonymous account ID filled in. If you use "Report a wrong match" on a recall card, it also fills in the product details you saved (name, brand, model, barcode, date code, DIN or NPN, car seat make, model and year), the recall (source, number and title) and the match result (outcome, rule and status). You see everything in your email app before sending, you can edit or delete any of it, and nothing is sent unless you send it. Because a saved product can reveal health information, delete anything you do not want to share. The message goes to our support mailbox and through your own email provider.
• Abuse-protection data: to limit automated abuse of barcode lookups, we keep a hashed (not raw) form of your network address, with a call counter, for up to 2 days. Per-account call counters are also kept for the product check. We use a bot check (a CAPTCHA) provided by Cloudflare Turnstile. When the app first signs you in, it receives your IP address, your connection's TLS fingerprint and your device's User-Agent header, and keeps them under Cloudflare's own terms.
• Technical logs: when your app connects to our servers, our hosting provider may record technical connection data such as the IP address and time. We don't use it to identify or track you.

Your name (unless it's in an email you send us), your location, your contacts, advertising IDs, payment details (the app is free and takes no payments), or the photos you scan: barcode and label reading happen on your phone. We don't ask for information about your children.

To check your products against recalls and show matches; to produce overall statistics, in aggregate and without identifying anyone, so we can run and improve the service: how many products are added, saved, archived, handled and deleted; how many people have saved products and the largest number of products one person has saved; how many accounts exist; how many people saved a product and how many of them came back on another day; how many devices have alerts on or off and product names hidden or shown, by phone type and language; how many products there are in each category and how many have details such as a barcode, model, date code or DIN (never the names); how many recalls were matched, by source and result; and how many alerts were sent, failed, tapped and answered each month. The statistics contain no account ID, name or product details, a figure about fewer than 5 people or items is hidden, and the anonymous usage counts carry no user ID; to send the alerts you turn on; to keep your list on your devices; to keep the service working and secure; and to answer you. We don't use your information for advertising or sell it.

A product list can reveal health information. We treat it as sensitive. At your first save, a line next to the button tells you that your list is stored in Canada and that, by saving, you agree to the Terms of Use and this policy. We keep the date and version of your acceptance. You can withdraw consent at any time by deleting your account in Settings; alerts then stop. Crash reports and any promotional message need a separate consent that is off by default. We send no promotional messages.

We share only what each provider needs for its role. Each provider handles the information under its own terms and privacy commitments, which we review before using it.

Public recall data is processed on GitHub (United States); it contains no personal information.

Some providers process information outside Quebec or outside Canada, as listed above. Before doing so we assess the privacy risks. Information held in another country may be accessible to that country's authorities under its laws.

The app uses no tracking, profiling or location technology. Our website uses no tracking cookies. Like any server, the website host may keep visit logs.

Checking your products against recalls is automatic, based on the details you saved and the details in each notice. It makes no decision for you: every result links to the official notice, and you can correct your products at any time. A "possible" result may not be your product, and a match can be missed if the details differ.

You can access, correct or delete your information at any time, ask for a copy in a structured, commonly used technological format, and withdraw your consent. Your list is visible and editable in the app. For a copy or any other request, email privacy@totrecall.ca; we answer within 30 days. To delete your account and data: Settings, or https://totrecall.ca/delete-my-data.html.

We use encryption in transit and at rest where our providers offer it, and we limit access to what is needed. If an incident creates a risk of serious harm, we will notify you and the authorities as the law requires, and we record every incident in a register.

The app is for parents and caregivers, not children. We don't knowingly collect information from children.

We will tell you in the app before a significant change, and ask for your consent again if the change needs it. Each version carries a date.

You can write to us at privacy@totrecall.ca. You can also contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information.

privacy@totrecall.ca · Bazaar Supply and Digital Inc.

Sources (checked 2026-10-17 and 2026-10-18 by earlier sessions; not re-verified on 2026-10-20): docs/2026-10-17-privacy-legal-compliance.md, Legal Language Guide §6, docs/2026-10-18-P6-architecture.md ("Where personal data goes"), docs/api-contract.md, supabase/migrations/.