Privacy Policy

This Privacy Policy ("Policy") explains how OpenCan ("OpenCan," "we," "us," or "our") collects, uses, discloses, retains, and otherwise processes personal information when you access or use the OpenCan mobile application, the website located at opencan.ca, our application programming interfaces, and any related services, features, content, or functionality we make available (collectively, the "Services").

This Policy describes how we process personal information in connection with the Services. By accessing or using the Services, you acknowledge that you have read this Policy. Where a specific processing activity requires your consent under applicable law — for example, to access your device's location, camera, microphone, or photo library, or to send you marketing communications — we will request that consent separately. If you do not want OpenCan to process personal information as described in this Policy, you should not use the Services.

This Policy should be read together with our Terms of Service. Capitalized terms not defined in this Policy have the meanings given to them in our Terms of Service.

1. Introduction

OpenCan is Canada's AI-powered restaurant discovery platform. We are committed to protecting your privacy and handling your personal information transparently and responsibly.

2. Scope

This Policy applies to personal information that we collect through the Services. It does not apply to:

• Information collected by third-party services, websites, applications, or platforms that we do not own or control, including but not limited to Apple, Google, Mapbox, and other restaurants, businesses, or websites linked from within the Services;
• Information that has been aggregated, de-identified, or anonymized so that it can no longer reasonably be associated with you;
• Information collected offline or through channels unrelated to the Services.

We encourage you to review the privacy policies of any third party before providing them with your personal information.

3. Information We Collect

We collect the following categories of information. We may expand or modify these categories as the Services evolve, in which case we will update this Policy in accordance with Section 14 (Changes to This Policy).

3.1 Information you provide directly

• Account information — When you create an account, we collect information from the authentication provider you choose (currently Apple Sign-In or Google Sign-In), which may include your name, email address, profile photo, and a unique identifier issued by the provider.
• Profile information — Your chosen display name, profile picture, profile visibility setting (public, followers-only, or private), and other content you add to your profile.
• User-generated content — Reviews, star ratings, tip percentages, photos, comments, bookmark list names, list descriptions, and any other content you submit, post, or display through the Services.
• Social interactions — Your follow relationships, follow requests, saved lists, and similar social-graph data.
• Communications — Information you provide when you contact us for support, report a restaurant or review, submit a bug report, or otherwise communicate with us.

3.2 Information collected automatically

• Location information — With your permission, we collect your device's approximate or precise location to show nearby restaurants, improve search relevance, and power features such as "Search here" and the random restaurant picker. You may disable location access at any time through your device settings; some features may become unavailable as a result.
• Device and technical information — Including but not limited to device model, operating system and version, language and locale settings, time zone, mobile carrier, network type, IP address, unique device identifiers, crash logs, performance data, and diagnostic information.
• Usage information — Including but not limited to search queries (whether typed or transcribed from voice input), search history, restaurants viewed, bookmark and review activity, navigation paths within the app, feature usage, session duration, referral source, and similar interaction data.
• Camera, microphone, and photo library access — With your permission, we access your camera and photo library so you can attach photos to reviews and update your profile picture, and your microphone for voice search. Voice search relies on your device's built-in speech recognition (provided by Apple on iOS and by Google on Android), which means audio captured during voice search may be transmitted to and processed by your operating system provider in accordance with that provider's privacy policy. OpenCan itself does not store or retain raw microphone audio after a voice query has been transcribed.

3.3 Information from third parties

• Authentication providers (Apple, Google) — When you sign in, the provider shares information you have authorized them to share.
• Service providers — Vendors that help us operate the Services, including hosting, storage, mapping, analytics, payment processing, customer support, and similar functions.
• Publicly available sources — Including restaurant data, business listings, and other publicly available information used to power the Services.

We may, from time to time, integrate additional third-party data sources to improve the accuracy and completeness of restaurant, business, and location information available through the Services.

3.4 Cookies, mobile identifiers, and similar technologies

We and our service providers may use cookies, software development kits (SDKs), mobile advertising identifiers (such as IDFA on iOS and AAID on Android), local storage, push notification tokens, server logs, and similar technologies (collectively, "Tracking Technologies") to operate, secure, analyze, and improve the Services. Where required by applicable law, we will request your consent before deploying non-essential Tracking Technologies.

4. How We Use Your Information

• To provide, operate, maintain, and improve the Services — Including authenticating users, surfacing nearby restaurants, displaying reviews, syncing bookmark lists, and enabling social features.
• To personalize your experience and rank search results — We use information such as your approximate location, search queries, restaurants you have viewed or bookmarked, and similar usage signals to rank search results and surface restaurants we think you may enjoy.
• To communicate with you — Including sending transactional messages, responding to inquiries, providing support, sending service-related announcements, and (where permitted) sending marketing communications.
• To develop new features, products, and services — Including using aggregated, de-identified, or anonymized data for research, product development, machine learning, and analytics.
• To enforce our terms, protect our rights, and prevent harm — Including detecting and preventing fraud, spam, abuse, harassment, intellectual property infringement, and other violations of our Terms of Service or applicable law.
• To comply with legal obligations — Including responding to lawful requests from public authorities, complying with court orders, and meeting regulatory and reporting requirements.

5. Legal Basis for Processing (EEA, UK, and Similar Jurisdictions)

If you are located in a jurisdiction that requires us to identify a legal basis for processing personal information, we rely on one or more of the following bases:

• Performance of a contract — Where processing is necessary to provide the Services you have requested;
• Legitimate interests — Where processing is necessary for our legitimate interests and your interests and fundamental rights do not override those interests;
• Consent — Where you have given consent;
• Legal obligation — Where processing is necessary to comply with a legal obligation.

6. How We Share Your Information

We share your information only in the circumstances described below. We do not sell your personal information for monetary consideration.

• With other users — Content you choose to make public will be visible to other users and, in some cases, to anyone on the internet.
• With service providers and processors — We share information with vendors that perform services on our behalf, including hosting, cloud storage, mapping (Mapbox), authentication (Apple, Google), analytics, and customer support.
• With business partners — We do not currently engage in cross-context behavioural advertising and we do not sell personal information for monetary consideration.
• In connection with corporate transactions — In the event of a merger, acquisition, or sale of company assets, we may transfer your information as part of that transaction.
• For legal and safety reasons — We may disclose information when required by law or to protect the rights, property, or safety of OpenCan, our users, or others.
• With your consent — We may share information for any other purpose with your consent.
• In aggregated or de-identified form — We may share aggregated or anonymized information that cannot reasonably be used to identify you.

7. Third-Party Services

The Services rely on, integrate with, or link to third-party services. Third parties we currently work with include:

• Apple Inc. — Sign in with Apple; App Store distribution
• Google LLC — Google Sign-In; Google Maps directions; Google Play distribution
• Mapbox, Inc. — Map tiles, geocoding, and map rendering
• Cloud hosting and storage providers — For application hosting, file storage, database management, and content delivery
• Analytics, crash-reporting, and monitoring providers — For diagnostics, performance monitoring, and product analytics

8. Data Retention

We retain personal information for as long as we have a legitimate business need to do so, including to provide the Services, comply with legal obligations, resolve disputes, and protect against fraud and security threats.

Content you contribute to the Services (such as reviews and public lists) may persist in the Services even after you close your account. Where we elect to retain such content, we will by default detach it from your account identifier and replace your displayed name with a generic indicator (for example, "Former user").

9. Your Rights and Choices

Subject to applicable law, you may have the following rights:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request that we correct inaccurate or incomplete information.
• Deletion — Request that we delete your personal information.
• Restriction or objection — Request that we restrict certain processing or object to processing based on legitimate interests.
• Portability — Request that we provide your information in a structured, machine-readable format.
• Withdrawal of consent — Withdraw consent where processing is based on consent.
• Complaints — Lodge a complaint with the privacy regulator in your jurisdiction.

9.1 California residents

If you are a California resident, you have additional rights under the CCPA, including the right to know, the right to delete, the right to correct, the right to opt out of sale or sharing, and the right to non-discrimination for exercising your rights. We do not knowingly sell personal information for monetary consideration.

9.2 Canadian residents

If you are a Canadian resident, PIPEDA and applicable provincial privacy statutes provide you with rights similar to those described above. Quebec residents are entitled to receive, upon request, information about the categories of third parties to whom we disclose personal information.

10. Account Deletion

You may delete your account by contacting contact@opencan.ca or by using any in-app account deletion feature we provide. Upon receipt of a verified deletion request, we will delete or anonymize personal information associated with your account within a reasonable period of time, except for information we are required or permitted to retain under applicable law.

11. Children's Privacy

The Services are not directed to, or intended for use by, children under the age of 13. We do not knowingly collect personal information from children under this age. If you believe a child has provided us with personal information, please contact us at contact@opencan.ca.

12. International Data Transfers

OpenCan is based in Canada. Our service providers may store or process your information in Canada, the United States, the European Union, or other countries. Where required by applicable law, we will implement appropriate safeguards prior to any transfer.

13. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. These safeguards include encryption in transit (TLS) and secure storage of authentication tokens using platform-provided secure storage (iOS Keychain and Android Keystore).

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security, and you use the Services at your own risk.

14. Changes to This Policy

We may modify this Policy at any time. When we make material changes, we will notify you by updating the "Last Updated" date and, where required by law, providing additional notice. Your continued use of the Services after the effective date of any updated Policy constitutes your acceptance of that updated Policy.

15. Disclaimers and Limitations

To the maximum extent permitted by applicable law, the Services and all information they contain are provided "as is" and "as available" without any warranties of any kind, express or implied. We are not responsible for the privacy practices, content, or actions of third parties.

16. Contact Us

If you have questions, comments, or requests about this Policy or our privacy practices, please contact us at:

© 2026 OpenCan. All rights reserved.