Privacy Policy

Rise & Shine Sourdough (“we,” “us,” “the bakery”) is a small home bakery near La Crete, Alberta. We run this website and an iPhone app so you can order sourdough for pickup or delivery. This page explains what personal information we collect, why we collect it, who we share it with, and how you can ask us about it.

We wrote this policy to match what our app and website actually do, rather than from a template. Where the two behave differently, we say so. If something you're wondering about isn't mentioned below, it's because we don't do it.

If you're just looking at the menu, you don't need an account and we don't ask you for anything. Browsing the menu in the app collects nothing at all. On this website, visits are counted by Google Analytics — see “Website analytics and error reports” below.

When you place an order, whether or not you have an account, we collect:

• Your name, email address, and phone number.
• What you ordered, the total, and any note you leave for us.
• A delivery address, a pasted Google Maps link, or your device's current location — only if you choose to give us one. Your location is only read the moment you tap “Use my current location,” and only to drop a delivery pin for that order. We never track your location in the background.
• Your device's IP address, which our ordering system uses to limit how many orders can be placed from one connection in a short time. It's a spam guard only — it isn't stored on your order and isn't used to identify you.

If you create an account, we also store your name, email, and phone number as your profile, along with a delivery address if you save one. Your password goes straight to Firebase Authentication (a Google service) and is never stored by us or visible to us.

If you turn on notifications in the app, we store a push token for your device — the address a notification gets delivered to — and your two preferences. “Order ready” notifications are live: when that toggle is on, we send you one push when your order is marked ready for pickup. “New loaves & bake days” is saved but doesn't send anything yet. The app only asks for notification permission after you sign in, and declining means no token is ever created. Signing out removes the token.

If you set up a recurring order, we store the same details as a regular order, plus how often you'd like it.

Payment. When you pay online we hand you off to Stripe, our payment processor, on a secure Stripe-hosted page. We never see or store your card number, expiry date, or CVV — Stripe handles all of that directly. All we learn is whether your payment succeeded. If you pay on pickup instead, we collect no payment information at all.

This website uses Google Analytics to count visits and see which pages people use — page views, rough location (city or region, from your IP address), and general device and browser information. It tells us how many people visited the menu, not who you are.

If a page on this website breaks, we save a report so we can fix it: the error message, which page it happened on, your browser and device type, and your account ID if you were signed in.

The iPhone app does neither of these. It contains no analytics, crash-reporting, or advertising software of any kind.

We don't use advertising trackers. We don't follow you across other companies' apps or websites, and we don't share your information with data brokers or sell it to anyone. There's no “Sign in with Apple, Google, or Facebook” reading a social profile — accounts are made directly with an email and password. The app never asks for your contacts, photos, camera, or microphone.

• Name, email, phone: so we can prepare your order, send your confirmation and “ready for pickup” emails, and reach you if there's a problem.
• Delivery address or pin: so we can find you on delivery day.
• Order details: so we know what to bake and what to charge.
• Your account: so you can see your order history and manage a recurring order without retyping your details every time.

• Becky, the bakery owner, sees your order and contact details so she can bake and deliver it. That's the whole team — this is a one-person bakery, not a company with a sales or marketing department.
• Firebase (a Google service) stores your account and order information, handles sign-in, and delivers notifications. Google processes this on our behalf as our database and hosting provider.
• Stripe processes online payments. Stripe receives your card details directly from you — we never see them — plus your name and email so it can send you a receipt.
• Our email provider delivers your order confirmation and status emails, which contain your name, what you ordered, and your bake day.
• Google Analytics receives website visit statistics, as described above. It receives nothing from the app.

We do not share your information with advertisers or data brokers.

• Past orders are kept as business records and can't be deleted, including orders placed as a guest. We're a small food business and we keep our order records the way any shop keeps its receipts.
• Your account — name, email, phone, saved delivery address, notification preferences — is kept for as long as you have an account with us.
• You can delete your account yourself. In the app: Account → “Delete my account.” On this website: your profile page. Either way it permanently removes your sign-in and profile. You'll be asked to finish or cancel any outstanding order first, and your past orders stay, for the reason above. We keep a dated internal record that an account was closed. You can also contact us and we'll close it by hand.

Because we operate in Alberta, how we handle your personal information is governed by Alberta's Personal Information Protection Act (PIPA) and, for information that crosses provincial lines, the federal Personal Information Protection and Electronic Documents Act (PIPEDA). Under these laws you can:

• Ask what personal information we hold about you.
• Ask us to correct anything that's wrong or out of date — a changed phone number, for example.
• Ask us to close your account, understanding that past order records are kept as described above.

To make any of these requests, get in touch using the details below. We'll respond within a reasonable time.

Our app and website are meant for adults placing food orders. We don't knowingly collect information from children.

If what we collect changes, we'll update this page and change the effective date at the top.

Questions about this policy, or want to see, correct, or delete your information? Get in touch:

You can also reach us through the contact page.