Privacy Policy

Last updated: March 22, 2026

1. Who We Are

BakeryBatch is operated by HealthStack, based in Toronto, Ontario, Canada. This policy explains how we collect, use, and protect your personal information when you use BakeryBatch.

2. What We Collect

  • Account information: your name, email address, and encrypted password
  • Recipe data: ingredients, quantities, and nutritional values you enter
  • Product and cost data: supplies, pricing, and production records
  • Usage data: pages visited, features used, and general interaction patterns to help us improve the service
  • OCR scan data: images you upload for label scanning (see section 5)

3. How We Use Your Data

We use your data to:

  • Provide the BakeryBatch service — generating labels, calculating costs, managing your recipes
  • Send you service-related communications (account notices, important updates)
  • Improve the platform based on aggregated, anonymized usage patterns

We do not sell, rent, or share your personal data with third parties for marketing purposes. Ever.

4. Data Storage and Security

Your data is stored on servers located in Toronto, Canada. Passwords are hashed using bcrypt. All connections are encrypted via TLS/SSL.

We take reasonable technical and organizational measures to protect your data, but no system is perfectly secure. You are responsible for keeping your login credentials safe.

5. OCR Scanning and AI Processing

When you use the label scanning feature, images you upload are sent to the Anthropic Claude API for optical character recognition (OCR) processing. This means your image data is transmitted to Anthropic's servers for processing.

We do not store your scanned images long-term. Images are processed and discarded. Anthropic's data handling is governed by their own privacy policy and terms of service.

We only send the image data necessary for OCR — no account information or personal details are included in these requests.

6. Third-Party Services

We use a limited number of third-party services to operate BakeryBatch:

  • Anthropic Claude API: for OCR label scanning
  • Payment processor: for subscription billing (we do not store your credit card details)

7. Data Retention and Deletion

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data and recipe data within 30 days. Some anonymized, aggregated data may be retained for analytics purposes.

To request account deletion, contact us or use the account deletion option in your settings.

8. PIPEDA Compliance (Canada)

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us at the address below.

9. GDPR (UK and EU Users)

If you are located in the United Kingdom or European Union, you have additional rights under GDPR, including:

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to data portability
  • Right to restrict or object to processing

Our lawful basis for processing is contractual necessity (providing the service you signed up for) and legitimate interest (improving the platform).

10. Cookies

BakeryBatch uses essential cookies to maintain your login session. We do not use advertising or third-party tracking cookies.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or in-app notice.

12. Contact

For privacy questions or data requests, contact us at privacy@bakerybatch.com.