top of page
Ceeli_Name_Logo.png
Download Now!

Privacy Policy

CEELI PRIVACY POLICY

Effective date: 2026-07-07

Last updated: 2026-07-07

App publisher: WIM Collective Inc.

Privacy contact: admin@wim-collective.com 

Country of operation: Canada

 

WIM Collective Inc. ("Ceeli", "we", "us", "our") has created this Privacy Policy (“Privacy Policy”) to set out how we collect, use, and disclose information about identifiable individuals and information which can be used to identify an individual (“Personal Information”) through our Website (defined below) and in the course of providing our Website, the Ceeli mobile application (the “App”), and any  other products or services that Ceeli may offer from time to time (collectively, all of the foregoing the “Services”).

 

Privacy is of great importance to us. We do not actively collect Personal Information for the purpose of selling or marketing that Personal Information to third parties. Personal Information may be collected about Users and visitors to the Website, as well as anyone else with our Services.  By visiting our website located at www.ceeli.ca including subdomains, (collectively, the “Website”), or using the Services in any manner, you acknowledge that you accept the practices and policies outlined in this Privacy Policy and you hereby consent to the collection, use and disclosure of your Personal Information in accordance with this Privacy Policy.  If you are using Third-Party Services (as defined in our Terms of Service), then the collection, use and disclosure of your Personal Information will be subject to that Third Party Service provider’s relevant privacy policy.  

 

In general, Ceeli runs entirely on your device. Everything you log (expenses, family members, plus optional metadata about your receipts and your doctor's letter certifying that you have Celiac disease) stays on your phone. We don't sell your data, we don't run ads, and the only thing that is transmitted from your device is the subscription information needed to process payment through Google Play and manage your Subscription through RevenueCat.

 

  1. OVERVIEW

 

  1. International Users. Ceeli is based in Ontario, Canada and the Services are intended for use only in Canada. If you are a non-Canadian user of the Services, by visiting the Services and providing us with data, you acknowledge and agree that your Personal Information may be processed in the manner and for the purposes identified in this Privacy Policy. 

  2. Lawful Processing. We process your Personal Information only to the extent necessary for the purposes described in this Privacy Policy. We set out below the type of Personal Information we collect and how we use such Personal Information. Except as set forth in this Privacy Policy, your Personal Information will not be used for any other purpose without your consent. Where we collect sensitive Personal Information, including information about your Celiac diagnosis, we rely on your express consent, which you may decline or withdraw at any time. You may withdraw your consent to our processing of your Personal Information at any time, however, withdrawing consent may result in your inability to continue using the Services.  

 

  1. Scope. This Privacy Policy covers the activities of Ceeli but does not apply to the practices of companies that we do not own or control, including Third-Party Service providers and any services offered by other companies or other sites linked from our Website or Services. This Privacy Policy does not govern any external websites or services, even if such websites or services are linked on Ceeli’s Website or through the Services. Ceeli is not responsible for the protection of your privacy and/or any information you may provide while visiting any websites or services offered by other companies. You should exercise caution when leaving our Website and read any privacy policies that may apply to external websites or services. You are responsible for ensuring that you have obtained the necessary authorizations and consents for any Personal Information you make available to us for use in accordance with this Privacy Policy.

 

  1. COLLECTION AND USE OF PERSONAL INFORMATION 

 

  1. What we Collect. Set out below are the ways in which we may collect Personal Information:

  • Personal Information Collected from Users. We may collect Personal Information about our Users through forms and fields in the App and through other communications methods used by the Services. The Personal Information provided by Users may consist of their name, province of residence, preferred language, Celiac diagnosis status, information about a User’s family members, details of certain expenses logged by User, app preferences, and any other Personal Information as may be required to provide the Services. We may also collect and process images that are provided by Users. Users will always have control over which information they share within the Services, and unless otherwise noted, information is stored locally and never transmitted to Ceeli. 

  • Employee and Contractor Candidate Information. When we seek candidates for potential jobs or contracting engagements with Ceeli, we collect information that those candidates choose to provide to us when applying, which may include contact information, education and employment history, credentials, place of residence and other information the candidate believes to be relevant.  For people who become our employees or contractors, we will typically retain the information provided by those candidates in the application process along with additional information to manage their employment or contractor relationship with us, including, without limitation, information related to income tax reporting and withholding and enrollment in Ceeli benefit plans (in each case, to the extent applicable for the relevant relationship).


 

  1. What we do NOT Collect. Most of the information that is uploaded to or processed by the Services is stored on your device, and is never transmitted to Ceeli or any third parties. Ceeli does not collect:

 

  • Medical records of any kind, including copies of doctor’s letters certifying a Celiac disease diagnosis.

  • Your net income.

  • Scanned label content. 

  • Social Insurance Number. 

  • Tax documents, including T4s, T1s, and other documents used in the preparation and filing of personal taxes. 

  • Precise location, contacts, browsing history, microphone, calendar, or SMS messages. 

  • Advertising identifiers. 

 

  1. Device Permissions Requested by the App. The App will request the following device permissions from User:

 

  • Camera Access. Used for the in-app ingredient label scanner and optional in-app receipt capture functions. 

  • Photo Library Access (PickVisualMedia). Used when User chooses to select images from their device’s photo library instead of using the camera to take a new photograph. 

  • Storage Write. On Android devices that run Android 9 or earlier, saving a receipt photograph into your photo library requires a storage-write permission. On devices that run Android 10 and later, no such permission is required or requested.

  • Internet. To transmit and receive Subscription information from RevenueCat and Apple’s App Store or the Google Play Store. 

 

  1. Use of Personal Information. We may use your Personal Information and Usage Information in a manner that is consistent with this Privacy Policy and the context of our relationship with you. We will use your Personal Information collected through the Services for the following purposes:

 

  1. provide, operate, maintain and improve the Services;

  2. to manage your Subscription; 

  3. send technical notices, updates, security alerts and support and administrative messages;

  4. respond to comments, questions, and requests and provide service and support;

  5. investigate and prevent unauthorized access to the Services and other illegal activities;

  6. internal record keeping;

  7. for other purposes which we will notify you about and seek your consent; and

  8. as otherwise specifically described in this Privacy Policy.

 

  1. STORAGE LOCATION AND TRANSFER OF PERSONAL INFORMATION

Ceeli processes and stores Subscription information on servers located in the United States. You agree to this transfer, storing, or processing of your Subscription information in the United States, and of your other Personal Information in Canada. You acknowledge and agree that your Personal Information may be accessible to law enforcement and governmental agencies in Canada and the United States under lawful access regimes or court order. Quebec Residents: Given the minimal, non-identifying data transferring practices of Ceeli, Ceeli assesses the privacy impact of its cross-border data transfers as required under the Act respecting the protection of personal information in the private sector, CQLR c P-39.1 (Law 25), Article 17. For further information, you may contact us directly through the contact information listed in this Privacy Policy. 

 

  1. DISCLOSURE OF PERSONAL INFORMATION WITH THIRD PARTIES

 

  1. Subscription Information. Ceeli relies on Apple’s App Store, the Google Play Store, and RevenueCat to manage and administer Subscriptions. Ceeli may transmit and receive data related to your Subscription, including you Subscription and payment status, as necessary to provide the Services.  We may from time to time employ third parties to perform tasks for us and we may need to share Personal Information (including account information) with them to perform those tasks. Unless we tell you differently, such third parties do not have any right to use the Personal Information we share with them beyond what is necessary for them perform the relevant tasks for us. Ceeli also uses Third-Party Services for Optical Character Recognition, including Google’s Machine Learning Kit. Data processed by such Third-Party Services in the provision of the Services are processed on your device and such data is not transmitted to third parties or Ceeli. 

 

  1. Third Parties Integrated by User. Ceeli does not explicitly support the integration of Third-Party Services beyond those necessary for its administration and management of User Subscriptions. The integration, use, and/or enabling (as applicable) of any Third-Party Services, will be subject to the privacy policies which govern and/or apply to such Third-Party Services. If User chooses to integrate the Services with any Third-Party Services, acquisition by User of such, and any exchange of data between User and such Third Party Services is solely between User and the applicable third-party provider. Ceeli is not responsible for, and Ceeli’s Privacy Policy does not govern, any disclosure, modification or deletion of data resulting from access by such Third-Party Service or its provider. 

 

  1. With Your Consent. If we need to use or disclose any Personal Information in a way not identified in this Privacy Policy, we will notify you and/or obtain consent as required under applicable privacy laws.

 

  1. As Required by Law. We may disclose your Personal Information to third parties without your consent if we have reason to believe that disclosing this information is necessary to identify, contact or bring legal action against someone who may be causing injury to or interference with (either intentionally or unintentionally) our rights or property, other users, or anyone else (including the rights or property of anyone else) that could be harmed by such activities. Further, we may disclose Personal Information when we believe in good faith that such disclosure is required by and in accordance with the law. 

 

We also reserve the right to access, read, preserve, and disclose any information as we reasonably believe is necessary to:

 

  • satisfy any applicable law, regulation, legal process or governmental request (including in pursuant to subpoenas, civil investigative demands, or similar processes); enforce our contracts or user agreements, including investigation of potential violations hereof; and

  • detect, prevent, or otherwise address fraud, security, or technical issues. 

 

The above may include exchanging information with other companies and organizations for fraud protection, spam/malware prevention, and know-your-customer purposes. Notwithstanding the general terms of this policy, the collection, use, and disclosure of Personal Information may be made outside of the terms of this Privacy Policy to the extent provided for in any applicable privacy or other legislation in effect from time to time, or pursuant to court orders (including in respect to depositions, interrogatories, subpoenas, civil investigative demands, and other court or regulatory-mandated discovery processes).

 

  1. RETENTION

 

Data stored locally on your device will be retained for as long as the App is installed on your device. Uninstalling the App from your device will delete all data immediately and irrevocably, unless such data has been backed up elsewhere by User. Ceeli does not retain copies of photographs of receipts taken and uploaded by User. Such photographs may be stored in your device’s photo library; Ceeli will not have access to the library unless User grants permission through their device settings. Ceeli may retain Subscription information for the duration of User’s Subscription, and as long as it remains necessary for the identified purpose or as required by law, which may extend beyond the termination of our relationship with you. We may retain certain data as necessary to prevent fraud or future abuse. All retained Personal Information will remain subject to the terms of this Privacy Policy.  

 

Ceeli has no control over User backups. Users with Subscriptions may choose to export and save data uploaded or created in the App externally; User acknowledges that they are solely responsible for any externally saved data and Ceeli shall not be liable for any use, misuse, or privacy breach related to such backups. 

 

  1. SECURITY 

We are committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure of your information, we have put in place suitable physical, electronic, and managerial procedures to safeguard and secure the information we collect online. Ceeli and its Third-Party Service providers employ industry-standard data encryption both at rest (Min SDK 26) and in transit (TLS 1.2 or higher). User acknowledges that despite Ceeli’s commitment to data security and the measures it has put in place, no system is perfectly secure and the security of data transmitted over the internet can never be guaranteed.  

 

  1. ACCESS, CORRECTION AND ACCURACY

 

You have the right to access the Personal Information we hold about you in order to verify the Personal Information we have collected in respect to you and to have a general account of our uses of that Personal Information. Upon receipt of your written request, we will provide you with a copy of your Personal Information, although in certain limited circumstances, and as permitted under law, we may not be able to make all relevant Personal Information available to you, such as where that Personal Information also pertains to another individual. In such circumstances we will provide reasons for the denial to you upon request. We will endeavor to deal with all requests for access to and modifications of Personal Information in a timely manner.

 

We will make every reasonable effort to keep your Personal Information accurate and up to date, and we will provide you with mechanisms to update, correct, delete or add to your Personal Information as appropriate. As appropriate, this amended Personal Information will be transmitted to those parties to which we are permitted to disclose your Personal Information. Having accurate Personal Information about you enables us to give you the best possible service.

 

  1. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy is effective as of the date stated above in the “Last updated” field. We may amend this Privacy Policy from time to time. Processing of Personal Information we collect is subject to the Privacy Policy in effect at the time such Personal Information is collected, used or disclosed as this Privacy Policy may subsequently be updated in accordance with this Section 8. If we make material changes or changes in the way we use Personal Information, we will notify you by posting an announcement on our Website or via the Services or sending you an email prior to the change becoming effective. By accessing the Website or using the Services after we make any such changes to this Privacy Policy, you are deemed to have accepted and agree to be bound by such changes. Please refer back to this Privacy Policy on a regular basis. 

 

  1. Contact 

 

The person responsible for personal information at WIM Collective Inc. is:

Founder and Privacy Officer: Brendon Bauman

Email: admin@wim-collective.com

Response timeframe: normally within thirty (30) days of your written request, subject to any extension permitted under PIPEDA Principle 9 and Law 25 article 32.

If you are dissatisfied with our response, you have the right to file a complaint with:

 

  • Your provincial privacy commissioner where applicable.

bottom of page