Omealo Privacy Policy

Last updated: November 11, 2026

Omealo Technologies Inc. ("Omealo", "we", "us" or "our") respects your privacy. This Privacy Policy describes how we collect, use, disclose, retain and protect personal information in connection with the Omealo mobile application, the omealo.com website and web application, our business portal, and any other services that link to this Privacy Policy (collectively, the "Services"). Capitalized terms not defined in this Privacy Policy have the meanings given to them in our Terms of Service.

BY ACCESSING OR USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND, WHERE REQUIRED BY APPLICABLE LAW, YOU CONSENT TO THE COLLECTION, USE AND DISCLOSURE OF YOUR PERSONAL INFORMATION AS DESCRIBED IN IT. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, PLEASE DO NOT ACCESS OR USE THE SERVICES.

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information that Omealo collects through the Services and in the course of our business. It does not apply to information that has been de-identified or aggregated so that it can no longer reasonably be used to identify an individual, or to business contact information used solely to communicate with an individual in relation to their employment, business or profession, except as required by applicable law. This Privacy Policy does not apply to the practices of Restaurants or other third parties that we do not own or control, even if you access them through the Services.

2. Our Privacy Officer

Omealo has designated a Privacy Officer who is accountable for our compliance with this Privacy Policy and applicable privacy laws.^{Footnote 1} You may contact our Privacy Officer at [privacy@omealo.com] or at the mailing address in Section 17.

3. Personal Information We Collect

The personal information we collect depends on how you interact with the Services. We may collect the following categories of personal information:

• Account and profile information, such as your name, email address, sign-in credentials, account identifiers, and records of your acceptance of our terms and policies.
• Dietary preferences, such as the dietary, allergy, ingredient and other preferences or filters you select or enter, including free-form text.
• Content you provide, such as photographs, menu images, links, scans, saved places, notes, reports, feedback and other User Content.
• Location information, such as precise or approximate geolocation derived from your device's GPS, network or IP address, or location information embedded in photographs, where you have permitted it.
• Device and usage information, such as device identifiers, device type and model, operating system, application version, IP address, browser type, referring pages, pages and features viewed, interactions, timestamps, diagnostic and log information, and similar technical information.
• Transaction information, such as subscription and purchase details, plan status, renewal dates, and transaction records. Payment card details are collected and processed by our third-party payment processors and app store providers and are not stored by Omealo.
• Communications, such as the content of your communications with us and your communication preferences.
• Business account information, such as the name, email address, role and credentials of individuals who use our business portal on behalf of a Restaurant, and information about the Restaurant they represent.
• Information from third parties, such as information we receive from sign-in providers, app store providers, payment processors, mapping and business information providers, Restaurants, and other partners, which we may combine with other information we hold about you.
• Inferred information, such as information we derive from the above to provide and personalize the Services.

You are not required to provide personal information, but if you do not, some or all of the Services may not be available to you.

4. How We Use Personal Information

We may use personal information for the following purposes, and for other purposes that we identify at or before the time of collection or as otherwise permitted or required by law:

• to provide, operate, maintain and support the Services, including to create and manage accounts and to generate Results;
• to personalize the Services, including to show menu information and Restaurants relevant to your preferences and location;
• to process transactions and manage subscriptions;
• to communicate with you, including to respond to inquiries, provide service-related notices and, with your consent where required, send marketing communications;
• to build, maintain and improve Restaurant and menu information made available through the Services;
• to analyze use of the Services and to research, develop, test and improve the Services and our technologies, including our algorithms and models;
• to protect the safety, security and integrity of the Services, our users and Omealo, including to detect, investigate and prevent fraud, abuse, security incidents and other prohibited activity;
• to enforce our Terms of Service and other agreements, and to establish, exercise or defend legal claims; and
• to comply with applicable laws, regulations, legal processes and requests from governmental authorities.

5. Sensitive Information

Some dietary preferences, such as information about allergies or health conditions, and precise geolocation may be considered sensitive under applicable law ("Sensitive Information"). We collect and use Sensitive Information only with your express consent where required by law, and only for the purposes described in this Privacy Policy. You may withdraw your consent at any time by changing or deleting your preferences in the Services or by disabling location permissions on your device, although some features may no longer be available. We do not sell Sensitive Information, and we do not disclose your dietary preferences to advertising partners.

6. Automated Processing and Artificial Intelligence

The Services use automated technologies, including machine learning and other artificial intelligence technologies developed by Omealo or provided by third parties, to read and interpret Content such as menu images and text, and to generate Results based on the information and preferences you provide. Results are produced automatically and are not reviewed by a person before they are displayed. Where required by applicable law, you may request information about the personal information and principal factors used to generate a Result, request that such personal information be corrected, and submit your observations to a member of our team, by contacting our Privacy Officer.

7. How We Disclose Personal Information

We may disclose personal information as follows:

• Service providers. We engage third-party service providers to perform functions on our behalf, such as cloud hosting and data storage, authentication, payment processing, mapping and location services, image and text recognition, artificial intelligence and machine learning, web content retrieval, analytics, advertising, email delivery, customer support and security. Service providers may access personal information only as needed to perform services for us and are required by contract to protect it.
• Restaurants and business partners. We may share de-identified or aggregated information, such as usage statistics and the categories of preferences used with a Restaurant's menu, with Restaurants and other business partners. We do not share information that identifies you with Restaurants unless you direct us to do so.
• Affiliates. We may share personal information with our current and future affiliates for the purposes described in this Privacy Policy.
• Business transactions. We may disclose personal information to a prospective or actual purchaser, investor, lender, successor or other party, and to their advisors, in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets or similar transaction, subject to appropriate confidentiality obligations.
• Legal and safety. We may disclose personal information where we believe in good faith that it is necessary or appropriate to comply with applicable law, a legal process or a request from a governmental authority; to enforce our agreements; to protect the rights, property or safety of Omealo, our users or others; or to detect, prevent or address fraud, security or technical issues.
• With your consent. We may disclose personal information for other purposes with your consent or at your direction.
• De-identified and aggregated information. We may use and disclose information that has been de-identified or aggregated for any purpose permitted by applicable law. We do not attempt to re-identify such information except as permitted by law.

We do not sell personal information.

8. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, software development kits, local storage and similar technologies (collectively, "Cookies") to operate the Services, remember your settings, keep you signed in, understand how the Services are used, measure performance, and, on our website, deliver and measure advertising. Cookies may be essential, functional, analytics or advertising Cookies. Where required by applicable law, we will obtain your consent before using non-essential Cookies.

You can manage Cookies through your browser or device settings and, where available, through the cookie settings in the Services. Disabling certain Cookies may affect the functionality of the Services. To learn more about interest-based advertising and your choices, visit youradchoices.ca. Some browsers transmit "do not track" signals; because there is no common standard for interpreting them, we may not respond to them.

9. International Transfers

Omealo is based in Canada, and we and our service providers may store, access and process personal information in Canada, the United States and other jurisdictions. Personal information that is transferred outside your province or country may be subject to the laws of the jurisdiction in which it is held, and may be accessible to the courts, law enforcement and national security authorities of that jurisdiction. Where required by applicable law, we assess the protection afforded to personal information before it is communicated outside your jurisdiction and implement contractual and other safeguards.

10. Retention

We retain personal information for as long as reasonably necessary to fulfil the purposes for which it was collected, including to provide the Services, comply with our legal, tax, accounting and regulatory obligations, resolve disputes, enforce our agreements and protect the security of the Services. The retention period varies depending on the type of information and the purposes for which it is used. When personal information is no longer required, we take reasonable steps to destroy, delete or de-identify it, subject to applicable law. Residual copies may remain in backups for a limited period, and we may retain de-identified or aggregated information indefinitely.

11. Security

We use administrative, technical and physical safeguards that we consider appropriate to the sensitivity of the personal information we hold, to protect it against loss, theft and unauthorized access, use, disclosure, copying or modification. However, no method of transmission over the internet or of electronic storage is completely secure, and we cannot guarantee the absolute security of any information. You are responsible for keeping your sign-in credentials confidential and for notifying us promptly of any unauthorized use of your account. To the extent permitted by applicable law, Omealo is not responsible for unauthorized access to personal information resulting from circumstances beyond our reasonable control. If a breach of security safeguards involving your personal information creates a real risk of significant harm, we will notify you and the appropriate regulators as required by applicable law.

12. Your Rights and Choices

Subject to applicable law, and to limited exceptions, you may have the right to:

• request access to the personal information we hold about you and information about how it has been used and disclosed;
• request the correction of personal information that is inaccurate or incomplete;
• withdraw your consent to our collection, use or disclosure of your personal information, subject to legal or contractual restrictions and reasonable notice;
• request the deletion of your personal information; and
• where applicable, request that personal information you provided be communicated to you or to another organization in a structured, commonly used technological format.

You may update certain information and delete your account directly through the Services. To make any other request, contact our Privacy Officer at [privacy@omealo.com]. We may need to verify your identity before responding, and we will respond within the time required by applicable law. We may decline a request where permitted or required by law, in which case we will explain why, subject to any legal restrictions.

You may opt out of receiving marketing communications at any time by using the unsubscribe link in those communications. You may continue to receive service-related messages. You can control location access, photo access and push notifications through your device settings.

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada^{Footnote 2} or, where applicable, the privacy regulator in your province.

13. Children

The Services are not directed to children under the age of [fourteen (14)], and we do not knowingly collect personal information from children under that age. If we learn that we have collected personal information from a child under that age without the consent required by applicable law, we will take steps to delete it. If you believe a child has provided us with personal information, please contact our Privacy Officer.

14. Third-Party Services

The Services may contain links to, or integrations with, websites, applications and services operated by third parties, including Restaurants, sign-in providers, app stores and payment processors. These third parties have their own privacy practices, and Omealo is not responsible for their collection, use or disclosure of personal information. We encourage you to review the privacy policies of any third party with which you interact.

15. Additional Information for Quebec Residents

If you reside in Quebec, the following also applies:

• Our Privacy Officer is the person in charge of the protection of personal information and may be contacted as set out in Section 2.
• We collect, use and communicate personal information with your consent or as otherwise permitted by the Act respecting the protection of personal information in the private sector.^{Footnote 3}
• Personal information may be communicated outside Quebec as described in Section 9, following an assessment of the privacy-related factors required by law.
• You may exercise the rights described in Section 12, including the right to data portability, and the rights described in Section 6 regarding decisions based exclusively on automated processing.
• Where we use technology that allows you to be identified, located or profiled, we will inform you and, where required, those functions will be deactivated by default.
• You may file a complaint with the Commission d'accès à l'information du Québec.^{Footnote 4}

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services or applicable law. We will post the updated Privacy Policy in the Services and update the "Last updated" date above. Where required by applicable law, we will notify you of material changes in advance and obtain your consent. Your continued use of the Services after an update takes effect constitutes your acknowledgement of the updated Privacy Policy, to the extent permitted by applicable law.

17. Contact Us

If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact:

Privacy Officer
Omealo Technologies Inc.
Toronto, Ontario
Canada
Email: admin@omealo.com