Privacy Policy

The short version

Fruga helps you choose which of your own credit cards to use at checkout. The free extension is built so we never need your personal information: you decide which cards to add, and everything you enter stays in your browser on your device.

• No account, no sign-in, no bank login
• No card numbers, CVV, statements or transactions
• Your wallet and settings are stored only on your device
• The extension sends nothing to us or anyone else

If you choose to send us feedback through our website, we receive only what you write. We do not sell personal information, we do not use it for advertising, and we never share it with card issuers.

1. Who we are

Fruga ("Fruga", "we", "us") is operated by [registered legal name, if different from Fruga], [mailing address], Canada. This policy covers the Fruga browser extension (Fruga - Canadian Credit Card Optimizer), and our website, fruga.io.

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Quebec, the Act respecting the protection of personal information in the private sector (as amended by Law 25). Our Privacy Officer, [name or title], is responsible for how we handle personal information and can be reached at privacy@fruga.io.

2. The free extension

The free extension works entirely on your device. It has no account system and does not send information to our servers or to anyone else. It contains no analytics, advertising or tracking code.

What you choose to enter, and where it stays

You build your wallet yourself by picking card products from a list. Everything below is optional and is stored only in your browser's extension storage on this device. It is not synced to your Google account.

Export and delete

Settings → Your data lets you export a backup file of everything Fruga stores, or delete all of it. Uninstalling the extension also removes it. Because this information never leaves your device, we cannot see, recover or delete it for you.

3. What the extension reads on websites

Checkout detection is off until you turn it on and Chrome asks for your permission. When it is on, the extension looks at secure (https) pages to recognise a checkout. On a checkout page it reads only:

• the website's address, without the query string
• the page title, headings, button labels and order-total lines
• the number of payment fields on the page, not their contents

It never reads what you type into forms. It never reads or changes payment fields, never fills in payment details, and never activates offers. Lines that look like personal information (names, emails, addresses, phone numbers) are discarded before analysis. The result (store, total, currency and category) is held in temporary browser memory for that tab only, and cleared when the tab or browser closes. It is never sent anywhere.

You can turn detection off, hide Fruga on specific sites, or remove the site permission in Chrome at any time.

4. Browser permissions

5. How we use information

The extension keeps your information on your device, so we never receive it. The only information we receive is what you choose to send us (feedback and emails), and we use it only to respond to you, fix problems, improve Fruga and meet legal obligations. We do not:

• sell, rent or trade personal information
• use financial data for advertising, profiling for third parties, or ad targeting
• share your information with card issuers, banks or affiliate networks
• make or influence credit decisions, or apply for credit on your behalf

We may publish aggregated statistics that cannot identify you (for example, "most common grocery category"). If we ever want to use information for a new purpose, we will ask for your consent first.

6. Affiliate links and advertiser disclosure

Fruga may earn a commission from a card issuer or an affiliate network when someone applies for a card through a link on our website or in the extension. These relationships work as follows:

• Recommendations are not for sale. Checkout recommendations rank only the cards in your own wallet, using published earn rates and your point values. Compensation never changes that ranking.
• Links are labelled. Any link that may earn us a commission is marked as such where it appears.
• You choose to click. Fruga never inserts, replaces or removes affiliate or referral codes on websites you visit, including at checkout. It never opens affiliate links on your behalf.
• We share nothing about you. When you click a labelled link, the issuer or affiliate network may set its own cookies on its site to record the referral. That is covered by their privacy policies. We do not send them your wallet, your browsing or any personal information.
• Terms change. Card details are summaries we check against issuer websites and date-stamp. Rates, fees and offers can change, and approval is always at the issuer's discretion. Confirm the terms on the issuer's website before you apply.

Fruga is an independent information tool and does not provide financial advice. Card names and trademarks belong to their owners. Fruga is not affiliated with or endorsed by any card issuer or network unless a page says otherwise. Full details are in our advertiser disclosure.

7. Service providers and storage outside Canada

Our website and feedback form are hosted by Cloudflare, which processes information only on our behalf, under terms that limit its use and require appropriate safeguards:

Cloudflare may store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law. Before transferring Quebec residents' information outside Quebec, we assess the privacy risks as Law 25 requires.

8. Cookies and analytics

The Fruga extension sets no cookies and contains no analytics. Our website, fruga.io, also uses no cookies, no analytics and no advertising trackers, and it loads nothing from other companies' servers. Our hosting provider, Cloudflare, processes technical information such as IP addresses to deliver the site and protect it from attacks. It does not use this to build a profile of you for us.

If we ever add analytics, we will choose a privacy-focused option, update this policy first, and ask for consent where the law requires it.

9. Feedback you send

You can report a bug or share an idea using the feedback form on fruga.io. The extension links to it, but it never sends anything itself. If you use the form, we receive:

• the topic you choose and your message;
• your email address, only if you enter one so we can reply;
• the extension version, if you opened the form from the extension;
• your browser version, only if you leave that box ticked.

We use feedback only to fix problems, improve Fruga and reply to you. We never use it for marketing unless you separately agree. Messages are stored with our website host, Cloudflare, and deleted automatically after 12 months, or sooner if you ask. To limit spam, we keep a scrambled (hashed) form of your IP address for one hour; we never store the address itself. Please don't include card numbers; the form rejects them.

10. Emails and Canada's anti-spam law (CASL)

We only send commercial electronic messages, such as news about Fruga, with your consent, as Canada's Anti-Spam Legislation requires. Every such message identifies us and includes a working unsubscribe link, and we act on unsubscribe requests within 10 business days.

If you email us, we use your address only to reply.

11. Security

Feedback messages are encrypted in transit, and access is limited to the people who read and answer them. No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify you and the Office of the Privacy Commissioner of Canada (and, for Quebec residents, the Commission d'accès à l'information) as the law requires.

The free extension keeps no information on our systems, so there is nothing on our side to breach.

12. How long we keep information

• Free extension: on your device until you delete it or uninstall the extension.
• Feedback messages: deleted automatically after 12 months, or sooner if you ask.
• Emails you send us: kept only as long as needed to answer you.

13. Your rights and choices

You can ask to access the personal information we hold about you, correct it, withdraw consent, or have it deleted. Quebec residents can also ask for their information in a structured, commonly used format. Email privacy@fruga.io. We will respond within 30 days.

If you are not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d'accès à l'information du Québec.

14. Age requirement

Fruga is meant for people who have reached the age of majority in their province or territory. We do not knowingly collect information from minors.

15. Chrome Web Store limited use

Fruga's use of information received through Chrome extension APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. The extension uses that information only to provide its single purpose, recommending which of your cards to use, and never transfers it to anyone.

16. Changes to this policy

We will post any changes here with a new "Last updated" date. If a change materially affects how we handle information you have already given us, we will tell you in the extension before it takes effect. If we add features that handle more information, we will update this policy before they launch. Where the law requires, we will ask for your consent again.

17. Contact us

Privacy Officer, Fruga
[mailing address]
Email: privacy@fruga.io