Privacy Policy

Finding Horizons is a travel organization and discovery application operated by Finding Ventures Inc. ("we", "us", "our"), its parent company. Our mailing address is: 5513 Avenue de Monkland, Montréal, QC H4A 1C8, Canada.

Privacy inquiries: privacy@findinghorizons.ca

This Privacy Policy applies to information collected through our mobile app, website, and related services. It covers Canadian users (PIPEDA and Québec Law 25 awareness) and US users (state privacy law awareness). We do not knowingly collect data from children under 13.

Account & Identity Data: Email address, display name, and profile photo from Apple Sign-In, Google Sign-In, or email magic link; account creation date; optional profile bio and avatar.

Identity Verification (Optional): Some community features — hosting a meetup, for example — require a one-time identity check. That check is run by Stripe Identity: you are sent to a page hosted by Stripe where you photograph a government-issued identity document and take a matching selfie. Your document and your selfie go to Stripe, not to us. We never see, receive, or store the images, the document number, or your date of birth. What we store on your profile is the outcome only — a status of pending, verified, or failed. Stripe processes and retains that data under its own terms as an independent controller. If you never start a check, we hold nothing.

Meetups & Traveller Presence (Optional): If you use meetups, we store the meetups you host or RSVP to (title, description, the public venue you pinned, city, country, start time, capacity), your RSVP status, any presence you broadcast (a city-level “I'm around today” with an intent such as coffee or cowork), and the people you have saved or blocked. A meetup is always pinned to a public map point you chose — never a free-typed address. Blocking is enforced on our servers and hides both people from each other. A meetup also has a small coordination chat: meetup chat is visible only to that meetup's members, becomes read-only when the meetup ends, is kept for 30 days so a safety report can be reviewed against it, and is then deleted permanently. It is not private messaging — it belongs to the one meetup and does not outlive it.

Imported & Pasted Content: URLs you import from TikTok, Instagram, YouTube, Google Maps, Klook, or other platforms; page metadata (title, description, thumbnail) extracted server-side; booking confirmation text and itinerary emails you paste; screenshots, PDFs, and images you upload.

Travel & Planning Data: Saved places (Points) including name, category, location, notes, and rating; Collections; Trips, itineraries, side quests, detours, mini quests, and bookings; budget entries.

Location Data (Optional): Approximate or precise device location, only if you grant permission and only when you trigger a location feature. If you opt into background access ("Always Allow", offered only in context), we additionally receive low-power significant-change updates while the app is closed. In both cases we store a single coarse last-known position (~1 km rounding) plus country-level stay records for visa tracking — never a movement trail. See our Location Data Policy.

Camera & Photos (Optional): Photos you take or select for your profile picture, Hidden Gems, and booking/screenshot scanning. Images are processed to extract place and booking details; we never scan your photo library — only what you pick.

Community Contributions: Hidden Gems you create (place name, category, coordinates, description, tips, and photo) and their community status. Personal gems are private to you; sharing one to the community is an explicit action.

Push Notification Data: A device push token (if you enable notifications) and delivery metadata, used solely to send you the alerts you opted into.

Bring-Your-Own-AI Connector (Optional): If you mint a personal connector key, we store only a one-way hash of it — the key itself is shown to you once and never retained in plaintext. Understand what connecting does: it lets the AI assistant you connected read and change your Finding Horizons data, and sends that data to whoever operates that assistant (Anthropic, OpenAI, or another vendor) under their terms, not ours. The connector reaches only your own account, and access ends when you revoke the key. Nothing is connected until you create a key. See the AI & Data Disclosure, section 7.

Companion Learning (transparent): The in-app travel companion can learn simple patterns from what you actually do on trips (for example, that you tend to choose nature over museums), stored as counters against your account. It is fully visible and controllable: Profile → Settings → “What Horizons has learned about me” shows every learned pattern with its evidence, and each one can be corrected, switched off, or deleted permanently. Nothing is learned from a single event, and deleted patterns are never re-learned.

Payment & Subscription Data: Your entitlement (which plan your account holds and until when), and the identifiers our billing systems use to link a purchase to your account. Subscriptions bought in the iOS or Android app are sold and charged by Apple or Google and reconciled for us by RevenueCat; subscriptions bought on the web are charged by Stripe. We never store card numbers, CVV, or bank details — the store or Stripe handles payment method data exclusively, and we never receive it.

AI & Prompt Context: If you use AI features, the content of that request — a shared link and the public post text behind it, an image or PDF you uploaded, a video or audio file you shared for transcription, or the trip and place context for a brief or replan — is processed by our AI providers, OpenAI and Google (Gemini API). OpenAI handles text and structuring; Gemini reads the images and video frames of posts you share so places visible only on screen can be found. Requests carry the content of the task, never your identity: your email, account identifier, name, payment details, identity-verification data, and device location are not sent. We do not send your data for AI training. See our AI & Data Disclosure.

Referral Data: Referral code, whether referred users signed up via your link, and referral reward status.

Device & Usage Data: Browser type, device type, OS, app version; pages visited, features used, session timing; error logs and crash reports. Firebase Analytics is optional, browser-only, and requires configuration.

• To provide and operate the Finding Horizons Service
• To sync places, trips, and collections across your devices
• To generate AI itinerary suggestions based on your trip context (when enabled)
• To display maps, place data, and event listings
• To process subscription payments via Stripe
• To send magic link emails for sign-in
• To send optional trip reminders and import alerts (with your permission)
• To send optional smart notifications — nearby saved places, community gems, quest stops, live-event and disruption alerts, visa-day countdowns — when you enable notifications and location
• To build aggregated, anonymized travel intelligence (e.g. which places travellers as a whole visit and love). This never identifies you, and personalized features derived from your own activity are transparent and can be turned off
• To improve the Service through aggregate usage analysis
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not sell your personal information. We do not use your data for behavioural advertising on third-party platforms.

• Supabase (Ireland/US): Database, authentication, and storage. Your data is protected by row-level security.
• Vercel (US): Web hosting and serverless functions.
• Stripe (US): Payment processing for web subscriptions, and Stripe Identity for the optional one-time identity check. For the identity check Stripe receives your identity document and selfie directly and acts as an independent controller; we receive only pass/fail.
• RevenueCat (US): Reconciles App Store and Google Play subscription receipts so we know which plan your account holds. Receives a purchase receipt and an account identifier — never your payment method.
• Apple / Google (US): Sell and charge subscriptions bought inside the iOS and Android apps. They are the merchant of record for those purchases and hold the payment relationship with you.
• Google OAuth / Maps / Places / Routes API (US): Sign-in, map/place data, and transit timing for the live trip view (travel time to your next stop and the evening's last transit option). Queries are routed server-side and carry coordinates for the leg being timed — never your identity.
• PredictHQ (NZ/US) & Ticketmaster (US): Live-event and disruption discovery. Queries are server-side and contain a city or coarse coordinates — never your identity.
• RapidAPI providers (US): Used server-side to read the public social posts and event listings you ask us to import or search. Only the shared URL or query is sent — never your identity or account data.
• OpenAI (US): AI provider for text: content extraction from captions and transcripts, and trip/place context for generated briefs and proposals. Minimum necessary data only, never your identity, and not sent for model training.
• Google Gemini API (US): AI provider for vision: reads the images and video of public posts you share so on-screen place names can be extracted. Receives the media and public post content only — never your identity — via our servers, on a paid API tier that is not used for model training.
• An AI assistant you connect yourself (optional): Only if you mint a connector key. Your assistant's operator then receives whatever your assistant reads from your account, under their terms. Nothing is shared until you connect one.
• Apple Push Notification service: Delivers your notifications; receives only your device token and the message.
• NOAA (US): Space-weather data for aurora forecasts. No personal data is sent.
• Firebase (Google, US): Optional analytics and App Check only. Firebase Auth is not used — Supabase is the sole auth system.

We do not share your personal information with unrelated third parties, advertisers, or data brokers. We may share information if required by law or to protect user safety.

Your data may be stored and processed in countries outside Canada (including the US and Ireland) by our service providers. These transfers occur under appropriate safeguards. By using the Service, you consent to these transfers.

We retain your account data for as long as your account is active. You can delete your account yourself at any time — in the app under Profile → Settings → Delete account, or on the web under Settings. Deletion is immediate and irreversible: it removes your profile, saved places, trips and plans, imports, photos, collections, community activity and subscription records. Encrypted backups may retain copies for up to 30 days before they age out, and we keep a record that the deletion happened (a bare account identifier and a timestamp, holding no personal information) so we can demonstrate the request was honoured. We retain nothing else except where the law requires it — purchase and tax records being the usual exception, which are held by the app stores and our payment processor as well as us. Anonymous community place records you contributed are not deleted, because other travellers' maps depend on them; they carry no identity and cannot be traced back to you. Full detail is on our Delete Your Account page.

Meetup chat is deleted on a fixed schedule, whether or not you delete your account. While a meetup is active its members can read and post. When the meetup ends the chat becomes a read-only archive for the people who were in it — nobody can add to it, and nobody can erase it, including the person who wrote a message and the host. We keep that archive for 30 days so that a safety or moderation report filed after the meetup can be reviewed against what was actually said, and after 30 days the messages are permanently deleted by an automated retention job.

Deleting your account does not cancel a subscription. A subscription bought in the app is billed by Apple or Google and must be cancelled in that store.

You may have the right to access, correct, delete, and port your personal data, and to withdraw consent to optional processing. Deletion is self-serve — see section 6. For anything else, contact privacy@findinghorizons.ca — we will respond within 30 days.

Location is optional and the app works without it. We ask for while-using-the-app location the first time a feature needs it, and we only ask for background ("Always") location later, in context, when you open Free Roam — never during sign-up. Background location uses low-power significant-change updates so we can tell you when you pass near a place you saved; it is not continuous tracking, it is never used for advertising, and it is never sold or shared with advertisers. You can withdraw either permission at any time in iOS or Android Settings, and every other feature keeps working.

Finding Ventures Inc. operates from Québec, Canada and is subject to PIPEDA and Québec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25). You have the right to access, correct, delete, de-index, and port your personal information. Contact privacy@findinghorizons.ca.

If you are a US resident, applicable state privacy laws (including CCPA) may grant additional rights. We do not sell personal information as defined by these laws. Exercise your rights by contacting privacy@findinghorizons.ca.

We use TLS encryption, Supabase row-level security, server-side API key management, and Stripe for payment data. No system is completely secure — you use the Service at your own risk. See our Security page.

We use session cookies required for authentication and local storage for theme preferences. We do not use cross-site advertising cookies. See our Cookie Policy.

The Service is not directed at children under 13. If you believe a child under 13 has provided us with personal information, contact privacy@findinghorizons.ca and we will delete it promptly.

We may update this Policy from time to time. We will notify you of material changes via in-app notification or email. Continued use after notification constitutes acceptance.

Privacy: privacy@findinghorizons.ca

Support: support@findinghorizons.ca

5513 Avenue de Monkland, Montréal, QC H4A 1C8, Canada