Privacy Policy

Finding Horizons ("we", "us", "our") is a travel organization and discovery application. Our mailing address is: 5513 Avenue de Monkland, Montréal, QC H4A 1C8, Canada.

Privacy inquiries: privacy@findinghorizons.ca

This Privacy Policy applies to information collected through our mobile app, website, and related services. It covers Canadian users (PIPEDA and Québec Law 25 awareness) and US users (state privacy law awareness). We do not knowingly collect data from children under 13.

Account & Identity Data: Email address, display name, and profile photo from Apple Sign-In, Google Sign-In, or email magic link; account creation date; optional profile bio and avatar.

Imported & Pasted Content: URLs you import from TikTok, Instagram, YouTube, Google Maps, Klook, or other platforms; page metadata (title, description, thumbnail) extracted server-side; booking confirmation text and itinerary emails you paste; screenshots, PDFs, and images you upload.

Travel & Planning Data: Saved places (Points) including name, category, location, notes, and rating; Collections; Trips, itineraries, side quests, detours, mini quests, and bookings; budget entries.

Location Data (Optional): Approximate or precise device location, only if you grant permission and only when you trigger a location feature. We never request location on page load. See our Location Data Policy.

Payment & Subscription Data: Subscription status; Stripe customer and subscription IDs. We never store card numbers, CVV, or bank details — Stripe handles payment method data exclusively.

AI & Prompt Context: If you use AI planning features, trip and place data you include may be processed by our AI provider. We do not use your data to train AI models unless you explicitly opt in.

Referral Data: Referral code, whether referred users signed up via your link, and referral reward status.

Device & Usage Data: Browser type, device type, OS, app version; pages visited, features used, session timing; error logs and crash reports. Firebase Analytics is optional, browser-only, and requires configuration.

• To provide and operate the Finding Horizons Service
• To sync places, trips, and collections across your devices
• To generate AI itinerary suggestions based on your trip context (when enabled)
• To display maps, place data, and event listings
• To process subscription payments via Stripe
• To send magic link emails for sign-in
• To send optional trip reminders and import alerts (with your permission)
• To improve the Service through aggregate usage analysis
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not sell your personal information. We do not use your data for behavioural advertising on third-party platforms.

• Supabase (Ireland/US): Database, authentication, and storage. Your data is protected by row-level security.
• Vercel (US): Web hosting and serverless functions.
• Stripe (US): Payment processing for subscriptions.
• Google OAuth / Maps / Places API (US): Sign-in and map/place data. Place queries are routed server-side.
• PredictHQ (NZ/US): Event discovery data. Queries are server-side; no personal data is sent to PredictHQ.
• AI providers (e.g. Anthropic Claude, if configured): Trip/place context for AI suggestions. Minimum necessary data only.
• Firebase (Google, US): Optional analytics and App Check only. Firebase Auth is not used — Supabase is the sole auth system.

We do not share your personal information with unrelated third parties, advertisers, or data brokers. We may share information if required by law or to protect user safety.

Your data may be stored and processed in countries outside Canada (including the US and Ireland) by our service providers. These transfers occur under appropriate safeguards. By using the Service, you consent to these transfers.

We retain your account data for as long as your account is active. Account deletion removes personal data within 30 days, except where retention is required by law. Backups may retain data for up to an additional 90 days.

You may have the right to access, correct, delete, and port your personal data, and to withdraw consent to optional processing. Contact privacy@findinghorizons.ca — we will respond within 30 days.

Finding Horizons operates from Québec, Canada and is subject to PIPEDA and Québec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25). You have the right to access, correct, delete, de-index, and port your personal information. Contact privacy@findinghorizons.ca.

If you are a US resident, applicable state privacy laws (including CCPA) may grant additional rights. We do not sell personal information as defined by these laws. Exercise your rights by contacting privacy@findinghorizons.ca.

We use TLS encryption, Supabase row-level security, server-side API key management, and Stripe for payment data. No system is completely secure — you use the Service at your own risk. See our Security page.

We use session cookies required for authentication and local storage for theme preferences. We do not use cross-site advertising cookies. See our Cookie Policy.

The Service is not directed at children under 13. If you believe a child under 13 has provided us with personal information, contact privacy@findinghorizons.ca and we will delete it promptly.

We may update this Policy from time to time. We will notify you of material changes via in-app notification or email. Continued use after notification constitutes acceptance.

Privacy: privacy@findinghorizons.ca

Support: support@findinghorizons.ca

5513 Avenue de Monkland, Montréal, QC H4A 1C8, Canada