Privacy Policy

1.1 Finding Horizons is operated by Jordon Fisher, a sole proprietor, at 5513 Avenue de Monkland, Montréal, Quebec H4A 1C8, Canada.

1.2 Jordon Fisher is the person in charge of the protection of Personal Information. You can reach this person at info@findinghorizons.ca.

1.3 This Policy applies to the Finding Horizons mobile apps, website and connector (the “Service”). “Personal Information” means information about an identifiable person. Terms defined in our Terms of Service have the same meaning here.

2.1 We collect what you give us and what is needed to run what you use:

• 2.1(a) Account: email address, display name, username, photo, bio, chosen language and the confirmation that you are 18 or older. We do not ask for your date of birth.
• 2.1(b) Travel data: saved places, collections, trips, itineraries, budget entries, notes, quests, visits, hikes and bookings, including text you paste or forward and files you upload.
• 2.1(c) Imports: links you share and the public post text, images or video behind them, and any screenshot, PDF, video or audio file you share with us.
• 2.1(d) Photos: the photos you choose to add. We read the date, time and position inside a photo only to place it on your trip. We never scan your photo library.
• 2.1(e) Conversations with Horizon: your messages, its replies and which of your own records it read. If you use the microphone, your recording becomes text and the audio is not kept.
• 2.1(f) Community and social: places, tips, guides and meetups you publish, RSVPs, meetup chat, friends, blocks and reports.
• 2.1(g) Identity check, if you take one: only the outcome (pending, verified or failed). Your document and selfie go directly to Stripe Identity. We never receive the images, the document number or your date of birth.
• 2.1(h) Payments: your plan, its end date and the identifiers that link a purchase to your Account. We never receive your card details.
• 2.1(i) Notifications: a device token, your notification choices and delivery records.
• 2.1(j) Connector: a one-way hash of each connector key, and reminders you set through a connected assistant.
• 2.1(k) Learned preferences: simple patterns from what you do on trips. Under “What Horizons has learned about me” in your Profile, you can see, correct or pause each one, and have it deleted permanently.
• 2.1(l) Technical data: device type, operating system, app version, features used, error reports and security logs.

3.1 We never receive the following:

• 3.1(a) Travel Vault: the entries you keep there, including a passport expiry date, insurance, memberships and an emergency contact, stay on your phone only. They are not sent to our servers, to Horizon or to any assistant, so we cannot read or recover them. If you lose your phone, they are gone. Deleting your Account erases them from that phone. The Vault does not accept passport numbers.
• 3.1(b) Calendar: if you allow access, your calendar is read on your phone to find free time. It is not sent to us.
• 3.1(c) Compass: your heading is read on your phone to draw the compass, and is never sent to us or stored.
• 3.1(d) App-use reminders: if you turn on a long-use reminder, Apple’s Screen Time system watches the apps you pick and wakes the Service when the limit is reached. We never learn which apps you picked or how long you used them.

4.1 Location is optional and is off until you allow it. The Service works without it, apart from features that depend on where you are. We ask the first time a feature needs it, never when you open the app.

4.2 We use it for nearby places, events and trails, Free Roam and quests, nearby notifications, visa and stay tracking, and directions.

4.3 We store only:

• 4.3(a) one coarse last-known position, rounded to about 1 km, with its time. Each update overwrites the last, so it is not a trail;
• 4.3(b) country-level stay records, if you use stay tracking; and
• 4.3(c) the coordinates of places you deliberately save.

4.4 Background location is a separate opt-in, offered in context and not during sign-up. It uses low-power updates when you move a significant distance. It is not continuous GPS tracking.

4.5 Your location is never sold and never used for advertising. Other people see only what you choose to broadcast, at area level, for a limited time.

4.6 You can withdraw permission at any time in your device’s settings.

5.1 We use Personal Information to:

• 5.1(a) provide the Service and sync it across your devices;
• 5.1(b) read places from what you share and check them against mapping sources;
• 5.1(c) send the notifications and emails you chose, and notices the law requires;
• 5.1(d) process Subscriptions and decide which features your Account can use;
• 5.1(e) keep the Service safe, including moderating reports and preventing fraud and abuse;
• 5.1(f) understand and improve the Service, using error reports and usage events without raw captions, private links or payment details; and
• 5.1(g) comply with the law.

5.2 We build public information about places, such as how many people saved one, without identifying anyone.

5.3 We do not sell Personal Information, and we do not use it for behavioural advertising.

5.4 We do not make decisions based exclusively on automated processing that have a legal or similarly significant effect on you. If that changes, we will tell you when it happens, and you may ask a person to review it.

6.1 We use three AI providers, from our servers:

• 6.1(a) OpenAI for text, such as reading captions and transcripts, writing briefs and transcribing speech when your phone cannot do it;
• 6.1(b) Google (Gemini API) for reading the images and video of posts you share; and
• 6.1(c) Meta (Muse API) for Horizon, the travel companion. Horizon never falls back to another AI provider.

6.2 A request is sent only when a feature you started, or a brief or reminder you switched on, needs it. It carries the content of the task, such as a link and its post text, an image, or the trip details needed. When you talk to Horizon, it carries your message, the conversation so far and what Horizon reads from your own Account to answer.

6.3 Your email address, name, Account identifier, payment details and identity-check data are never sent. Your device’s live location is not sent to Horizon.

6.4 We do not send your data to train models, and we use these providers on terms that exclude training. Their own retention is governed by their terms.

6.5 On an iPhone, your voice is transcribed on the phone where it supports your language. Audio is not kept.

6.6 Text we generate about a place is cached and shown to everyone who asks about that place. It carries no information about the person whose request produced it.

6.7 If you connect your own assistant, that assistant and the company that operates it get access to your Finding Horizons data. The assistant can read and change your Finding Horizons data, and whoever operates it receives what it reads. This is your decision, it is off until you connect one, and you can revoke it.

7.1 We share Personal Information only with the service providers below, each for the stated purpose, and we require them to protect it with safeguards comparable to ours. Anyone you choose to share with also sees what you share.

• 7.1(a) Supabase (database, sign-in, file storage);
• 7.1(b) Vercel (website and servers);
• 7.1(c) Apple (Sign in with Apple, push notifications, in-app purchases, weather, maps);
• 7.1(d) Google (sign-in, in-app purchases, maps, places, routes, weather, image and language reading, push notifications);
• 7.1(e) RevenueCat (confirming in-app purchases: a receipt and an Account identifier, never a payment method);
• 7.1(f) Stripe (website payments and the optional identity check);
• 7.1(g) OpenAI and Meta (see section 6);
• 7.1(h) Resend and Cloudflare (sending email, and receiving bookings you forward);
• 7.1(i) Sentry (error reports) and PostHog (usage events);
• 7.1(j) AppsFlyer (opening shared links at the right screen);
• 7.1(k) RapidAPI providers and Firecrawl (reading the public posts and pages you ask us to import: the link only);
• 7.1(l) PredictHQ and Ticketmaster (events: a city or coarse position, never your identity).

7.2 We also request public information without sending your identity from Open-Meteo, OpenStreetMap services (including Nominatim, Overpass and Waymarked Trails), Valhalla, Open Topo Data, Wikipedia and Wikidata, NOAA, Frankfurter and official government sources.

7.3 We may disclose Personal Information if the law requires it, to protect someone’s safety, or to a successor if the business is transferred, in which case we will tell you.

8.1 Your Personal Information is stored and processed outside Quebec and outside Canada, mainly in the United States and Ireland, by the providers in section 7. The laws of those places may differ from yours, and authorities there may be able to obtain access to it.

8.2 Before transferring it, we consider its sensitivity, the purpose, the safeguards and the legal framework of the destination, and we rely on contractual safeguards with our providers.

9.1 We keep your Personal Information while your Account is active, except as follows:

• 9.1(a) messages with Horizon are deleted after 90 days. Thread titles and learned preferences stay until you delete them or your Account;
• 9.1(b) Meetup chat is visible only to that meetup’s members and becomes read-only when the meetup ends. It is kept for 30 days so that a safety or moderation report can be reviewed against it, and nobody can erase it during that time, including its author. It is then permanently deleted by an automated retention job;
• 9.1(c) your last-known position is overwritten each time it updates;
• 9.1(d) audio is not kept once it becomes text.

9.2 When you delete your Account, we delete it as described in Delete your account. Copies in encrypted backups expire within 30 days. We keep a bare record that the deletion happened, and purchase and tax records for as long as the law requires.

10.1 You can correct most information in the Service, change what you share, turn off notifications and location, and delete your Account yourself.

10.2 You may ask us for access to your Personal Information, to correct it, to delete it or to receive it in a usable format, and you may withdraw your consent. Write to info@findinghorizons.ca. We reply within 30 days and may ask you to confirm your identity.

10.3 Withdrawing consent may mean a feature that depends on it stops working.

11.1 The website uses essential cookies to keep you signed in and to remember your chosen language. Local storage keeps preferences such as your theme. The app stores data on your device so that it works offline.

11.2 We do not use advertising or cross-site tracking cookies. Usage events and error reports are described in section 7.

11.3 You can clear cookies in your browser and local data in your device’s settings. Clearing essential cookies signs you out.

12.1 We encrypt data in transit, restrict each Account to its own data at the database level, keep server keys off your device, and store only a one-way hash of each connector key. Paid access is decided on our servers.

12.2 No system is perfectly secure, and we have not had an independent security audit or certification.

12.3 If an incident presents a risk of serious injury, we will notify you and the competent authorities as the law requires. To report a vulnerability, write to support@findinghorizons.ca.

13.1 The Service is for adults 18 and older. If you believe someone under 18 has given us Personal Information, write to info@findinghorizons.ca and we will delete it promptly.

14.1 The Act respecting the protection of personal information in the private sector applies to you. You have the rights in section 10, the right to have information about you de-indexed where the law allows, and the right to be told on request how a decision based exclusively on automated processing was made.

14.2 Features that can locate you are off by default, and we ask for your consent before they start.

14.3 You may file a complaint with the Commission d’accès à l’information du Québec.

15.1 The Personal Information Protection and Electronic Documents Act, or substantially similar provincial law, applies to you. You may file a complaint with the Office of the Privacy Commissioner of Canada or your provincial commissioner.

16.1 Depending on your state, including California, you may have the right to know, access, correct, delete and receive a copy of your personal information, and not to be discriminated against for using those rights. To use them, write to info@findinghorizons.ca. You may use an authorized agent, and you may appeal a refusal by writing to the same address.

16.2 We do not sell or share personal information for cross-context behavioural advertising.

17.1 Jordon Fisher is the controller of your personal data. The UK GDPR and the Data Protection Act 2018 apply in the United Kingdom, and the GDPR applies in the European Union.

17.2 Our legal bases are:

• 17.2(a) contract, to provide the Service you asked for;
• 17.2(b) consent, for location, push notifications, optional emails and connecting an assistant, which you can withdraw at any time;
• 17.2(c) legitimate interests, for security, preventing abuse and understanding how the Service is used, balanced against your rights; and
• 17.2(d) legal obligation, for tax and legal records.

17.3 You have the rights to access, rectify, erase, restrict, port and object, the right not to be subject to solely automated decisions with significant effects, and the right to complain to your supervisory authority, including the Information Commissioner’s Office in the United Kingdom.

17.4 Transfers outside the United Kingdom and the European Economic Area rely on adequacy decisions or standard contractual clauses. Canada has an adequacy decision for commercial organizations subject to its federal law; the United States does not, in general.

17.5 We will name our EU and UK representatives here before we market the Service to people there.

18.1 We will notify you of a material change in the Service or by email before it takes effect. If we change a provider, or begin to collect a kind of information this Policy does not list, we will update this Policy first.

18.2 Questions or requests: Jordon Fisher, person in charge of the protection of Personal Information, info@findinghorizons.ca, 5513 Avenue de Monkland, Montréal, Quebec H4A 1C8, Canada.