Privacy Policy

1. Who we are

Canora ("we", "us") provides a financial goal-planning tool. For any privacy question you can reach us at chuckleomac@gmail.com.

2. Information we collect

• Account information: your name and email address. Your password is handled by our authentication provider and stored only as a secure hash - we never see it.
• Goal data you enter: goal names, categories, target and current amounts, monthly contributions, expected returns, notes, and contribution history. For shared goals, the email addresses of people you invite.
• Technical information: basic device, browser and usage information, and network information (such as IP address) collected by our hosting and authentication providers.

What we do not collect: Canora does not connect to your bank and does not collect bank login credentials or card numbers. If and when paid subscriptions are enabled, payments are handled by Stripe and card details are never stored by Canora.

3. How we use your information

• To provide the service - store your goals and generate forecasts and projections.
• To create and secure your account and authenticate you.
• To send essential messages such as email confirmation and password resets.
• To maintain, troubleshoot and improve Canora.

4. Legal basis and consent

We process your information based on the consent you provide at sign-up and as necessary to deliver the service you request, consistent with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). You may withdraw consent by deleting your data and closing your account.

5. How we store and protect your information

Your data is stored in a Supabase (PostgreSQL) database protected by row-level security, so you can only access your own records. The app is hosted on Vercel. Sign-in tokens are kept in your browser's local storage to keep you signed in. We apply reasonable technical and organisational safeguards, but no method of transmission or storage is completely secure.

6. Service providers we use

We share information with providers that process it on our behalf to run Canora:

• Supabase - database and authentication.
• Vercel - application hosting.
• Stripe - payment processing (when paid plans are enabled).
• An email delivery provider - for verification and password-reset emails.

7. When information is shared

We do not sell your personal information. If you use shared goals, the people you invite can see that goal's details and contributions. We may disclose information if required by law or to protect our rights and users.

8. Cookies and local storage

We use local and session storage to keep you signed in and remember preferences. We do not use third-party advertising or tracking cookies.

9. Data retention

We keep your information while your account is active. You can delete individual goals at any time and can request deletion of your account and associated data.

10. Your rights

Subject to applicable law, you may request to access, correct or delete your personal information, and withdraw consent. To make a request, contact us at the email above. You also have the right to complain to the Office of the Privacy Commissioner of Canada or your provincial regulator.

11. Children

Canora is not intended for anyone under 16, and we do not knowingly collect information from children.

12. International processing

Our service providers may process and store data in countries outside your province or Canada (for example, the United States). Where they do, they are expected to protect it under applicable safeguards.

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected in the date above and, where appropriate, notified in the app or by email.

14. Contact

Questions or requests? Email chuckleomac@gmail.com.