Privacy Policy

Version 2026-08-18-draft · Effective 18 August 2026 · InfoTrail, a sole proprietorship in Ontario, Canada

1. What we collect

2. What we deliberately do not collect

Actual addresses, phone numbers, card or account numbers, government identification numbers, dates of birth — the values of the information you track. The database has no field for them, and we block entries that look like real card or identification numbers. There is no paid subscription yet, so there are no payment details to collect: when billing is added, card details will go directly to the payment processor named in section 7 and we will never receive them.

3. What we never do

We do not sell your personal information. We do not run advertising or ad-tech trackers. We do not profile you for third parties. We do not use your content to train AI models. An AI assistant you connect yourself (section 8) is run by its maker, and what they do with what it reads is governed by their terms, not ours. We currently run no analytics of any kind — no page-view tracking, no product analytics. The one thing we keep about use is the last day you opened InfoTrail (section 1): it records no page and no time, and it is only ever read as a count across everyone. If that changes we will name the provider here before turning it on.

4. Consent

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), we collect, use, and disclose personal information with your consent, for the purposes described here. You may withdraw consent by deleting your account.

5. Other people on your plan

If you track information belonging to someone else, you provide only a display label — we recommend a first name. You are responsible for having their permission. Where you have given someone their own login, they control their own profile.

6. Who at InfoTrail can see your information

Support and administrative staff can see the state of your account — your email address, when you joined, when you last signed in, your plan and how you came by it, and whether your account is locked — together with counts of what you have recorded, such as how many places or items are on your trail.

They cannot see what you recorded: not the names of your places, not the labels on your items, not your notes or events, and not the display names of other people on your plan. This is enforced by how the software is built rather than by policy alone. The screens staff use read through a fixed set of database functions that return account state and totals and nothing else, so no view in the product can show your content, and no future change can quietly begin including it without rewriting those functions. Every time a member of staff opens an account is recorded, alongside every change they make.

Running a database means someone can technically reach the data inside it. Direct database access is held by the operator of the service, used for maintenance, backups and diagnosing faults, and is not used to browse what customers have recorded.

7. Where your data lives, and who processes it

Your data is stored in Canada (Montreal). These are every service provider that processes any of it on our behalf, each bound by their own terms. This list is the whole of it — if a provider is not named here, it does not receive your data.

Some processing happens outside Canada; we choose providers with appropriate contractual and technical safeguards. We will update this list before adding a provider, not after.

8. Connected apps

Browser extension

The InfoTrail extension records which websites hold your information, on your trail, when you ask it to. When you click its button on a site and add or confirm items there, it sends us the site's domain and the names of the items you chose — the labels, such as “Home Address”, never the information itself. If you turn on detection for a site, the extension looks at the types of fields a form asks for, on your computer, and sends nothing unless you then choose to record it. It does not record or send the sites you visit: it learns a site's address only at the moment you click its button there, or, on a site where you have turned detection on, to check whether items recorded there want confirming. It never reads what you type into a website, and it never sends the contents of a page. It keeps a local log of everything it has sent, which you can read and clear from its options page, and you can disconnect it at any time from the extension or from Settings → Connected apps.

Assistants you connect

You can connect an AI assistant, such as Claude, to your trail. Once you approve the connection, it can read what you can see on InfoTrail and make changes for you, as you could: record a place, confirm a record, correct how to reach somebody. Like the extension, it handles labels and where they are kept, never the information itself, because InfoTrail does not hold that. It acts only through a connection you approved. Settings → Connected apps lists each one and when it was last used, and disconnecting stops it at once. What the assistant's maker does with what it reads is governed by their terms, not ours, so read them before you connect it.

9. What stays on your device

Most of what InfoTrail keeps is kept with us, as the sections above describe. A few small things are kept on your own device instead, so the app works. None of them is used for advertising or analytics, and none of them is shared with anybody.

This is the whole list. We will update it before we keep anything new on your device, not after.

In your web browser

• Your sign-in, in cookies, so you stay signed in from one page to the next. Signing out removes it.
• Whether you chose light or dark, so the next page does not flash the wrong colour. It is also saved to your account, so it follows you to your other devices.
• For one browser tab, and gone when you close it: the key for two-step sign-in while you set it up; the key from a letter handing somebody's trail to you, while you sign in; where you were on a page after you save something; and that the welcome animation has already played.

We use no advertising, analytics or tracking cookies.

In the browser extension

• Its own sign-in, on that browser only. Disconnecting removes it.
• A log of everything it has sent, described in section 8. It stays after you disconnect, so you can still see what was sent. Clear it from the extension's options page, or remove the extension. Because it includes the names of places and items you recorded, anybody who uses that browser could read it.
• Which sites it has already asked about, until you close the browser.

In the iPhone app

• Your sign-in, in the iPhone's Keychain, where iOS keeps it encrypted. Signing out, or deleting the app, removes it.

10. Keeping and deleting your data

• Active accounts: kept while the account exists.
• Deleting your account removes your data from production immediately and from backups within 30 days.
• There is no paid subscription yet, so there are no billing records. Once there are, they will be retained as tax law requires (approximately 7 years, held by the payment processor).
• Export is available at any time, on every plan, as CSV.

11. Security

Encryption in transit and at rest, row-level access isolation so one account cannot read another's data, least-privilege keys, and no card data on our systems. No system is perfectly secure. If a breach creates a real risk of significant harm we will notify affected users and the Office of the Privacy Commissioner of Canada, as PIPEDA requires.

12. Your rights

You may access, correct, export, or delete your information at any time — from within the app, or by writing to privacy@myinfotrail.com. If you are dissatisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

13. Children

InfoTrail is not directed at children under 16. An adult may track a child's information locations under their own account using a label.

14. Changes

We will email account holders at least 30 days before a material change takes effect.

15. Contact

privacy@myinfotrail.com
InfoTrail, a sole proprietorship in Ontario, Canada
Ontario, Canada — a postal address is available on request