Privacy Policy

1. Information We Collect

We collect the following categories of information to deliver the Services and fulfill our contractual obligations:

• Account Information: Full name, email address, password hash, and profile details you provide when creating or updating your account.
• Location Information: Approximate and precise location data when you grant permission. We use Google Maps to display nearby businesses, plan routes, and surface relevant offers.
• Purchase Details: VIP Pass and gift certificate purchases, payment status, and purchase history. Payments are processed by Stripe; we never see or store your full card number.
• Usage Data: In the app and web app, screens viewed, features used, clicks, and session diagnostics captured through Firebase services to maintain performance and prevent fraud. On our website, Google Analytics measures site traffic only if you accept analytics cookies (see Cookies and Similar Technologies below).
• Business Interactions: Offer redemptions, favorites, and merchant selections to provide personalized content and maintain accurate offer counts.
• Event Submissions: If you submit an event, we collect the organizer name and a contact email. The organizer name is shown on the event listing. The contact email is used only to follow up about that listing and is never published.
• Support Communications: Messages you send to support@kootenayconnection.app or through our website forms, and related attachments.
• Device and Technical Information: Device model, operating system version, unique device identifiers, network information, crash logs, and app version to troubleshoot, secure, and optimize the Services.

2. How We Use Your Information

We process personal information to:

• Authenticate you, manage your account, and maintain session continuity.
• Provide the interactive map, business directory, and exclusive offers tailored to your preferences and location.
• Process and validate VIP Pass and gift certificate purchases and refunds.
• Deliver customer support and respond to your requests.
• Improve app functionality, personalize content, and develop new features.
• Monitor usage, enforce our Terms and Conditions, and prevent unauthorized or fraudulent activity.
• Comply with legal obligations, regulatory requirements, and requests from public authorities.
• Send service-related notifications, such as VIP Pass status changes, offer updates, and policy announcements. Marketing communications are sent only with your consent and can be revoked at any time.

3. How We Share Information

We restrict sharing to what is necessary to operate the Services:

• Service Providers: We rely on securely contracted vendors: Stripe (payments; we never see your full card number), Firebase (sign-in, push notifications, and app analytics), Google Maps (maps and location services), Google Analytics (website traffic, only with your consent), Google reCAPTCHA (spam protection on our website forms), and Brevo (email delivery).
• Business Partners: Participating merchants see aggregated insights about offer performance, such as views and redemptions. When you redeem one of their offers, the business sees your first name and last initial (for example, "Sarah K.") with that redemption, never your email address. They do not receive other personal details unless you choose to share them directly.
• Legal Compliance: We may disclose information when required by law, court order, or to protect the rights, safety, and property of our users, merchants, or the public.
• Corporate Transactions: In the event of a merger, acquisition, or asset sale, information may be transferred in accordance with this Privacy Policy and applicable law.

We do not sell personal information or allow third parties to track you across unaffiliated apps or websites for advertising purposes.

4. Cookies and Similar Technologies

Our website uses Google Analytics to measure site traffic, and only with your consent. On your first visit, a banner asks you to choose "Accept analytics" or "Essential only". Analytics cookies are set only if you accept. Advertising storage is always off: we use no advertising cookies and do not track you across other sites.

Your choice is saved in your browser's local storage so we do not ask again. To change it, clear this site's data in your browser and choose again when the banner reappears.

Google reCAPTCHA loads when you use one of our website forms, to protect them from spam, and may set its own cookies under the Google Privacy Policy and Terms of Service. The Kootenay Connection app and web app use Firebase for sign-in and app analytics.

5. International Data Transfers

Our Services are designed for use in Canada. If information is processed outside your jurisdiction, we ensure appropriate safeguards, such as Standard Contractual Clauses and vendor due diligence, are in place to protect your privacy.

6. Data Retention

We retain personal information only as long as necessary to provide the Services, fulfill legitimate business purposes, resolve disputes, comply with legal obligations, and enforce agreements. When retention is no longer required, we delete or de-identify the data in accordance with our retention schedule.

You can delete your account in the app under Account > Delete my account, which disables your access immediately and marks your data for deletion, or by emailing support@kootenayconnection.app with the subject "Data Deletion Request". We aim to permanently delete your data within 30 days, except where we must keep records by law. See our data deletion page for details.

7. Your Rights and Choices

You may exercise the following rights, subject to jurisdictional limitations:

• Access, correction, or deletion of your personal information.
• Portability of data you provided to us in a structured, commonly used format.
• Restriction or objection to certain processing, including location tracking and marketing communications.
• Withdrawal of consent where processing is based on consent.

To exercise any rights, use the in-app account controls or contact support@kootenayconnection.app. We will verify your identity and respond within the timeframes required by applicable law.

8. Children's Privacy

The Services are not directed to children under 13, and we do not knowingly collect personal information from children. If you believe a child provided information, contact us so we can delete the data.

9. Security

We implement administrative, technical, and physical safeguards to protect personal information, including secure transport (HTTPS), access controls, encryption offered by our vendors, and regular security reviews. No method of transmission or storage is completely secure; we encourage you to use strong passwords and keep your device software updated.

10. Third-Party Links and Services

Our Services may contain links to third-party sites or services, including merchant websites. We are not responsible for the privacy practices or content of third parties. Review their policies before sharing information.

11. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or industry standards. We notify you of material changes through the app, email, or by updating the effective date at the top of this page. Continued use of the Services after an update constitutes acceptance.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, contact us at:

Kootenay Connection Advertising Inc.
Email: support@kootenayconnection.app

13. Mobile Platform Disclosures

Apple App Store and Google Play require disclosures about data access and usage. We request permissions only to deliver features described in this policy, such as location-based business discovery and secure authentication. You can manage permissions in your device settings. Disabling certain permissions may limit functionality.