Privacy Policy

Finding Horizons is a travel organization and discovery application operated by Findingjordyy Inc. ("we", "us", "our"), its parent company. Our mailing address is: 5513 Avenue de Monkland, Montréal, QC H4A 1C8, Canada.

Privacy inquiries: privacy@findinghorizons.ca

This Privacy Policy applies to information collected through our mobile app, website, and related services. It covers Canadian users (PIPEDA and Québec Law 25 awareness) and US users (state privacy law awareness). We do not knowingly collect data from children under 13.

Account & Identity Data: Email address, display name, and profile photo from Apple Sign-In, Google Sign-In, or email magic link; account creation date; optional profile bio and avatar.

Identity Verification (Optional): Some community features — hosting a meetup, for example — require a one-time identity check. That check is run by Stripe Identity: you are sent to a page hosted by Stripe where you photograph a government-issued identity document and take a matching selfie. Your document and your selfie go to Stripe, not to us. We never see, receive, or store the images, the document number, or your date of birth. What we store on your profile is the outcome only — a status of pending, verified, or failed. Stripe processes and retains that data under its own terms as an independent controller. If you never start a check, we hold nothing.

Meetups & Traveller Presence (Optional): If you use meetups, we store the meetups you host or RSVP to (title, description, the public venue you pinned, city, country, start time, capacity), your RSVP status, any presence you broadcast (a city-level “I'm around today” with an intent such as coffee or cowork), and the people you have saved or blocked. A meetup is always pinned to a public map point you chose — never a free-typed address. Blocking is enforced on our servers and hides both people from each other. A meetup also has a small coordination chat: meetup chat is visible only to that meetup's members, becomes read-only when the meetup ends, is kept for 30 days so a safety report can be reviewed against it, and is then deleted permanently. It is not private messaging — it belongs to the one meetup and does not outlive it.

Imported & Pasted Content: URLs you import from TikTok, Instagram, YouTube, Google Maps, Klook, or other platforms; page metadata (title, description, thumbnail) extracted server-side; booking confirmation text and itinerary emails you paste; screenshots, PDFs, and images you upload.

Travel & Planning Data: Saved places (Points) including name, category, location, notes, and rating; Collections; Trips, itineraries, side quests, detours, mini quests, and bookings; budget entries.

Location Data (Optional): Approximate or precise device location, only if you grant permission and only when you trigger a location feature. If you opt into background access ("Always Allow", offered only in context), we additionally receive low-power significant-change updates while the app is closed. In both cases we store a single coarse last-known position (~1 km rounding) plus country-level stay records for visa tracking — never a movement trail. See our Location Data Policy.

Camera & Photos (Optional): Photos you take or select for your profile picture, Hidden Gems, booking/screenshot scanning, a finished mission, your trip journal, or an experience you logged. Images shared for scanning are processed to extract place and booking details. Journal, mission and experience photos are stored in a private storage area that only your account can reach (shown to you through short-lived links); the date, time and position written inside a photo file are read only to put that photo on the right day and stop of your trip. We never scan your photo library — only what you pick.

Compass (no data collected): Horizon's compass turns with your phone's magnetic heading. The heading is read on your device, used only to draw the compass, and never sent to us or stored.

Horizon Conversations: When you talk to Horizon, the in-app travel companion, we store each conversation thread (its title, your messages and Horizon's replies, and which of your own records Horizon read to answer) so you can come back to it. Messages are deleted automatically after 90 days; thread titles stay while your account is active. If you use the microphone, your recording is transcribed to text — on an iPhone, on the phone itself by Apple's speech recognition where your phone supports your language, otherwise by our transcription provider (section 4) — and the audio is not kept. Horizon is powered by Meta — see section 4 and the AI & Data Disclosure.

Friends: If you add friends, we store your friend connections and pending requests, and show your friends the display name, username and photo you set. Blocking removes the connection and hides both of you from each other.

Reminders You Set Through an Assistant (Optional): If you connect your own AI assistant and ask it to remind you of something, we store the reminder's text, its time and the trip or place it points to, and send it to you as a notification at that time. You can list and cancel reminders from your assistant at any time.

Signing In on Your Computer: From the app you can open the website already signed in. We create a single-use sign-in link for your own account; it expires quickly, works once, and is removed from the browser address bar as soon as it is used.

Community Contributions: Hidden Gems you create (place name, category, coordinates, description, tips, and photo) and their community status. Personal gems are private to you; sharing one to the community is an explicit action.

Push Notification Data: A device push token (if you enable notifications) and delivery metadata, used solely to send you the alerts you opted into.

Bring-Your-Own-AI Connector (Optional): If you mint a personal connector key, we store only a one-way hash of it — the key itself is shown to you once and never retained in plaintext. Understand what connecting does: it lets the AI assistant you connected read and change your Finding Horizons data, and sends that data to whoever operates that assistant (Anthropic, OpenAI, or another vendor) under their terms, not ours. The connector reaches only your own account, and access ends when you revoke the key. Nothing is connected until you create a key. See the AI & Data Disclosure, section 7.

Companion Learning (transparent): The in-app travel companion can learn simple patterns from what you actually do on trips (for example, that you tend to choose nature over museums), stored as counters against your account. It is fully visible and controllable: Profile → Settings → “What Horizons has learned about me” shows every learned pattern with its evidence, and each one can be corrected, switched off, or deleted permanently. Nothing is learned from a single event, and deleted patterns are never re-learned.

Payment & Subscription Data: Your entitlement (which plan your account holds and until when), and the identifiers our billing systems use to link a purchase to your account. Subscriptions bought in the iOS or Android app are sold and charged by Apple or Google and reconciled for us by RevenueCat; subscriptions bought on the web are charged by Stripe. We never store card numbers, CVV, or bank details — the store or Stripe handles payment method data exclusively, and we never receive it.

AI & Prompt Context: If you use AI features, the content of that request — a shared link and the public post text behind it, an image or PDF you uploaded, a video or audio file you shared for transcription, or the trip and place context for a brief or replan — is processed by our AI providers, OpenAI and Google (Gemini API); conversations with Horizon, the travel companion, are processed by Meta (Muse API). OpenAI handles text, structuring and speech transcription; Gemini reads the images and video frames of posts you share so places visible only on screen can be found; Meta writes Horizon's replies and trip briefs and never falls back to another provider. Requests carry the content of the task, never your identity: your email, account identifier, name, payment details, identity-verification data, and device location are not sent. We do not send your data for AI training. See our AI & Data Disclosure.

Referral Data: Referral code, whether referred users signed up via your link, and referral reward status.

Device & Usage Data: Browser type, device type, OS, app version; pages visited, features used, session timing; error logs and crash reports. Firebase Analytics is optional, browser-only, and requires configuration.

• To provide and operate the Finding Horizons Service
• To sync places, trips, and collections across your devices
• To generate AI itinerary suggestions based on your trip context (when enabled)
• To display maps, place data, and event listings
• To process subscription payments via Stripe
• To send magic link emails for sign-in
• To send optional trip reminders and import alerts (with your permission)
• To send optional smart notifications — nearby saved places, community gems, quest stops, live-event and disruption alerts, visa-day countdowns — when you enable notifications and location
• To build aggregated, anonymized travel intelligence (e.g. which places travellers as a whole visit and love). This never identifies you, and personalized features derived from your own activity are transparent and can be turned off
• To improve the Service through aggregate usage analysis
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not sell your personal information. We do not use your data for behavioural advertising on third-party platforms.

• Supabase (Ireland/US): Database, authentication, and storage. Your data is protected by row-level security.
• Vercel (US): Web hosting and serverless functions.
• Stripe (US): Payment processing for web subscriptions, and Stripe Identity for the optional one-time identity check. For the identity check Stripe receives your identity document and selfie directly and acts as an independent controller; we receive only pass/fail.
• RevenueCat (US): Reconciles App Store and Google Play subscription receipts so we know which plan your account holds. Receives a purchase receipt and an account identifier — never your payment method.
• Apple / Google (US): Sell and charge subscriptions bought inside the iOS and Android apps. They are the merchant of record for those purchases and hold the payment relationship with you.
• Google OAuth / Maps / Places / Routes API (US): Sign-in, map/place data, and transit timing for the live trip view (travel time to your next stop and the evening's last transit option). Queries are routed server-side and carry coordinates for the leg being timed — never your identity.
• PredictHQ (NZ/US) & Ticketmaster (US): Live-event and disruption discovery. Queries are server-side and contain a city or coarse coordinates — never your identity.
• RapidAPI providers (US): Used server-side to read the public social posts and event listings you ask us to import or search. Only the shared URL or query is sent — never your identity or account data.
• OpenAI (US): AI provider for text: content extraction from captions and transcripts, and trip/place context for generated briefs and proposals. Minimum necessary data only, never your identity, and not sent for model training.
• Google Gemini API (US): AI provider for vision: reads the images and video of public posts you share so on-screen place names can be extracted. Receives the media and public post content only — never your identity — via our servers, on a paid API tier that is not used for model training.
• Meta Platforms (US) — Muse API: AI provider for Horizon, the in-app travel companion: your messages in a Horizon conversation and the records Horizon reads from your own account to answer them, and trip details for a day-before brief. Never your email, name or account identifier; standard-tier models only, which Meta states are not trained on this data.
• An AI assistant you connect yourself (optional): Only if you mint a connector key. Your assistant's operator then receives whatever your assistant reads from your account, under their terms. Nothing is shared until you connect one.
• Apple Push Notification service: Delivers your notifications; receives only your device token and the message.
• NOAA (US): Space-weather data for aurora forecasts. No personal data is sent.
• Firebase (Google, US): Optional analytics and App Check only. Firebase Auth is not used — Supabase is the sole auth system.

We do not share your personal information with unrelated third parties, advertisers, or data brokers. We may share information if required by law or to protect user safety.

Your data may be stored and processed in countries outside Canada (including the US and Ireland) by our service providers. These transfers occur under appropriate safeguards. By using the Service, you consent to these transfers.

We retain your account data for as long as your account is active. You can delete your account yourself at any time — in the app under Profile → Settings → Delete account, or on the web under Settings. Deletion is immediate and irreversible: it removes your profile, saved places, trips and plans, imports, photos, collections, community activity and subscription records. Encrypted backups may retain copies for up to 30 days before they age out, and we keep a record that the deletion happened (a bare account identifier and a timestamp, holding no personal information) so we can demonstrate the request was honoured. We retain nothing else except where the law requires it — purchase and tax records being the usual exception, which are held by the app stores and our payment processor as well as us. Anonymous community place records you contributed are not deleted, because other travellers' maps depend on them; they carry no identity and cannot be traced back to you. Full detail is on our Delete Your Account page.

Meetup chat is deleted on a fixed schedule, whether or not you delete your account. While a meetup is active its members can read and post. When the meetup ends the chat becomes a read-only archive for the people who were in it — nobody can add to it, and nobody can erase it, including the person who wrote a message and the host. We keep that archive for 30 days so that a safety or moderation report filed after the meetup can be reviewed against what was actually said, and after 30 days the messages are permanently deleted by an automated retention job.

Horizon conversations are deleted on a fixed schedule: every message older than 90 days is removed automatically by a retention job; the thread's title, and what Horizon has learned about your preferences (which you can see, correct, pause or delete in Profile), stay while your account is active.

Deleting your account does not cancel a subscription. A subscription bought in the app is billed by Apple or Google and must be cancelled in that store.

You may have the right to access, correct, delete, and port your personal data, and to withdraw consent to optional processing. Deletion is self-serve — see section 6. For anything else, contact privacy@findinghorizons.ca — we will respond within 30 days.

Location is optional and the app works without it. We ask for while-using-the-app location the first time a feature needs it, and we only ask for background ("Always") location later, in context, when you open Free Roam — never during sign-up. Background location uses low-power significant-change updates so we can tell you when you pass near a place you saved; it is not continuous tracking, it is never used for advertising, and it is never sold or shared with advertisers. You can withdraw either permission at any time in iOS or Android Settings, and every other feature keeps working.

Findingjordyy Inc. operates from Québec, Canada and is subject to PIPEDA and Québec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25). You have the right to access, correct, delete, de-index, and port your personal information. Contact privacy@findinghorizons.ca.

As required by Law 25, the person in charge of the protection of personal information at Findingjordyy Inc. is its president, who can be reached at privacy@findinghorizons.ca.

If you are a US resident, applicable state privacy laws (including CCPA) may grant additional rights. We do not sell personal information as defined by these laws. Exercise your rights by contacting privacy@findinghorizons.ca.

We use TLS encryption, Supabase row-level security, server-side API key management, and Stripe for payment data. No system is completely secure — you use the Service at your own risk. See our Security page.

We use session cookies required for authentication and local storage for theme preferences. We do not use cross-site advertising cookies. See our Cookie Policy.

The Service is for adults 18 and older and is not directed at anyone under 18; every account confirms its holder is 18 or older when signing in. We do not ask for or store a date of birth to do this. If you believe someone under 18 has provided us with personal information, contact privacy@findinghorizons.ca and we will delete it promptly.

We may update this Policy from time to time. We will notify you of material changes via in-app notification or email. Continued use after notification constitutes acceptance.

Privacy: privacy@findinghorizons.ca

Support: support@findinghorizons.ca

5513 Avenue de Monkland, Montréal, QC H4A 1C8, Canada