Last updated: August 24, 2026 · Effective date: August 24, 2026
Privacy in one line: We collect the minimum needed to track your bills, we never sell your data, we never use your bill data for advertising, and you can delete your account and everything in it at any time.
1. Introduction
This Privacy Policy describes how BillMaple ("BillMaple", "we", "us", or "our") handles personal information when you use the BillMaple app and website ("Service"). We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. By using the Service, you agree to this policy.
2. Information we collect
Information you provide
- Account details (required): your name and email address. Your password is handled by our authentication provider and is never stored by us in readable form. If you sign in with Google or Apple, we receive a limited identifier and the email address associated with that account.
- Profile details (optional): phone number, street address, city, province, and postal code. You can leave these blank. When you do provide them, we use the address fields to tailor utility-provider suggestions, your time-of-use electricity rates, and your local trash and recycling collection schedule; the phone number is stored for SMS reminders we plan to offer.
- Bill & expense data: the provider, amount, due date, category, billing frequency, payment status, and account number for each bill you add or import.
- Support communications: messages you send us.
Information you send us for processing
- Bill photos and documents: when you scan a bill, the image is sent to our server function, which passes it to our AI processing provider to read the provider name, amount, due date, and category. The image itself is not stored — not by us, and not by that provider on our behalf. Only the extracted fields are saved to your account.
- Forwarded emails: if you turn on email auto-import, we give you a personal import address, and the bill emails you forward to it are processed to extract those same fields. The body of a forwarded bill email is not retained. If your mail provider sends a forwarding-confirmation message, we do store its confirmation code and link so that you can finish setting up forwarding; you can remove this by turning auto-import off.
Information collected automatically
- In-app usage data: device type, operating-system version, app version, and the actions you take in the app, used to operate and improve the Service. We use PostHog for this.
- Diagnostics: crash reports and performance traces from the app, used to find and fix problems. We use Sentry for this.
- Website analytics: aggregate page views and clicks on this website, plus the campaign code of the printed flyer or ad a visit came from. We use PostHog and Google Analytics for this. We do not record browsing sessions, we have turned off Google Signals and ad personalisation so this data is not used for advertising, and we honour your browser's Do Not Track setting.
BillMaple does not contain advertising, and the app does not access your device's advertising identifier.
3. How we use information
We use personal information to:
- Provide, operate, and maintain the Service (tracking bills, reading the bills you scan or forward, and sending reminders);
- Display Ontario Time-of-Use rate information;
- Process subscriptions and provide customer support;
- Secure the Service and detect or prevent fraud and abuse;
- Improve features and fix problems using aggregated or de-identified analytics;
- Comply with legal obligations.
We do not sell your personal information, and we do not use your financial data for advertising.
4. Sign-in credentials & device security
BillMaple does not connect to your utility, telecom, or bank accounts, and never asks for those passwords. When you choose to pay a bill, we open the provider's own website so that you pay there, directly with them. We do not see or handle that transaction.
Your BillMaple password is handled by our authentication provider and is never stored by us in readable form. If you turn on the biometric lock, the fingerprint or face data stays on your device and is checked by the operating system — it is never sent to us. See the Security page for technical detail.
5. Consent & legal basis
We process your personal information based on your consent (which you give by using the Service), to perform our contract with you, and to meet our legitimate interests in operating and securing the Service. You may withdraw consent at any time by turning off the feature concerned or by deleting your account, though some features may no longer work.
6. How we share information
We share personal information only as needed:
- Service providers / processors: trusted vendors that act only on our instructions, under contracts that require them to protect your data. Today these are: Google Firebase (authentication, database, and server functions), Anthropic (reads the bill images and forwarded emails you send for processing), PostHog (usage analytics), Sentry (crash and performance diagnostics), and RevenueCat (subscription management).
- App stores & payment processors: Apple and Google handle subscription billing.
- Legal & safety: when required by law, court order, or to protect rights, safety, and security.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.
7. Data retention
We keep personal information only as long as needed to provide the Service and for legitimate or legal purposes. When you delete your account, we delete or de-identify your personal data within 30 days, except where we must retain certain records to comply with law.
8. How we protect data
We use bank-grade encryption in transit (TLS) and at rest, access controls, and the local-token approach described above. No system is perfectly secure, but we work continuously to protect your information. See Security.
9. Your privacy rights
Subject to applicable law, you can:
- Access the personal information we hold about you;
- Correct inaccurate information;
- Export your data in a portable format;
- Delete your account and associated data;
- Withdraw consent for an optional feature at any time.
To exercise these rights, use the in-app controls or email bill@billmaple.ca. To delete your account — including if you have already uninstalled the app — see Delete your account.
10. Children's privacy
BillMaple is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.
11. App store data & permissions
Consistent with Apple App Store and Google Play requirements, we disclose in our store listings the data we collect and link to your identity. That disclosure covers: name, email address, phone number and address; other financial info (your bill records); emails, where you use email auto-import; photos, which are processed to read a bill and not stored; app interactions; and crash logs and diagnostics. We do not collect payment information: subscription billing is handled entirely by Apple and Google.
The app may request permissions such as camera and photo access (for bill scanning) and notifications (for bill reminders). You can manage permissions in your device settings.
12. Data location
We aim to store data in Canada where practical. Some service providers may process data outside Canada; where that occurs, the data remains protected under comparable safeguards and this policy.
13. Changes to this policy
We may update this policy. We will revise the "Last updated" date and, for material changes, notify you in the app or by email.
For privacy questions or to reach our privacy officer, email bill@billmaple.ca. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.
