Privacy Policy

Last updated: June 18, 2026  ·  Effective date: June 18, 2026

1. Introduction

This Privacy Policy describes how BillMaple ("BillMaple", "we", "us", or "our") handles personal information when you use the BillMaple app and website ("Service"). We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. By using the Service, you agree to this policy.

2. Information we collect

Information you provide

• Account details: name, email address, province, and password (stored only as a salted hash).
• Bill & expense data: the bills, balances, due dates, providers, and notes you add or import.
• Support communications: messages you send us.

Information collected automatically

• Device & usage data: device type, operating-system version, app version, and in-app actions used to operate and improve the Service.
• Diagnostics: crash and performance logs.

Information from linked providers

• Account balances & due dates retrieved from utility, telecom, or other provider accounts you choose to connect.
• Scanned bill data extracted from documents you scan with the OCR feature.

3. How we use information

We use personal information to:

• Provide, operate, and maintain the Service (tracking bills, sending reminders, syncing accounts);
• Display Ontario Time-of-Use rate information;
• Process subscriptions and provide customer support;
• Secure the Service and detect or prevent fraud and abuse;
• Improve features and fix problems using aggregated or de-identified analytics;
• Comply with legal obligations.

We do not sell your personal information, and we do not use your financial data for advertising.

4. Provider credentials and tokens

When you connect a provider account, your login session is secured using hardware-backed encryption on your own device (Apple Keychain / Android Keystore). We do not store your plain-text provider passwords on our servers. We retrieve only the balance and due-date information needed to keep your dashboard current. See the Security page for technical detail.

5. Consent & legal basis

We process your personal information based on your consent (which you give by using the Service and by choosing to link accounts), to perform our contract with you, and to meet our legitimate interests in operating and securing the Service. You may withdraw consent at any time by disconnecting accounts or deleting your account, though some features may no longer work.

6. How we share information

We share personal information only as needed:

• Service providers / processors: trusted vendors that host our infrastructure, deliver notifications, or provide analytics, under contracts that require them to protect your data and use it only on our instructions.
• App stores & payment processors: Apple and Google handle subscription billing.
• Legal & safety: when required by law, court order, or to protect rights, safety, and security.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.

7. Data retention

We keep personal information only as long as needed to provide the Service and for legitimate or legal purposes. When you delete your account, we delete or de-identify your personal data within 30 days, except where we must retain certain records to comply with law.

8. How we protect data

We use bank-grade encryption in transit (TLS) and at rest, access controls, and the local-token approach described above. No system is perfectly secure, but we work continuously to protect your information. See Security.

9. Your privacy rights

Subject to applicable law, you can:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Export your data in a portable format;
• Delete your account and associated data;
• Withdraw consent or disconnect linked accounts.

To exercise these rights, use the in-app controls or email bill@billmaple.ca.

10. Children's privacy

BillMaple is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

11. App store data & permissions

Consistent with Apple App Store and Google Play requirements, we disclose the data we collect and link to your identity (such as account info, financial bill data, and usage data) in our store listings. The app may request permissions such as camera access (for bill scanning) and notifications (for reminders). You can manage permissions in your device settings.

12. Data location

We aim to store data in Canada where practical. Some service providers may process data outside Canada; where that occurs, the data remains protected under comparable safeguards and this policy.

13. Changes to this policy

We may update this policy. We will revise the "Last updated" date and, for material changes, notify you in the app or by email.

14. Contact & complaints

For privacy questions or to reach our privacy officer, email bill@billmaple.ca. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.