Privacy notice (interim)
Interim notice, pending legal review. Our lawyer is drafting the final Privacy Policy. Until it is published, this page describes, as plainly as we can, what Maple Byways collects and how it is handled. It is not the final text, and it will be replaced. Questions: admin@maplebyways.ca.
Who we are
Maple Byways is a road-trip app operated by Kernkraft Consulting Inc., an Ontario corporation. For anything about your personal information, email admin@maplebyways.ca.
Where your information is stored
Your information is stored in Canada: on our server in Toronto, and email is sent through Amazon SES in its Canada (Central) region (ca-central-1).
If you sign in to the app with Apple or Google, Apple or Google handles that sign-in under its own privacy policy.
This website
- No cookies, no trackers, no third-party analytics. The site loads nothing from other companies: no fonts, scripts or ads.
- Server logs. Like most websites, our web server logs each request: your IP address, the time, the page and your browser's user-agent. We keep these logs for 30 days, for running and securing the server, and we use them to count daily visitors. Only the daily counts are kept after that.
- Email signup. If you sign up, we store your email address, the exact wording of the box you ticked ("Send me new Routes and trip ideas"), when you signed up, when you confirmed, and a tag for where the signup came from (for example an ad). We don't store your IP address with it.
Email and your consent
- We send news about Routes and trip ideas only to people who ask for it, by ticking an unticked box. On this website you also confirm through a link we email you; until you confirm, we send nothing else.
- Every email of that kind has an unsubscribe link, and unsubscribing takes effect right away.
- We keep a record of each consent (who, when and the exact wording) as proof under Canada's anti-spam law (CASL).
- In the app, some emails go to everyone because they are about your account or your saved Trips: sign-in links, account deletion confirmations, and notices that a Place in one of your Trips has closed. They carry no promotion.
The app (when it launches)
You can browse Routes without an account. If you sign in (with Apple, Google or an email link) to save a Trip, we store:
- your account: an identifier and your email address (which may be an Apple private-relay address);
- your Trips: the Stops you chose, their order, Days and any travel dates;
- your answers to "Did you go?" after a Trip;
- a record that you accepted the Terms: your account email, the terms version, the time and your IP address;
- your email choice, if you ticked "Send me new Routes and trip ideas".
Every device also records that you tapped "I understand" on the first-launch warning, under a random install ID with the terms version and time. It holds no advertising ID and no IP address.
The app counts Route views, saves, completed Trips and "Open in Google Maps" taps in our own database. There are no third-party analytics or advertising tools in the app, no advertising IDs and no location tracking.
How long we keep it
| Information | Kept |
|---|---|
| Server logs (including IP addresses) | 30 days |
| Backups | Deleted information ages out of backups within 14 days |
| Website signups never confirmed | 30 days |
| Consent records (who, when, the wording) | While the consent lasts, plus 3 years after you unsubscribe or delete your account |
| Terms acceptance records (email, terms version, time, IP) | 2 years after you delete your account |
| First-launch "I understand" records never linked to an account | 2 years |
| Your account, Trips and "Did you go?" answers | Until you delete your account |
These periods are also pending legal review.
Deleting your information
- App account: delete it in the app, or through a web link on this site (both available when the app launches). Deletion takes effect right away: your account, email address, Trips, travel dates and written "Did you go?" answers are deleted, Sign in with Apple access is revoked, and you get a confirmation email. Usage counts are kept only with your identity removed, reduced to the Route and the date. The terms acceptance and consent records are kept for the periods above, then deleted automatically.
- Website signup: use the unsubscribe link in any email from us, or email admin@maplebyways.ca.
Questions and changes
To ask what we hold about you, to correct it or to have it deleted, email admin@maplebyways.ca. This interim notice will be replaced by the final Privacy Policy; the effective date at the top will change when it is.