Privacy Policy

Account information. Your email address, display name, and sign-in details. If you sign in with Google, we receive your name and email from Google. Passwords are stored encrypted and are never visible to us.

Investment records you enter. Institution, product type, principal, interest rate, start and maturity dates, account type (e.g. TFSA, RRSP), notes, and renewal decisions.

Group information. Groups you create or join, members' roles, and invitations.

Technical and security data. Pages visited, IP address, browser type and referring page, recorded on our servers to keep the service secure and reliable.

We never ask for, and you should never enter, bank login credentials, account or transit numbers, or your Social Insurance Number. Kihteyaya does not connect to your bank and shows estimates only.

• To provide your dashboard, yield estimates, maturity reminders and renewal comparisons.
• To share holdings with group members you invite.
• To send service emails such as password resets and maturity reminders you have enabled.
• To protect the service against abuse, including blocking malicious traffic.
• To understand overall usage so we can improve Kihteyaya.

We do not use your information for advertising, and we do not sell, rent or trade it.

Kihteyaya does not use advertising cookies, tracking pixels, or third-party analytics. We use your browser's storage only for things that are strictly necessary:

• Keeping you signed in.
• Remembering where to return you after you sign in (cleared immediately afterwards).

Our page fonts are loaded from Google Fonts, which may receive your IP address when your browser requests them.

Your holdings are visible only to you and to members of groups you choose to share with. Group owners control who is invited and what each member may change.

We use trusted service providers to host data, deliver email and authenticate sign-ins. They process information only on our instructions. Some providers may store data outside Canada, including in the United States, where it may be subject to local law.

We may disclose information if required by law or to protect the rights and safety of our users.

Data is encrypted in transit, and access is restricted so each person can see only their own records and the groups they belong to. No system is perfectly secure; if a breach creates a real risk of significant harm, we will notify affected users and the Office of the Privacy Commissioner of Canada as required.

We keep your information while your account is active. You can edit or delete any holding at any time. To delete your account and all associated data, email privacy@kihteyaya.ca; we will complete the request within 30 days. Security logs are kept for a limited period and then deleted.

You may ask to access, correct, or delete your personal information, or withdraw consent for optional uses such as email reminders (which you can also turn off in Settings). We respond to requests within 30 days. If you are not satisfied, you may contact the Office of the Privacy Commissioner of Canada.

Kihteyaya is intended for adults. We do not knowingly collect information from anyone under the age of majority in their province.

If we make significant changes, we will update the date above and notify signed-in users by email or on the site before the changes take effect.

Questions, requests or concerns about privacy can be sent to our privacy contact at privacy@kihteyaya.ca.