MapleExpat Privacy Policy

Version: privacy-2026-10-16
Effective date: the date MapleExpat version 1.0 (build 6) is released
Version française : https://versurasolutions.com/mapleexpat/privacy/fr

1. Who we are

MapleExpat is an iOS app for Canadians who are leaving Canada, living abroad or moving back. It is operated by Versura Solutions Inc., a corporation incorporated under the laws of Alberta, Canada ("Versura", "we", "us"), PO Box 73047, RPO Hampton, Edmonton, Alberta T5T 3X1, telephone +1 825 437 7730. We decide how and why your personal information is handled (we are its "controller").

This policy explains what personal information the app collects, why, who receives it, where it goes, how long it is kept, and what you can do about it.

Privacy Officer. Our Privacy Officer is Jacob Caley, jacob@versurasolutions.com. He is the person in charge of the protection of personal information. Send questions, requests and complaints to him.

MapleExpat is a tracker, reminder service and plain-language explainer. It is not a tax filing service and does not give tax, legal or investment advice.

2. Which laws this policy is written for

We are a Canadian business. This policy is written to meet:

• the Personal Information Protection and Electronic Documents Act (PIPEDA), which applies to our collection of personal information from users outside Alberta and to information that crosses provincial or national borders;
• Alberta's Personal Information Protection Act;
• for people who live in Quebec, the Act respecting the protection of personal information in the private sector (section 11 sets out your additional rights, and section 18 our governance policies); and
• for people in the European Economic Area and the United Kingdom, the GDPR and the UK GDPR (section 12).

3. What we collect and why

We collect what you type into the app, what the app works out from it, and the account and technical records described in the table below. We collect nothing else.

The app contains no analytics, advertising or crash-reporting tools. It does not track you across other apps or websites. It does not ask for your location, contacts, photos, camera or microphone, and it sends no push notifications.

On your phone. The app keeps on your phone a copy of your trip log, checklist, Residency Signal, day counts and Premium status, so the app and its widget work quickly and offline. It also stores our reference content, which contains nothing about you. These copies are removed from the phone when you sign out or delete your account. When you export your data or create a Pro Question Brief, the file is written to a protected temporary location and handed to the iOS share sheet; where it goes from there is your choice.

Consent. You create an account by asking for a sign-in code. You agree to this policy with the tick on the onboarding welcome screen, before you enter anything else. Ask MapleExpat needs a separate, explicit consent (section 6), and reminder emails are off unless you turn them on (section 7). You can withdraw consent as described in section 9. If you withdraw consent to information the app needs in order to work, you may no longer be able to use the parts that depend on it.

Information you must give. An email address is needed to have an account. Your profile answers are needed for the Residency Signal and checklist to work. Everything else is optional.

Our website. This policy is about the app. Our public website, versurasolutions.com, uses Google Analytics and Cloudflare Web Analytics on its general pages, including the MapleExpat product page. The MapleExpat Terms, Privacy Policy, support and unsubscribe pages run no analytics. The website has its own privacy notice at versurasolutions.com/privacy.

4. Who receives your information

We do not sell personal information, rent it, share it with data brokers or use it for advertising. We use the service providers below to run the app. Each receives only what it needs for its task, and each is bound by a written data processing agreement. These agreements require the provider to use your information only to provide its service to us, keep it confidential and secure, tell us about security incidents, and delete it when its service ends. That protection is at least equal to the protection in this policy.

Links to other sites. Some screens link to pages run by others, such as canada.ca, Finance Canada and broker websites. A link opens the page in your browser, outside the app. Nothing from your MapleExpat account is added to the link. We do not receive information about your visit, and the other site's own privacy policy applies to it.

We may also disclose personal information where the law requires it (for example, a court order), to protect the safety or rights of users or others, or to our professional advisers under a duty of confidentiality. If the business is sold or reorganised, personal information may be disclosed to the buyer, who must handle it as this policy describes. We would tell you in the app before that happened.

5. Your information leaves Canada

Our database and its backups are in Canada. Parts of your information are processed in other countries:

• Email: sent by Resend from Tokyo, Japan, and processed mainly in the United States, where Resend keeps email content and metadata for 30 days.
• Ask MapleExpat questions and the profile details sent with them: Anthropic, outside Canada, including the United States.
• Subscription records: RevenueCat in the United States, and Apple.
• Server functions: Supabase handles each request in the region closest to the caller, which may be outside Canada. The database itself stays in Canada.
• Platform logs: Supabase's request, sign-in and error logs, which can contain account ids and IP addresses, are stored and processed in the European Union for 7 days.

Information processed in another country is subject to that country's laws, and its courts, police and security agencies may be able to obtain it there. Before sending information outside Quebec or Canada, we assess the risks and put written agreements in place with each recipient (section 11).

6. Ask MapleExpat and Anthropic

Ask MapleExpat answers questions using Claude, an AI model made by Anthropic. It is optional. Everything else in the app works without it.

6.1 Your consent

Before your first question, the app shows a consent screen, and nothing is sent to Anthropic until you agree. Our server checks for your consent before every question. If we change what we tell you on that screen, or what is sent, we ask you again. You can withdraw consent at any time in Settings; Ask then stops until you agree again.

The consent screen (version 3) says:

Before your first question

Ask uses Claude, an AI made by Anthropic. Anthropic is outside Canada.

What we send: your question; whether you are leaving Canada, living abroad or returning; your country of residence and your departure and return dates; your answers about your ties to Canada; the account types you hold (RRSP, TFSA, non-registered, rental); your days in Canada this year and your Residency Signal; and, if you entered a planned move, its kind and date, the ties you expect after it, any answers you marked as unsure, and the signal after it — plus, if your ties were different when you left, that date and the signal then.

What we never send: your name, email address, Apple ID, account id, trips, checklist, saved questions, payment information, or anything else you typed, such as your display name or trip notes.

How long it is kept: Anthropic deletes your question and its answer within 30 days; if its safety systems flag a question, they may keep it up to 2 years, and safety scores up to 7 years. Anthropic does not use your questions to train its AI. MapleExpat keeps your questions and answers for 365 days, so you can see them again; then they are deleted.

Your choice: Ask is optional. You can withdraw any time in Settings. That deletes your Ask history. Questions already sent cannot be unsent.

[ ] I agree — turn on Ask [ Not now ]

6.2 What is sent with each question

Each question is sent to Anthropic with these details and no others:

• the question text;
• whether you are leaving Canada, living abroad or returning;
• your country of residence, and your departure and return dates;
• nine answers about your ties to Canada: a home kept in Canada; a spouse or partner in Canada; dependants in Canada; a provincial driver's licence (and the province); a provincial health card; personal property kept in Canada; a Canadian bank account or credit card; a Canadian passport; and whether you filed a final departure return;
• whether you hold four kinds of account: an RRSP, a TFSA, a non-registered investment account, and rental property in Canada;
• your days in Canada this year and your current Residency Signal; and
• if you entered a planned move: its kind and date, the ties you expect after it, which of those answers you marked as unsure, and the signal after it; and if your ties were different when you left, that date and the signal then.

The request also carries short excerpts from our own reference content and fixed instructions. Each question is sent on its own, without your earlier questions, and without any identifier that links it to you.

Never sent: your name, display name, email address, Apple ID, account id, trips, checklist, saved questions, payment information, US green card answer, any status a professional confirmed, other account types (such as FHSA, RESP or pension), trip notes, or anything else you typed.

If a professional confirmed your status. If you have recorded a status that a professional confirmed, the status itself and its date are not sent. However, the Residency Signal we send is then based on that confirmed status rather than on your answers, so it may reflect what your professional concluded.

6.3 What we keep

We store each question and answer in our own database so that you can see your recent questions in your Pro Question Brief and your data export. We do not use them for any other purpose, and we do not use them to train any AI.

Each question and answer is deleted 365 days after it was created. When you withdraw AI consent, all your stored questions and answers are deleted at once, and deleting your account deletes them too. We keep, without any question text, the count of questions you have used, the time of each question and your AI consent record.

6.4 What Anthropic keeps

Anthropic states that for API customers it deletes inputs and outputs within 30 days of receipt or generation. Content its systems flag under its usage policy may be kept for up to 2 years, and trust and safety classification scores for up to 7 years. It may keep data longer where the law requires. Source: Anthropic Privacy Center, data retention.

Anthropic states that by default it does not use inputs or outputs from its commercial products, including its API, to train its models. Source: Anthropic Privacy Center, model training. Both pages were checked in October 2026.

Questions already sent cannot be recalled from Anthropic when you withdraw consent or delete your account.

6.5 Automated output

The Residency Signal is computed by fixed rules from your answers, not by AI. Ask MapleExpat's answers are generated by AI. Neither is a decision about you: no one uses them to grant or refuse you anything, and each is general information for you to take to a professional.

7. Emails we send

Deadline reminders (optional). Reminder emails are sent only if you turn them on, at onboarding or in Settings. If a checklist item is open and due within 30 days, we email you 30, 7 and 1 days before the due date. Free users get reminders for the checklist items they can see; Premium users for their whole checklist. Reminders come from mapleexpat@versurasolutions.com and contain your display name, each item's name, its due date and how many days away it is. They contain no images and no open or click tracking.

How to stop them: turn off "Reminder emails" in Settings; use the "Stop reminder emails" link at the end of every reminder; or use your email app's own unsubscribe button, which works because every reminder carries the standard one-click unsubscribe header. Turning reminders off stops the emails only; your deadlines still show in the app. Marking an item done, not applicable, snoozed or flagged for your pro stops its reminders; a snoozed item's reminders start again when the snooze ends.

Every reminder identifies the sender as Versura Solutions Inc., PO Box 73047, RPO Hampton, Edmonton, Alberta T5T 3X1, with jacob@versurasolutions.com as the contact address.

The unsubscribe link opens a page on versurasolutions.com that changes nothing until you press its button. The code that identifies you sits in the part of the web address that browsers do not send to the website, so the website never receives it; the page passes it to our server only when you press the button. The page runs no analytics.

Service emails. We also send emails you need in order to use the service: sign-in codes (only when you ask for one), the notice before each Premium renewal, notices of changes to our Terms or this policy, and replies to your requests. These are not marketing.

No marketing. We do not send marketing email from the app.

8. How long we keep information

App Review sign-in log. We run a separate sign-in service for Apple's app reviewers, switched on only while Apple is reviewing the app. While it is on, anyone who calls it is recorded with the time, the outcome and a code made from their internet address with a secret key, so repeated guessing can be blocked. The record is kept 30 days.

9. Your rights and choices

• Access and copy. Settings, "Export my data (JSON)", gives you a file of the information we hold about you: your email address and everything in your profile (including your reminder setting), trips and tracked countries, checklist, Ask questions and answers and your question records, subscription status, AI consent records, acceptance records and reminder records. The file uses technical section names (for example, jurisdiction_rules for your tracked countries). The one-way security codes in section 8 are not included because they do not name you. For anything else, write to the Privacy Officer.
• Correction. You can change your profile, trips and checklist in the app at any time. Write to the Privacy Officer about anything you cannot change yourself.
• Withdrawing consent. Withdraw AI consent in Settings. Turn reminder emails off in Settings or from any reminder. Withdraw consent to everything else by deleting your account.
• Deletion. See section 10.
• Complaints. Write to the Privacy Officer first. You may also complain to the Office of the Privacy Commissioner of Canada, to the Office of the Information and Privacy Commissioner of Alberta, and, if you live in Quebec, to the Commission d'accès à l'information du Québec.

We answer written requests free of charge within 30 days. We may need to confirm your identity first, usually by asking you to write from the email address on your account.

10. Deleting your account

Settings, "Delete my account", deletes your account and the data on our servers, in this order:

1. If you signed in with Apple, the app asks Apple to confirm it is you. If the confirmation does not match your account, nothing is deleted.
2. We delete your customer record at RevenueCat. If that fails, nothing else is deleted, the app tells you, and you can try again.
3. If you signed in with Apple, we ask Apple to revoke MapleExpat's access. If that step fails, or you declined the Apple prompt, your account is still deleted, and the app shows you how to remove MapleExpat in your iPhone's Sign in with Apple settings.
4. We delete your account. Everything stored under it goes at the same moment: profile, trips, tracked countries, checklist, Ask questions and answers, question counts and records, subscription status, AI consent records, acceptance records and reminder records.

If deletion does not finish, the app says so and offers to try again, or you can email info@versurasolutions.com and we will complete it.

Deleting your account does not cancel your Premium subscription. Cancel it first in your iPhone's Settings, under your name, then Subscriptions; otherwise Apple keeps renewing it.

What deletion does not reach: copies in backups until they expire (7 days); copies Anthropic still holds under section 6.4; Resend's delivery logs (30 days); Apple's and RevenueCat's own transaction records; the short-lived security records in section 8; sign-in audit and request logs held by our database provider until they expire; internal records of subscription changes we made that contain account ids (24 months); and the minimal proof of AI consent described in section 8 (24 months).

11. Quebec residents

If you live in Quebec, you also have these rights under Quebec law:

• to be told what personal information we hold about you, and to get a copy;
• to have it corrected if it is inaccurate, incomplete or equivocal;
• to receive the information you gave us in a structured, commonly used technological format (the JSON export in section 9);
• to withdraw your consent; and
• to file a complaint with the Commission d'accès à l'information du Québec.

The person in charge of the protection of personal information is our Privacy Officer, Jacob Caley, jacob@versurasolutions.com. Our governance policies and practices are in section 18.

Your information may be communicated outside Quebec, to the providers named in section 4, in the places named in section 5. Before communicating personal information outside Quebec, we carry out a privacy impact assessment and put a written agreement in place with each recipient. We keep a register of all confidentiality incidents.

12. European Economic Area and United Kingdom

If you are in the European Economic Area or the United Kingdom, the GDPR or the UK GDPR applies to how we handle your information. Versura Solutions Inc. is the controller (contact details in section 1).

Legal bases.

• Performing our contract with you: your account, profile, Residency Signal, checklist, trips, Premium and the service emails in section 7.
• Your consent: Ask MapleExpat and deadline reminders. You can withdraw either at any time, without affecting what was done before.
• Our legitimate interests in keeping the service secure and preventing abuse: security records and logs.
• Legal obligations: tax and accounting records, and answering lawful requests.

We do not process special categories of personal data, and we make no decisions about you based solely on automated processing (section 6.5).

Your rights. You have the right to access, correct and erase your information, to restrict or object to how we use it, to receive a copy in a portable format (the export in section 9), and to withdraw consent. Write to the Privacy Officer. We answer within one month, free of charge. You may also complain to your local data protection authority (in the UK, the Information Commissioner's Office).

International transfers. We are based in Canada. The European Commission and the United Kingdom recognise Canada as providing adequate protection for personal information handled by organisations subject to PIPEDA, which includes us. When our providers process information outside Canada (section 5), they do so under data processing agreements that include the European Commission's standard contractual clauses and the UK International Data Transfer Addendum, and, for Resend, the EU-US Data Privacy Framework and its UK Extension. You can ask the Privacy Officer for more information about these safeguards.

13. Security

Each user can read only their own records in our database; the database itself enforces that rule. Records used only to run the service cannot be read by any app user. Subscription status, the Ask log and AI consent records can be written only by our server, not by the app. Information moves between the app, our servers and our providers over encrypted (HTTPS) connections. Sign-in sessions are short-lived and renew automatically. Our service keys are held as server secrets, never in the app. Unsubscribe links are signed with a secret key and can do only one thing: turn off that user's reminder emails. Within Versura, only the people who operate the service can reach the database.

No system is perfectly secure, but we work to protect your information and review our safeguards regularly.

14. If there is a breach

If a breach of security safeguards involving your personal information creates a real risk of significant harm to you, we will notify you and report it to the Office of the Privacy Commissioner of Canada as soon as feasible, and to Alberta's Information and Privacy Commissioner without unreasonable delay where the law requires. For Quebec residents, where a confidentiality incident presents a risk of serious injury, we will promptly notify the Commission d'accès à l'information and you. For EEA and UK users, we will notify the relevant data protection authority within 72 hours where the law requires, and you where the risk is high. We keep a record of every incident for 5 years.

15. Children

MapleExpat is not intended for anyone under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has given us information, write to the Privacy Officer and we will delete it.

16. Changes to this policy

When we change this policy, we publish the new version with a new version number and effective date. If a change is significant, we tell you in the app and by email at least 30 days before it takes effect, and ask you to accept it in the app. If we change what is sent to Anthropic, or what we tell you on the AI consent screen, the app asks for your consent again before your next question.

17. Contact

Privacy Officer: Jacob Caley, jacob@versurasolutions.com
Versura Solutions Inc., PO Box 73047, RPO Hampton, Edmonton, Alberta T5T 3X1, Canada
Telephone: +1 825 437 7730
Support: info@versurasolutions.com

18. How we govern personal information

Quebec's private-sector privacy law (section 3.2) requires us to publish our governance policies and practices in clear and simple terms. This section is that publication. Section numbers point to the rest of this policy.

Who is responsible. The person in charge of the protection of personal information is the Privacy Officer, Jacob Caley. Versura's co-founders have delegated this role to him in writing. He answers privacy requests, handles complaints and incidents, keeps the list of providers and their agreements current, carries out privacy impact assessments, and approves any change that affects personal information.

Roles within Versura. Only the people who operate MapleExpat can reach its database. Anyone at Versura who handles personal information must keep it confidential and use it only for the purposes in this policy.

Collection and use. We collect only what the app needs (section 3), use it only for the purposes stated there, and do not sell it or use it for advertising.

Retention and destruction. Each kind of information has a set retention period (section 8). Automated jobs delete information when its period ends. Deleting your account deletes everything stored under it at once (section 10).

Providers and transfers. We use five providers (section 4), each under a written agreement. Before communicating personal information outside Quebec, we carry out a privacy impact assessment that considers the sensitivity of the information, the purpose, the protections (including contractual ones) and the legal framework of the destination. We repeat it when a provider, its location or what we send it changes, and at least once a year.

New projects. Before we acquire, develop or redesign a system or feature that involves personal information, the Privacy Officer carries out a privacy impact assessment proportionate to the sensitivity, purpose, amount, distribution and format of the information.

Requests and complaints. Write to the Privacy Officer. We answer within 30 days (section 9). If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada, Alberta's Information and Privacy Commissioner, or, if you live in Quebec, the Commission d'accès à l'information.

Incidents. If personal information is lost, stolen or accessed without authorisation, we act to limit the harm and prevent a repeat. If an incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the people affected (section 14). We record every confidentiality incident in a register, keep each record for 5 years, and give the Commission a copy if it asks.

The AI feature. Ask MapleExpat is optional, needs your separate consent, and sends Anthropic only what section 6.2 lists. Neither the Residency Signal nor an Ask answer is a decision about you (section 6.5).

Training and review. The Privacy Officer briefs anyone at Versura on these practices before they are given access to personal information, and reviews this policy at least once a year.