Privacy Policy

1. Information We Collect

• Account information: your email address and password (stored in encrypted/hashed form by our authentication provider) when you create an account.
• Profile information (optional): a first name and home neighborhood, and preferences like whether you want to see free activities only by default, if you choose to add them.
• Your children's profile information (optional): if you choose to add a child profile to filter activities more easily, we store a nickname you choose (not a legal name), a general age range (such as "6–8", not a birthdate), and activity interests you select. This is provided by you, the parent or guardian — never collected from a child directly — is visible only in your account, and is never shared publicly, with activity providers, or with anyone else. See Section 8 for more on children's privacy.
• Saved activities: the activities you choose to save or bookmark.
• Usage data: pages viewed, searches performed, and general interactions with the Service, collected to improve functionality.
• Device/local storage data: we use your browser's local storage to remember things like whether you've seen our onboarding screen. This does not identify you personally.
• Location information (optional): if you use the "get directions" or parking-suggestion feature, we may access the destination's location and, with your device's permission, suggest nearby parking through a third-party mapping service. We do not track or store your ongoing location.
• Information you submit: if you submit an activity or event for listing, we collect the details you provide.

2. How We Use Your Information

• To create and manage your account
• To let you save activities and sync them across devices
• To send account-related emails (verification, password reset)
• To improve and maintain the Service
• To detect and prevent fraud, abuse, or security issues
• To communicate with you about the Service, as described in Section 5

3. Legal Basis and Your Consent

We collect and use personal information based on your consent, to perform our contract with you by providing the Service, and for our legitimate interests in operating and improving the Service. Creating an account is an affirmative action that gives us your express consent to the collection and use described in this Policy. Where we rely on implied consent — for example, ordinary usage data collected while you browse — you may withdraw that consent at any time by contacting us at hello@fomogo.ca, though withdrawing consent for information we need to operate your account may limit or end your ability to use certain features.

4. How We Share Information

We do not sell your personal information. We may share information with:

• Service providers: Supabase (database hosting and authentication) and Vercel (application hosting and visit statistics), which may store data on servers located outside Canada, including in the United States. By using the Service, you consent to this cross-border transfer. Personal information held outside Canada is subject to the laws of the country where it is stored and may be accessible to that country's authorities.
• Mapping providers: Google Maps, if you use directions or parking-suggestion features.
• Legal requirements: if required by law, court order, or to protect the rights, safety, or property of Fomogo, our users, or others.

5. Communications

If you sign up, we may send you transactional emails (verification, password reset) and, if you opt in, occasional updates about new features or activities. We do not send unsolicited commercial electronic messages except in compliance with Canada's Anti-Spam Legislation (CASL), and you may unsubscribe from non-essential communications at any time.

6. Cookies, Local Storage, and Do Not Track

We use browser local storage — not third-party tracking or advertising cookies — to remember basic preferences, such as whether you've completed onboarding. You can clear this at any time through your browser settings. To count visits, we use Vercel Web Analytics, which records pages viewed, the referring site, browser, device type and country without cookies, and does not identify you or follow you to other sites. Because we do not track you across sites, we do not currently respond to browser "Do Not Track" signals; this Policy already describes the full extent of what we collect.

7. Data Retention

We retain your account information for as long as your account is active. If you delete your account or request deletion, we will delete or anonymize your personal information within a reasonable time, except where we are required to retain it by law — for example, records of a privacy breach are kept for at least two years as described in Section 10.

8. Children's Privacy

Fomogo is a tool for parents, guardians, and caregivers to find activities for children — it is not directed at children, and we do not knowingly collect personal information directly from children. Accounts must be created by an adult (18 years of age or older, the age of majority in Ontario). If we learn that a child has provided us with personal information without parental consent, we will delete it.

If you choose to add a child profile, we deliberately keep it minimal: a nickname rather than a legal name, and a general age range rather than a birthdate. You control this information entirely — you can edit or delete a child profile at any time from your Profile page, and doing so permanently deletes it from our systems.

9. Your Rights and How to Exercise Them

Under PIPEDA, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Withdraw consent, though this may limit your ability to use certain features
• Request deletion of your account and associated personal information

To exercise these rights, contact us at hello@fomogo.ca. We will respond to access requests within 30 days, as required by PIPEDA (or explain why we need more time). If you are not satisfied with our response, you have the right to complain to the Office of the Privacy Commissioner of Canada.

10. Data Security and Breach Notification

We take reasonable technical and organizational measures to protect your personal information, including encrypted password storage and secure hosting infrastructure. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If a breach of security safeguards occurs that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA, and will keep a record of the breach for at least two years.

11. Third-Party Links

The Service links to third-party websites, such as activity registration pages, that are not operated by us. We are not responsible for the privacy practices of those third parties, and we encourage you to review their privacy policies.

12. Privacy Officer and Complaints

We have designated a Privacy Officer who is accountable for our compliance with this Policy and with PIPEDA. You can reach our Privacy Officer, or raise a concern about how we handle your personal information, at hello@fomogo.ca. If you are not satisfied with how we resolve your concern, you may file a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a new effective date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.

14. Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict-of-law principles.

15. Contact Us

Questions or requests regarding this Privacy Policy or your personal information can be sent to hello@fomogo.ca.