Legal
Crown Your Adventure ("the Company", "we", "us", or "our") is a corporation incorporated under the Business Corporations Act (British Columbia). We operate two mobile applications:
This Privacy Policy describes how we collect, use, disclose, store, and protect personal information when you use our applications and related services (collectively, the "Services"). It applies to all users of both applications regardless of platform (iOS or Android).
We are accountable for compliance with the Personal Information Protection and Electronic Documents Act, SC 2000, c 5 (PIPEDA), the Personal Information Protection Act, SBC 2003, c 63 (BC PIPA), and all other applicable Canadian privacy legislation.
By using our Services you acknowledge that you have read and understood this Privacy Policy.
The Company bears responsibility for all personal information in its custody or control. Questions or concerns regarding this Privacy Policy or our privacy practices may be directed to:
Privacy Officer
Crown Your Adventure
British Columbia, Canada
Email: privacy@cyaoutdoors.ca
We will respond to privacy inquiries within 30 calendar days.
We collect personal information only for purposes that a reasonable person would consider appropriate in the circumstances. The purposes for which we collect each category of information are set out in Section 3.
| Information | How collected | Why |
|---|---|---|
| Email address | You provide it at sign-up via Google Sign-In, Apple Sign In, or email/password | Account identity; to contact you about your account; required for Firebase Authentication |
| Display name | Provided by your Google or Apple account, or entered by you | Displayed within the app; used to address you in notifications |
| Profile photo URL | Provided by your Google or Apple account | Displayed as your avatar; we store only the URL, not the image itself |
| Firebase UID | Assigned by Firebase Authentication | Account identity; used transiently in Cya Later to derive an anonymous ID (not stored after registration) |
| Information | How collected | App | Why |
|---|---|---|---|
| Current device location (foreground) | Device GPS via operating system | Both | Centre the map on your position; region detection (AB vs BC); display relevant regulations |
| GPS track coordinates (background) | Continuous GPS during an active SOS event or opt-in trip recording | Both | SOS beacon: broadcast your location to trusted contacts during an emergency; trip history: let you review and export your outdoor trips |
| Waypoint coordinates | You place custom pins on the map | Cya Outdoors | Store and sync your personal map markers |
Background location: Both apps request permission to access your device's GPS location while the app is in the background or the screen is off. In Cya Later, background location is always active while an SOS alert is in progress. In Cya Outdoors, background GPS is used only during an active trip track recording session that you have explicitly started. You are notified with a persistent notification when background location access is active.
We never sell your location data to third parties. Your GPS coordinates during an SOS event are shared with your registered emergency contacts ("Buddies") and, at your direction, may be shared with emergency responders.
| Information | How collected | Why |
|---|---|---|
| Hunting and fishing licence photographs or PDF files | You capture or import them within the app | Electronic storage of your licences for convenient field access |
| OCR-extracted licence text | Automatically extracted from your licence photo by Google ML Kit running on your device | Pre-fill licence details within the app |
Licence images and OCR output are stored on your device only. They are never uploaded to our servers. If you delete the app or clear app data, this information is permanently deleted.
We operate a cloud sync service at ugc.cyaoutdoors.ca. Before storing any data on this service, your Firebase UID is used to derive a non-reversible anonymous identifier using HMAC-SHA256. Your Firebase UID is never stored on our sync servers.
| Information | Why |
|---|---|
| Waypoints (name, coordinates, icon, activity category) | Back up and sync your custom map pins across devices |
| GPS tracks (GPX data, distance, duration, timestamps) | Back up and sync trip records; allow GPX export |
| App settings (province, selected activities) | Sync your preferences across devices; does not include email, licence data, payment details, or other sensitive fields |
| UGC submissions (trail condition reports, waypoint suggestions, POI reports, bug reports) | Improve the accuracy of trail and regulation data; eligible for rewards points |
| Rewards points balance and transaction history | Operate the Crown Your Adventure rewards programme |
| Information | How collected | Why |
|---|---|---|
| SOS event type and custom message | You select them when activating an SOS | Communicate the nature of your emergency to your Buddies |
| GPS ping coordinates during an active SOS | Continuous background GPS every 30 seconds | Allow Buddies to track your position in real time |
| SOS outcome report | You complete a short form after an SOS is resolved | Improve system reliability; understand how the app is used in real emergencies |
| Buddy relationships | You send and accept invite codes | Know who to notify when you activate an SOS |
| Invite codes | Generated when you register | Allow other users to connect with you as Buddies |
| Information | How collected | Why |
|---|---|---|
| FCM push notification token | Assigned by Firebase Cloud Messaging | Send push notifications (SOS alerts, Buddy requests, announcements) |
| Crash reports | Firebase Crashlytics (Cya Outdoors) | Diagnose and fix app bugs; does not include personal data beyond device model, OS version, and app version |
| App Check attestation token | Play Integrity (Android) or DeviceCheck (iOS) | Verify that requests originate from a genuine, unmodified version of the app |
| Device model, OS version, app version | Collected with crash reports | Diagnose crashes |
We do not process or store your payment card information. All in-app purchases are processed directly by Apple (App Store) or Google (Google Play). We receive only a receipt or entitlement confirmation indicating whether you hold an active Pro subscription. Apple and Google's own privacy policies govern the collection of your payment information.
We obtain your consent to collect personal information at the time you create an account. You must accept this Privacy Policy and our Terms of Service before using the Services. Specific consent for background location access is requested at the time you first use the feature that requires it (trip recording in Cya Outdoors; SOS activation in Cya Later) via the operating system permission dialogue.
You may withdraw consent at any time, subject to legal or contractual restrictions, by contacting us at privacy@cyaoutdoors.ca. Withdrawing consent to the collection of information that is necessary to provide the Services may result in your inability to use some or all features.
We collect only the personal information that is necessary for the purposes identified in Section 3. We do not collect Social Insurance Numbers, financial account information, or sensitive health information.
We use your personal information only for the purposes for which it was collected. We do not sell your personal information to any third party.
We may disclose your personal information:
| Information | Retention period |
|---|---|
| Account data (email, display name) | Until account deletion, or 3 years after last login, whichever is sooner |
| GPS tracks and waypoints | Until you delete them, or until you delete your account |
| SOS events and pings | 1 year from the date of the event, then deleted |
| UGC submissions | Until you delete them or your account; approved trail data may be retained in anonymised form after account deletion |
| Rewards history | Until account deletion; 1 year after deletion for accounting purposes |
| Crash reports | 90 days (Firebase Crashlytics default) |
| Licence wallet photos | Stored on your device only; deleted when you remove the image or delete the app |
We share personal information with the following third-party service providers. Each is contractually bound to use your information only to provide services to us and in accordance with applicable law.
| Provider | Service | Data shared | Privacy policy |
|---|---|---|---|
| Google LLC (Firebase) | Authentication, Crashlytics, Cloud Messaging, App Check | Email, display name, device identifiers, crash data, FCM token | firebase.google.com/support/privacy |
| Google LLC (Google Sign-In) | OAuth sign-in | Email, display name, profile photo URL | policies.google.com/privacy |
| Apple Inc. (Sign in with Apple) | OAuth sign-in | Email (may be relayed), display name | apple.com/legal/privacy |
| Apple Inc. / Google LLC | In-app purchases (Cya Outdoors) | Payment handled entirely by Apple/Google; we receive only a subscription entitlement | apple.com/legal/privacy / policies.google.com/privacy |
| Google LLC (ML Kit) | On-device OCR for licence scanning (Cya Outdoors) | Processing occurs entirely on your device; no data is sent to Google | developers.google.com/ml-kit/terms |
Canadian data residency note: Firebase services are operated by Google LLC, a US company. Your data may be stored on servers located outside Canada, including in the United States and the European Union. By using our Services, you consent to this transfer. Google maintains Standard Contractual Clauses and equivalent safeguards that satisfy the requirements of PIPEDA for international data transfers.
We implement the following technical and organizational safeguards:
In the event of a data breach that creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA.
This Privacy Policy is publicly available at https://cyaoutdoors.ca/privacy.html. An in-app copy is accessible at any time in the Settings section of both apps.
You have the right to:
To exercise these rights, contact us at privacy@cyaoutdoors.ca or use the "Delete Account" feature in the app's Settings. We will respond to access requests within 30 calendar days.
On account deletion, we will:
Note: We are not able to delete anonymised, aggregated trail data derived from UGC submissions that has been incorporated into publicly available map datasets.
If you believe we have not complied with this Privacy Policy or applicable privacy law, please contact our Privacy Officer at privacy@cyaoutdoors.ca. We will investigate and respond within 30 days.
If you are not satisfied with our response, you may contact:
We may update this Privacy Policy from time to time. If we make a material change, we will notify you by displaying a notice in the app and, where required by law, obtain your renewed consent. Your continued use of the Services after the effective date of a revised policy constitutes your acceptance of the revised terms.
Our Services are not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe your child has provided us with personal information, please contact us at privacy@cyaoutdoors.ca and we will delete it.
Privacy Officer
Crown Your Adventure
Email: privacy@cyaoutdoors.ca
Website: cyaoutdoors.ca
Crown Your Adventure — Incorporated in British Columbia, Canada