Crown Your Adventure ("we", "us", or "our") operates the Cya Outdoors mobile application (bundle ID: ca.cya.app), an outdoor recreation app covering hunting, fishing, hiking, mountain biking, off-roading, and camping in Alberta and British Columbia, along with related features including Social (friends, chat, and offline mesh messaging), the SOS Beacon ("Cya Later"), a License Wallet, and a rewards program (collectively, the "Services").
This Privacy Policy describes how we collect, use, disclose, store, and protect personal information when you use the Services, on iOS and Android alike.
We are accountable for compliance with the Personal Information Protection and Electronic Documents Act, SC 2000, c 5 (PIPEDA), the Personal Information Protection Act, SBC 2003, c 63 (BC PIPA), and other applicable Canadian privacy legislation. By using the Services you acknowledge that you have read and understood this Privacy Policy.
We are responsible for all personal information in our custody or control. Direct questions or concerns about this Policy or our privacy practices to our Privacy Officer:
We respond to privacy inquiries within 30 calendar days.
We never sell your location data. During an active SOS Beacon alert, your GPS coordinates are shared with the emergency contacts ("Buddies") you have registered, and at your direction may be shared with emergency responders.
Photos or PDF files of your hunting and fishing licenses that you capture or import, and any text our on-device OCR (Google ML Kit) extracts from them to pre-fill details, are stored on your device by default and are never uploaded to our servers unless you turn on License Wallet backup in the app. If you turn it on, these files are uploaded to our servers under your account so they're restored on a new device; turning backup off deletes them from our servers, though they remain on your device until you delete them there. Deleting the entry, or deleting the app, permanently deletes this data from your device.
Offline mesh relay: when you are out of signal range, Social can deliver messages, photos, waypoints, and trip data between nearby devices over Bluetooth/local wireless (no internet required), hopping through other nearby users' devices running the app until the message reaches its destination or a connection to the internet. Every message is encrypted with its conversation's key before it is ever transmitted, so a device relaying it on your behalf — including yours, relaying other people's messages — cannot read its contents; only the sender and intended recipient(s) can decrypt it. Relaying only moves encrypted bytes and does not reveal your identity, location, or message content to the devices that relay it. You can disable mesh relay for your device in Settings.
The SOS Beacon is a feature of the app, currently limited to a subset of users while we continue development. Where active, it collects:
Trail condition reports, waypoint suggestions, POI reports, and bug reports you submit are used to improve the accuracy of our map and regulation data, and may earn you rewards points. We track your rewards points balance and transaction history to operate the rewards program.
Map regions you choose to download for offline use are stored on your device. Files you import (GPX, KML/KMZ, GeoJSON) are read on your device to add waypoints or tracks to the app; the files themselves are not uploaded unless you separately choose to sync the resulting waypoint or track data.
We do not process or store your payment card information. Pro subscriptions are billed and processed entirely by Apple (App Store) or Google (Google Play); we receive only a receipt or entitlement confirmation indicating whether you hold an active subscription.
To let you switch devices or reinstall the app without losing your data, we automatically back up the following to our servers, tied to your account:
This backup runs automatically for every account and is not a paid feature. It does not include downloaded offline map regions, which stay on your device and can be re-downloaded on a new device. You can view what's backed up, and back up on demand, from Account Backup in the app.
We obtain your consent at account creation, when you must accept this Policy and our Terms of Service. Specific consent for background location is requested through the operating system's permission dialog the first time a feature that needs it is used (trip recording or SOS activation).
You may withdraw consent at any time, subject to legal or contractual limits, by contacting privacy@cyaoutdoors.ca. Withdrawing consent to information necessary for a feature may mean you can no longer use it.
We collect only what Section 2 describes, and we never sell your personal information. We may disclose it:
Each provider below is contractually bound to use your information only to provide services to us, in accordance with applicable law.
Canadian data residency note: Firebase services are operated by Google LLC, a US company, and your data may be stored outside Canada, including in the United States. By using the Services you consent to this transfer; Google maintains safeguards intended to satisfy PIPEDA's requirements for international transfers.
In the event of a data breach creating a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as required by PIPEDA.
You have the right to access the personal information we hold about you, correct inaccurate information, and delete your account and associated personal information. Contact privacy@cyaoutdoors.ca or use "Delete Account" in the app's Settings; we respond within 30 calendar days. On deletion we remove your account from Firebase Authentication and delete your waypoints, tracks, calendar entries, hunt/fish logs, photos, preferences, License Wallet files (if backed up), and rewards data from our servers, with written confirmation on request.
We are not able to delete anonymized, aggregated trail data that has already been incorporated into publicly available map datasets.
If you believe we have not complied with this Policy or applicable privacy law, contact our Privacy Officer at privacy@cyaoutdoors.ca; we will investigate and respond within 30 days. If unsatisfied, you may contact the Office of the Privacy Commissioner of Canada (1-800-282-1376, priv.gc.ca) or the Office of the Information and Privacy Commissioner for BC (1-800-663-7051, oipc.bc.ca).
We may update this Policy from time to time. Material changes are announced in the app and, where required by law, we will obtain your renewed consent. Continued use of the Services after a revised policy takes effect constitutes acceptance of the revised terms.
The Services are not directed to children under 13, and we do not knowingly collect personal information from them. Contact privacy@cyaoutdoors.ca if you believe a child has provided us personal information and we will delete it.