Privacy Policy
This policy covers both the BorderLog web app (borderlog.app) and the BorderLog mobile app (iOS and Android). Where something works differently between them, it's called out explicitly below.
1. The Short Version
- If you use BorderLog without an account, your data never leaves your device.
- If you create an account, your trip data is encrypted and stored on our servers so you can access it across devices.
- We don't sell your data. We don't run ads. We never will.
- You can delete your account and all your data at any time.
2. What Data We Collect
What you enter:
- Trip records (dates you left Canada, dates you returned)
- Your permanent residency start date and tracking mode (citizenship, PR renewal, or log-only)
- Your name or display name (optional)
What we collect automatically (signed-in users only):
- Your email address (used for login)
- Timestamps of when records were created or modified (for sync)
- Basic account metadata (account creation date, premium status)
Mobile app only:
- Crash and error reports via Sentry — see Third-Party Services below.
What we do NOT collect:
- Your location, GPS data, or real-time whereabouts
- Device identifiers beyond what Supabase (our auth provider) uses for session management
- Browser or app usage analytics — BorderLog runs no product analytics of any kind
- Passport numbers, travel documents, or immigration file numbers
3. How Your Data Is Stored
Anonymous users (no account), either app:
Your data is stored entirely on your device — in your browser's local storage (web app) or in a local database on your phone (mobile app). It never leaves your device. We have no access to it. Uninstalling the app, or clearing your browser data, erases it permanently.
On the mobile app, on-device data is protected by your phone's built-in disk encryption (on by default on both iOS and Android), the same protection your other apps rely on. BorderLog does not currently add a second, app-specific encryption layer on top of that.
Signed-in users (free + premium), either app:
Your data is stored locally on your device AND backed up to our cloud database, hosted on Supabase (supabase.com). Supabase stores data in data centres located in Canada or the United States. Data in transit is encrypted using TLS. Data at rest is encrypted by Supabase.
Premium users:
Same as signed-in users, with the additional ability to restore your data on a new device.
4. Why We Use Your Data
We use your data only to provide BorderLog's features:
- To calculate your days in Canada and eligibility dates
- To sync your trip records across your devices (signed-in users)
- To restore your data on a new device (premium users)
- To process your one-time premium payment — via Stripe on the web app, or via Apple's App Store / Google Play in-app purchase, managed through RevenueCat, on the mobile app
- On the mobile app only: to diagnose crashes and errors, via Sentry
We do not use your data for marketing, profiling, or advertising.
5. Third-Party Services
BorderLog uses the following third-party services. Each has its own privacy policy. None of them are used for advertising or behavioural tracking.
Supabase (supabase.com) — database and authentication, both apps. Stores your account and trip data for signed-in users. Supabase Privacy Policy
Stripe (stripe.com) — payment processing, web app only. Stripe handles your payment card information. We never see or store your card number. Stripe Privacy Policy
RevenueCat (revenuecat.com) — purchase management, mobile app only. Bridges your one-time purchase from Apple's App Store or Google Play to your BorderLog account. RevenueCat does not process your card — Apple or Google does that directly. RevenueCat Privacy Policy
Apple / Google — the app stores you purchased Premium through, mobile app only. They hold your purchase and billing record; we don't have access to your payment details.
Sentry (sentry.io) — crash and error reporting, mobile app only. Configured not to collect your IP address or other default personal identifiers, and any screen recordings it captures for debugging mask all text and images. Used only to find and fix bugs — never for analytics. Sentry Privacy Policy
We do not use Google Analytics, Facebook Pixel, or any advertising or tracking SDKs on either app.
6. Data Sharing
We do not sell, rent, or share your personal data with third parties for their own purposes.
We may disclose data only if:
- Required by law or a valid court order
- Necessary to protect the safety of users or the public
- Required in connection with a sale or merger of Route90 Trucking Inc. (you would be notified)
7. Your Rights
You have the right to:
- Access the data we hold about you
- Correct inaccurate data
- Export your trip data as a CSV, or a full JSON backup — free on both apps
- Delete your account and all associated data — see Delete Your Account for exactly how, on either app
If you contact us directly (rather than using in-app deletion), we will confirm your request and respond within 30 days, as required under PIPEDA.
8. Data Retention
Deleting your account, on either app, starts a 30-day grace period: local data is erased from your device immediately, and your cloud data is permanently erased 30 days later unless you sign back in first, which cancels the deletion.
Anonymous (local-only) data on either app is never on our servers and is not subject to any retention schedule — it's gone as soon as you clear it or uninstall.
9. Children
BorderLog is not intended for users under 18. We do not knowingly collect data from anyone under 18.
10. Changes to This Policy
If we make material changes to this policy, we will update the "Last updated" date at the top. Continued use of BorderLog after changes means you accept the updated policy.
11. Applicable Law
This privacy policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Manitoba provincial privacy law.
12. Contact
Route90 Trucking Inc. — BorderLog
Email: legal@borderlog.ca
Website: borderlog.ca
If you have a privacy concern or complaint, email us at legal@borderlog.ca.