Privacy Policy

ReloGo (“ReloGo,” “we,” “us,” or “our”) is a mobile application that helps people moving between Canadian provinces or territories build a personalized checklist of government tasks - licence exchanges, health card updates, vehicle registration, address changes, and more. This policy explains what information ReloGo handles and how. It is written to align with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

This information is stored exclusively in your device's secure storage (the operating system's protected storage - Keychain on iOS, Keystore on Android). It is read locally only when you use a compatible form, and it is never sent to ReloGo's servers or logs and never sent to a third party automatically. We have no server-side place to store it and therefore cannot access, view, or recover it.

When a compatible template is available, filled PDF forms are generated on your device in a dedicated temporary cache. On iOS, ReloGo removes its cached copy after the share action completes. On Android, a receiving app may continue reading the attachment after the chooser closes, so ReloGo schedules removal of that temporary file after a short grace period. On the next app start or form fill, ReloGo deletes expired temporary files and reschedules any still in that grace period. ReloGo always removes cached copies when you sign out or delete your account. A copy you choose to save or send is controlled by the destination you selected.

Checklist links open the relevant government website. When you explicitly choose to prepare a compatible form, ReloGo downloads a blank copy directly from the government's official website before filling it locally. The app verifies that the file matches the reviewed version before reading your stored details. The government website may receive ordinary connection information such as your IP address and browser or app request headers, under that website's own privacy practices.

ReloGo does not add your stored name, address, birth date, licence number, or health-card number to that download request. Those values are applied only after the blank form reaches your device.

• An anonymous account identifier (not linked to your name or email)
• Your origin and destination province or territory
• Your planned move date
• Whether you indicated you're bringing a vehicle or moving with children
• Which checklist tasks you've marked complete
• Your selected fixed support questions, support replies, and conversation status

This information distinguishes your anonymous account but does not include your name, address, personal document numbers, or account email. If you join our website waitlist, we separately store the email address and jurisdictions you provide. For abuse prevention, the signup service also keeps an hourly counter keyed by a one-way hash derived from the requesting IP address; it does not store the raw address in the waitlist throttle table. Expired counters are pruned during later signup activity.

We use the limited server-side data above only to generate and track your relocation checklist, answer the fixed support questions, operate human support, prevent signup abuse, and, for waitlist sign-ups, contact you about availability. We do not sell your data, we do not show advertising, and we do not use third-party advertising or tracking technologies.

ReloGo creates an anonymous account for you automatically - there is no sign-up, email, or password required to use the app. Because your account is anonymous and your sensitive information lives only on your device, uninstalling the app or losing your device means that data cannot be recovered.

The public waitlist-removal channel is not yet configured. The waitlist remains a preview feature and must not launch until a monitored channel is published on the Support page.

We use Supabase to host our database and provide anonymous authentication, Google Gemini to answer selected fixed support questions, and Expo, the Apple App Store, and Google Play to build or distribute the app. These providers process the relevant service data on our behalf under their own terms. Your on-device personal details are never sent to them by ReloGo.

ReloGo includes in-app help for general how-to and process questions. You choose from six pre-written questions; there is no free-text support box. A third-party AI provider (Google Gemini) processes the selected question together with non-identifying move context, such as your move corridor and applicable task titles, to produce a response.

The fixed questions cannot include your name, address, date of birth, driver's licence number, health card number, or other personal text. Your on-device personal information is never read or sent by the support feature.

If your question needs a person, a human support agent can take over the conversation. Once a human takes over a chat, it is no longer processed by the AI.

Sensitive personal information uses your operating system's protected storage. Data exchanged with our servers is transmitted over encrypted connections (HTTPS), and row-level security restricts an app user to their own records.

ReloGo is intended for adults managing a move. It is not directed at children, and we do not knowingly collect personal information from children. Information about dependents is limited to a single yes/no flag indicating whether child-related tasks should be added to your checklist.

We may update this policy from time to time. When we do, we'll revise the version and “Last updated” date above. When a new version requires your agreement, the app will ask you to review and affirmatively accept it before continuing.

The monitored privacy contact is not yet configured for this preview. Current contact options and launch status appear on the Support page.