Privacy Policy

Effective Date: March 2026 · Last Updated: July 2026

1. Introduction

JustArrived ("we", "our", "us") operates a mobile application designed to help immigrants navigate their settlement journey in Canada. This Privacy Policy explains how we collect, use, store, and protect your personal information.

2. Information We Collect

Account Information

• Email address and password (for authentication)
• First name and last name
• Phone number (optional)
• Arrival date in Canada
• Destination city in Canada

Settlement Journey Details

• Immigration status (permanent resident, work permit, study permit, refugee, or "not sure") — used only to show you the tasks that apply to your situation
• Journey stage (just arrived, getting settled, been here a while)
• Country of origin (optional)

Documents

• Files you upload (photos, PDFs)
• Document metadata (file name, category, expiry date, notes)
• 9 categories: Immigration, Financial, Health, Housing, Education, Employment, Legal, Insurance, Other

Community Content

• Forum posts and replies you create
• Event RSVPs and attendance
• Likes and interactions
• Resource suggestions, reviews, and content reports you submit

Device Information

• Push notification tokens
• Device type (iOS/Android)

Usage Data

• Task completion progress, deadlines, and notes you add to tasks
• Notification preferences

We do not use analytics or tracking SDKs, and the app contains no advertising. We collect only what the features above need to work.

3. How We Use Your Information

• Provide and maintain app functionality
• Send push notifications (task reminders, document expiry alerts, community updates)
• Show your name alongside content you choose to share — forum posts and replies, event listings and attendee lists, and resource reviews (reviews show your first name and arrival year)
• Improve and personalize the app experience
• Respond to support requests
• Enforce our Terms of Service and community guidelines

4. Data Storage & Security

• Your data is stored with Supabase, our cloud database provider, with encryption at rest and in transit
• Database access rules (Row Level Security) are enforced on the server so each user can only access their own private data
• Uploaded documents are kept in a private storage area. They are never publicly accessible; the app opens them using temporary links that expire after a few minutes
• Data cached on your device is cleared when you sign out

Our servers are operated by Supabase and may be located outside Canada, which means your information may be processed and stored in other countries and subject to the laws of those countries.

5. Third-Party Services

We use the following third-party services:

• Supabase — database, authentication, and file storage
• Expo Push Notification Service — delivering push notifications
• Google Places API — city and address search suggestions. Your search text (and, if you grant location permission, your approximate location to improve suggestions) is sent to Google
• Apple and Google push services — the final delivery step for notifications on your device

These services have their own privacy policies governing their use of your data.

6. Data Sharing

We do NOT sell your personal information. We may share data only:

• With service providers listed above, solely to operate the app
• If required by law or legal process
• To protect the safety of our users

7. Data Retention

• Your data is retained while your account is active
• Upon account deletion request, we delete your data within 30 days
• Community content (forum posts) may be anonymized rather than deleted to preserve discussion threads

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information (via Edit Profile)
• Request deletion of your account and data
• Opt out of push notifications (via Notification Settings)
• Export your data upon request

To exercise these rights, contact us at support@justarrived.app.

9. Children's Privacy

JustArrived is not intended for children under 13. We do not knowingly collect information from children under 13.

10. Canadian Privacy Law (PIPEDA)

JustArrived complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including British Columbia's Personal Information Protection Act (PIPA). In accordance with these laws:

• We collect personal information only for purposes that a reasonable person would consider appropriate
• We obtain your consent when collecting, using, or disclosing your personal information
• We limit collection to what is necessary for the identified purposes
• We protect your information with appropriate security safeguards
• You may file a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through an in-app notification. Continued use of the app after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy, contact us at: support@justarrived.app