KiloNord
The short version
- KiloNord records your drives on your iPhone and backs them up to your account on our server in Canada.
- We use your data only to run KiloNord for you. No ads, no tracking, no analytics companies, and we never sell your data.
- Apple provides sign-in, payments, push notifications and maps, so some data goes to Apple, which may process it outside Canada.
- Cloudflare protects our server and carries the connection to it, so your data passes through Cloudflare on the way, possibly outside Canada. It's stored only on our server in Canada.
- You can export your data or delete your account at any time in the app (Settings, then Data export to export, or Settings, then Account & sync to delete).
- Questions or requests: [email protected].
1. Who we are
KiloNord is a mileage tracker for people in Canada who drive for work. It's run by Anthony da Silva, a sole proprietor in Ontario, Canada ("we", "us"). Anthony is the person responsible for KiloNord's compliance with privacy law, and you can reach him at [email protected].
This policy covers the KiloNord iPhone app (with its widgets and notifications), the KiloNord server that backs it up, and this website. It's written to follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
2. What we collect, and why
You need an account to use KiloNord, and you sign in with Apple. Once you're signed in, the app keeps your records on your phone and copies them to your account on our server, so they're backed up and can be restored on a new phone. Here is what reaches our server.
| Information | What it is | Why we need it |
|---|---|---|
| Account | Apple's identifier for you, your email address (which may be an Apple "Hide My Email" relay address), our own account number for you, and when you joined. | To create your account, sign you in, and contact you about your account if we need to. |
| Trips | Start and end times, start and end locations and addresses, a simplified line of the route you drove, distance, the vehicle, and how you classified the trip (business, personal, passenger or ignored), with its purpose and notes. Personal trips are backed up too, so your records are complete. | To keep your mileage log, calculate your totals and back them up. |
| Your other records | Vehicles (name, make, model, year, an optional plate number, and the identifier of a car's Bluetooth or CarPlay connection if you link one), odometer readings, named places (name, location and size), rules, work hours, purposes, custom rates, expenses, and your settings, such as province, pay type, units and time zone. | To classify trips, run your rules, and produce your reports. |
| Receipt photos | Photos you attach to expenses. | To back up your receipts with the expense they belong to. |
| Subscription | If you subscribe to KiloNord Pro: the product, its status, when it renews or ends, and Apple's original transaction number. We never see your payment card or Apple billing details. | To unlock Pro features and keep your subscription status correct. |
| Device | A random identifier the app creates for each installation (not an advertising identifier), and the token Apple gives us to send notifications to your phone. | To keep you signed in on each phone, and to tell your other phones that there's something new to sync. |
| Crash reports | Crash, hang and similar reports from Apple's MetricKit, reduced on your phone to the app and iOS versions, device type and technical details of the problem. They contain no location, trip data, email or account number, and we store them without any link to your account. | To find and fix bugs. |
We don't ask Apple for your name, and we don't collect your contacts, health or fitness data, browsing history, or advertising identifiers.
How the app uses your location
KiloNord asks for location access ("Always", so it can notice drives that start while the app is closed) and for Motion & Fitness access (to tell driving from walking). The detailed GPS points of each drive, and all motion data, stay on your phone. By default the app deletes the detailed GPS points from your phone after 30 days. What leaves your phone is the trip record described above.
Map-matched distances, which would need the detailed GPS points on our server, aren't offered today. If we turn that feature on, we'll update this policy first.
What stays on your phone
Everything above is also stored on your phone, protected by iOS data protection. Exports and reports you create are saved on your phone and only go where you send them.
3. How we use it, and what we never do
We use your information only to provide KiloNord to you: to record, classify and back up your drives, sync them between your phones, restore them on a new phone, calculate your totals, manage your subscription, answer your support requests, keep the service secure and fix problems.
- We don't sell, rent or trade your information.
- We don't show ads, and we don't use your information for advertising or marketing profiles.
- We don't track you across other companies' apps or websites.
- The app has no third-party analytics, advertising or crash-reporting code.
- This website sets no cookies and uses no analytics, trackers, or third-party fonts or scripts.
4. Your consent
When you sign in and grant permissions in iOS, you consent to us collecting and using your information as this policy describes. You can withdraw your consent at any time:
- Turn off location or Motion & Fitness access in iOS Settings. KiloNord can't record drives automatically without location access.
- Sign out of the app. Signing out erases your data from that phone, and it stays in your account.
- Delete your account, which removes your data from our server (see section 9).
5. Who we share it with
We share your information only with the service providers that help run KiloNord, only for that purpose, and under their own privacy and security commitments.
| Provider | What they do for KiloNord | What they receive |
|---|---|---|
| OVHcloud | Hosts our server in a data centre in Beauharnois, Quebec, Canada. | Everything stored on our server (section 2), including encrypted backups. |
| Cloudflare | Network and security service in front of our server: it protects KiloNord from attacks and delivers the website, the web dashboard and the app's connection to our server. | Everything that travels between your phone or browser and our server passes through Cloudflare on the way, encrypted again before it reaches our server: your trips and other records as they sync, sign-in tokens, your IP address and technical details of the connection. Cloudflare doesn't store this data for us and isn't allowed to use it for anything else; it processes it under its own privacy policy and data protection terms. |
| Apple | Sign in with Apple; App Store purchases and subscription status; push notifications (APNs); Apple Maps for maps, addresses, directions and address search in the app, and for the map on a trip's page on the web dashboard. | Your sign-in details; your purchases; the notification token for your phone (our notifications carry no personal content, they only tell the app to sync); and, when the app looks up an address or a driving route, the locations or search text involved; and, when you open a trip on the web dashboard, that trip's route and its start and end points, which your own browser sends to Apple to draw the map image. Apple handles this data under its own privacy policy. |
Our server doesn't send your locations to any other mapping or geocoding company.
We may also disclose information if the law requires it, for example under a valid court order, or to protect someone's safety in an emergency. If KiloNord is ever sold or transferred, your information would go to the new owner only to keep providing the service, under protections at least as strong as this policy, and we would tell you first.
6. Where your information is stored
Our server and its backups are in Canada, at OVHcloud's data centre in Beauharnois, Quebec. If we start keeping backup copies somewhere else, they will be encrypted before they leave the server, and we'll update this policy to say where they are.
Cloudflare carries traffic through its data centres, usually one near you; that can be outside Canada. Apple may process the information it handles for KiloNord in the United States and other countries. Information processed outside Canada is subject to the laws of those countries, and their courts, governments or law enforcement may be able to access it there.
7. How long we keep it
| Information | Kept for |
|---|---|
| Your account and records | Until you delete them or your account. When you delete a trip or another record in the app, our server removes its content straight away: locations, route, addresses, notes and everything else. It keeps only a deletion marker (the record's number and when it was created, changed and deleted) so your other phones remove it too. Markers are removed when you delete your account. |
| Receipt photos | Until you remove the photo, delete its expense or trip, or delete your account. A photo whose expense never reaches our server is removed after 30 days. |
| Subscription details | Until you delete your account. |
| Sign-in sessions | Each session lasts up to 60 days without use. Expired sessions are deleted 7 days later. |
| Crash reports | 90 days, with no link to your account. |
| Encrypted backups | 14 days. Each nightly backup is a full copy, so your data can stay in a backup for up to 14 days after you delete it. |
| Record of an account deletion | Kept: a one-way scrambled (hashed) form of the deleted account's number, plus the date. It contains nothing that identifies you. |
We don't delete inactive accounts on our own, because your mileage records may matter to you for years: the CRA generally expects you to keep tax records for six years. Delete your account when you no longer want us to keep them.
8. How we protect it
- All connections between the app and our server are encrypted (HTTPS).
- Each receipt photo is encrypted individually on our server (AES-256-GCM), and so is the Apple token we keep to close your Apple sign-in link when you delete your account.
- Nightly backups are encrypted before they're written to disk.
- Every request is checked so that each account can only reach its own data.
- Our server logs are kept to technical details and are set not to record your locations, addresses, notes, email or sign-in tokens.
- On your phone, KiloNord's data is protected by iOS data protection.
- Only Anthony da Silva has administrative access to the server.
No system is perfectly secure. If a breach of security involving your information creates a real risk of significant harm to you, we'll tell you and the Office of the Privacy Commissioner of Canada, as the law requires.
9. Your rights and choices
See and correct your information
Almost everything we hold about you is visible and editable in the app. You can also ask us, at [email protected], for a copy of the personal information we hold about you, how we've used it and who we've shared it with, or to correct anything that's wrong. We may need to confirm it's really you, for example by replying to the email address on your account. We'll answer within 30 days, and it's free.
Export your data
In the app, go to Settings, then Data export, then Export all data (JSON), to save a copy of all your records. You can also export reports for your taxes.
Delete your account
In the app, go to Settings, then Account & sync, then Delete account. This permanently deletes, from our server, your account, all your synced trips, vehicles, places and other records, your receipt photos, your subscription details, your sessions and notification tokens, and any detailed GPS points; it also erases KiloNord's data from that phone and asks Apple to end your Sign in with Apple link to KiloNord. Copies in our encrypted backups disappear within 14 days. This can't be undone, so export anything you want to keep first.
Deleting your account doesn't cancel a Pro subscription. Apple handles billing, so cancel in your Apple ID settings as well (see our Terms of Use).
If you stop using Sign in with Apple
If you remove KiloNord from "Sign in with Apple" in your Apple ID settings, Apple tells us, and we sign you out on all your devices. Your data stays in your account until you sign in again or delete it. If you delete your Apple Account itself, Apple tells us, and we delete your KiloNord account.
10. Children
KiloNord is made for adults who drive for work. It isn't meant for children, and we don't knowingly collect information from anyone under 13. If you think a child has a KiloNord account, write to us and we'll delete it.
11. Changes to this policy
If we change how we handle your information, we'll update this page and the date at the top. If a change is significant, for example a new kind of data or a new provider, we'll also tell you in the app or by email before it takes effect, and ask for your consent where the law requires it.
12. Contact and complaints
For any question, request or complaint about privacy, write to Anthony da Silva at [email protected]. We'll do our best to resolve it.
If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (toll-free 1-800-282-1376). If you live in Quebec, Alberta or British Columbia, your provincial privacy commissioner may also be able to help.