Privacy Policy

Scope and approach

This policy covers the IncidentMTL iPhone app, incidentmtl.com, including its neighbourhood and address pages and the neighbourhood reports sold there, and messages sent to support.

No name, email address, or Apple ID is required to use the app. IncidentMTL has no advertising, behavioural analytics, or cross-app or cross-site tracking. The website sets no advertising or analytics cookies. It measures its audience with Cloudflare Web Analytics, which sets no cookie and builds no profile.

Our server never writes address pages, searches, or order pages to its logs. Cloudflare, which delivers the website, and Railway, which hosts the server behind the neighbourhood, address, and order pages, keep their own request logs for a short time. Those logs can include the URL of the page requested, which names the address on an address page.

Information handled

• Anonymous technical account: a random UUID and a hash of the authentication token when Plus or a server feature needs one.
• Notifications: the APNs token and app language if you allow notifications.
• Alert areas: the chosen name, centre coordinates, radius, categories, preferences, and technical delivery history.
• Subscription: product, entitlement status and dates, transaction identifiers, and Apple-signed purchase, renewal, or cancellation notices.
• Free Plus trial: when it starts and ends, and how many alerts it sent, kept with the technical account.
• Support and operations: your email address and message when you email us; our providers may also temporarily process IP address, device, browser, and request time to deliver and protect the service.
• To limit automated sign-ups, our server holds the IP address of a request to create an account or start a trial in memory for about a minute. It is never written to disk.
• Reports bought on the website or in the app: the information described under “Report purchases” below.

Location and saved places

Location supplied by iOS is used on your device to centre the map and calculate proximity. IncidentMTL does not receive a trail of your movements and does not continuously track you or use background location.

Saved places and onboarding choices are stored on your device and, when iCloud is on, mirrored to the iCloud key-value storage of your Apple Account; they are never on our servers. Filters stay on your device. If you create an alert area from a place or the suggested position, the centre you confirm is sent to the server with that area’s settings so alerts can work.

Report purchases

When you buy a neighbourhood report on incidentmtl.com, we keep your email address, the address the report covers and its position, and the private link that opens your PDFs.

Stripe processes the payment: we never see your card number. Stripe receives your email address, the payment, and the billing country and postal code it asks for to calculate taxes, but never the address the report covers. Your private link passes through Stripe once, in the URLs of the pages Stripe sends you back to after paying or cancelling.

Order emails, which carry your private link, are sent through Resend. Stripe and Resend process this information on our behalf, including in the United States.

We delete the address, its position, the PDFs, your email address, and the link 30 days after the report is ready, or 30 days after a refund if that comes first. A purchase abandoned before payment is deleted after 7 days. Stripe keeps its own payment records, as the law requires.

The URL of an order page holds your private link, so it can appear in the request logs that Cloudflare and Railway keep for a short time (see “Scope and approach”).

When you buy a report in the app, Apple processes the payment. We keep the address the report covers, its position, the PDFs and the App Store transaction identifier with your technical account until 30 days after the report is complete, or 30 days after a refund if that comes first. Delete my data in the app removes them at once.

To have a purchase deleted right away (Law 25), email bonjour@incidentmtl.com from the email address you bought with.

Uses and service providers

We use this information only to provide requested features, validate IncidentMTL Plus, deliver notifications and purchased reports, secure the service, answer support, and meet our obligations. We do not sell it or use it for advertising or profiling.

• Apple processes in-app purchases, receipts, and APNs notifications.
• Railway hosts the app API and database in the United States, along with the server behind the neighbourhood pages and report purchases.
• Cloudflare delivers and protects the website and routes IncidentMTL email.
• Stripe processes payment for reports bought on the website.
• Resend sends the order emails for those reports.
• Our email provider processes support messages you send us.

Retention and deletion

When information is no longer needed, we destroy or de-identify it where the law permits.

• The technical account, alert areas, and delivery history remain until you use Delete my data.
• The APNs token is removed when you delete your data or Apple reports that it is no longer valid.
• Signed Apple subscription-notification content and the identifiers it contains are kept for no more than 30 days. They are then removed; only a non-identifying operational record — event type, verification result, and timestamp — remains.
• Delete my data also removes every Apple notification record that is still tied to your device or subscription. A record that was already de-identified may remain because it no longer contains an identifier that can link it to you.
• Support messages remain as long as needed to respond, handle follow-up, and maintain necessary business records. You may request their deletion.
• Report purchase information is deleted on the schedule set out under “Report purchases” above.

Your choices and rights

• You can withdraw location or notification permission in iOS Settings.
• Settings → Delete my data removes the technical account, alert areas, delivery history, reports bought in the app, and still-linked Apple records, then clears the relevant saved places, alert-area cache, and filters on the device.
• After a reinstall, Apple’s signature on your subscription can be used to find and erase an older technical account. This proof is used only for the check and is not stored.
• Deleting data does not cancel a subscription billed by Apple; manage that subscription separately in your Apple Account.
• A report bought on the website is not tied to the app, so Delete my data does not reach it. To have it deleted, email us from the email address you bought with.
• You may ask to access, correct, or delete information, withdraw consent, or make a complaint by emailing us.

Security and processing outside Québec

Connections use HTTPS, the access secret is stored in the iOS Keychain, and the server keeps only its hash. We limit access to information and select providers required to protect it and use it only to provide their services.

Railway hosts app and report purchase data in the United States. Apple, Cloudflare, Stripe, Resend, and our other providers may process information in other territories, where it can be subject to local laws.

Privacy officer and changes

IncidentMTL’s Privacy Officer can be reached at bonjour@incidentmtl.com. We publish the updated date here and will clearly communicate material changes.