Privacy

The short version

Ifiok is designed so that your trips, gear, logbook, photos and positions stay on your phone. The app works fully in airplane mode. Nothing about where you are going leaves the device unless you tap something at home that needs it, and backup stays off until you switch it on.

1. Who is responsible

Ifiok is owned and operated by Woro Group Inc. ("Woro Group"), a corporation in Canada. Woro Group is the organisation responsible for the personal information described on this page, and is the controller of it.

The person accountable for that information is Woro Group's Privacy Officer — the person in charge of the protection of personal information under Quebec's Act respecting the protection of personal information in the private sector, and the individual accountable under PIPEDA. Questions, requests and complaints all reach them at contact@ifiok.app, which is the right address for anything on this page.

2. This website

• It sets no cookies, runs no analytics, and loads nothing from any third party. The two typefaces are served from this domain rather than from a font service, so loading this page does not announce your visit to a font provider.
• It is served by Cloudflare. Like any web host, Cloudflare processes your IP address and the details of your request in order to deliver the page and to defend against attacks. Request logging is switched off for this site, and no access logs are kept or read by us.
• If you write to contact@ifiok.app, that address forwards to a personal mailbox. Your message is kept so that it can be answered.

3. What the app keeps on your phone

Everything, by default. Your trips, gear, loadouts, checklists, journal entries, any photos you attach and any position the app records are held in a database on the device. None of it is visible to us, and none of it is sent anywhere on its own.

4. The few things that leave, and only when you tap them

Three actions reach an Ifiok server. All three happen on a planning screen, at home, on a deliberate tap. None of them happens automatically, and none of them happens in the field.

• The weather forecast. Your trip's destination, rounded to one decimal place of a degree — about ten kilometres — is sent to our server, which asks the Norwegian Meteorological Institute and passes the answer back. The rounded pair is used as a cache key so that the same area is not fetched twice.
• Place names. The name of a country, so that its pack of place names can be downloaded for offline search.
• Offline maps. The bounding box of the region you chose to download, so that the map for that area can be sent to you.

In all three cases the server keeps no record of who asked. There is no account attached, no identifier, and no request log — logging is switched off in the server's configuration. What is cached is the public answer, not the question's origin.

5. Backup, and why it is yours and not ours

Backup is off until you switch it on. When it is on, an encrypted copy of your data goes to your own iCloud account on iOS, or your own Google Drive app-data folder on Android — inside your own storage, under your own account. We cannot read it, cannot list it and cannot delete it. There is also an export you can save wherever you like.

6. Accounts

Accounts do not exist yet. When they do they will be optional and never required to use the app, offered through Sign in with Apple and Sign in with Google, and you will be able to delete your account and everything attached to it from inside the app. Until that ships, there is nothing to sign in to and nothing to delete.

7. Purchases

Ifiok will offer one optional one-time purchase through the App Store and Google Play. Apple and Google handle the payment; we never see your card or billing details. What reaches the app is confirmation that the purchase was made, which is what unlocks the content.

8. No analytics, and none in the field

There is no analytics or telemetry on any field screen, by design rather than by setting. A field screen makes no network call at all.

9. Who else is involved

This is the complete list.

• Cloudflare — hosts this website and the server routes above.
• The Norwegian Meteorological Institute — receives a rounded coordinate from our server, not from your phone, with nothing identifying attached.
• Apple and Google — the app stores, the sign-in services when accounts exist, and the cloud storage that your own backup goes to.

10. Where information is handled

The server runs on Cloudflare's network. Cloudflare offers no Canada-only option for the storage services in use, so anything the server handles may be processed outside Canada, including in the United States and the European Union. As of the date at the top of this page, the server holds no personal information at all.

11. How long things are kept

The forecast cache holds public weather answers, keyed by a rounded coordinate, for a short period; that is not personal information and it identifies nobody. Nothing else about you is held by us. On your phone, your data stays until you delete it or remove the app. A backup in your own iCloud or Google Drive is kept under Apple's or Google's terms and is yours to delete.

12. Your rights

Under PIPEDA, Quebec's Law 25, the EU General Data Protection Regulation and the UK GDPR, you may ask for access to your information, correction of it, deletion of it, a portable copy of it, and you may withdraw consent. Because Ifiok keeps your information on your own device, most of these you can exercise directly in the app: everything is readable, editable, exportable and deletable there.

For anything you cannot do in the app, write to contact@ifiok.app. We will respond within thirty days.

You may also complain to the Office of the Privacy Commissioner of Canada, to the Commission d'accès à l'information du Québec if you are in Quebec, or to your local supervisory authority in the EU or UK.

13. If something goes wrong

If a breach of security safeguards creates a real risk of significant harm, we will notify the people affected and the Office of the Privacy Commissioner of Canada as soon as feasible — and the Commission d'accès à l'information for Quebec residents, and the relevant supervisory authority within seventy-two hours where the GDPR applies. A record of any such incident is kept.

14. Children

Ifiok is not directed at children under thirteen, and we do not knowingly collect information from them.

15. Changes to this page

The date at the top is the date this page last changed. Because the app has not shipped, this page will change before it does, and the version in force when you install the app will be the one linked from inside it and from both store listings.

16. Contact

contact@ifiok.app