Privacy Policy

1. Introduction

M.V.A. Software Inc., operating as MVA Digital ("we", "us", or "our"), operates the Tote mobile application ("App"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our App. By using the App, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

Account Information

When you sign in using Google or Apple, we receive your name, email address, and profile photo as provided by the authentication provider. We do not collect or store your password.

List Data

We store the lists you create, including list names, items, quantities, and any notes you add. When you share a list, the shared data is accessible to the users you invite.

Approximate Location

We derive your approximate location (city level only) from your IP address to display your city on your profile and to indicate where list items were added. We do not collect GPS or precise location data.

Subscription Information

If you purchase Tote+, we store your subscription status so we can provide premium features. Payments are processed by Apple or Google; we do not collect or store your payment card details.

Device & Diagnostic Information

We collect basic device information (device type, operating system version, and app version) for troubleshooting and compatibility. If you enable notifications, we store a push notification token for your device so we can deliver alerts. We also collect crash reports and stability diagnostics to fix bugs; this diagnostic data is not linked to your identity.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the App
• Authenticate your identity and manage your account
• Enable list sharing and collaboration features
• Send important service notifications (e.g., security alerts)
• Diagnose technical issues and fix bugs

We do not use your personal information for advertising or marketing purposes. Data collected for one purpose will not be repurposed without your further consent.

4. Consent & Withdrawal

By creating an account and using the App, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. You may withdraw your consent at any time by:

• Deleting your account through the App's settings
• Contacting us at the email address below to request data deletion
• Adjusting your device permissions (e.g., disabling notifications) through your device settings

Please note that withdrawing consent may affect your ability to use certain features of the App. We will inform you of the implications of withdrawing consent upon your request.

5. Data Storage & Security

Your data is stored securely using industry-standard cloud infrastructure located in North America. All data is encrypted in transit (TLS/HTTPS) and at rest. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

While we strive to protect your personal information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Third-Party Services

We use third-party services to operate the App, including:

• Authentication providers — for secure sign-in via Google and Apple
• Cloud data storage — for storing and syncing your list data
• Crash reporting — for stability monitoring and bug diagnosis

We select third-party service providers that maintain appropriate data protection practices. Some of these services are operated by Google LLC and are subject to Google's Privacy Policy.

7. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following cases:

• With your consent — when you share a list, the invited users can see the shared list data and your display name
• Service providers — with third-party services listed above, solely to operate the App
• Legal requirements — if required by law, regulation, or valid governmental request
• Business transfers — in connection with a merger, acquisition, or sale of assets, with equivalent privacy protections

8. Your Rights

Under applicable Canadian privacy laws (PIPEDA and BC PIPA), you have the right to:

• Access your personal data stored in the App
• Correct inaccurate personal information through the App's settings
• Delete your account and associated data by using the "Delete Account" option in the App's settings
• Request a copy of your data by contacting us
• Withdraw consent for data collection at any time (see Section 4)
• File a complaint about our privacy practices (see Section 13)

We will respond to access and correction requests within 30 days. When you delete your account, your personal data is permanently removed from our systems. Shared lists you created will remain available to other members but your name will be disassociated.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the App's services. If you delete your account, we will delete your personal data within 30 days.

10. International Data Transfers

Your personal information may be stored and processed in North America, where our cloud infrastructure is located. By using the App, you consent to the transfer of your information to servers in North America. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable Canadian privacy laws.

11. Children's Privacy

The App is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information promptly. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Effective date" at the top of this page and, where appropriate, by notifying you through the App. Continued use of the App after changes constitutes acceptance of the revised policy.

13. Complaints

If you have a concern about our privacy practices, please contact us first using the information below. We will investigate and respond to your complaint within 30 days.

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to file a privacy complaint, please contact our Privacy Officer:

Privacy Officer
M.V.A. Software Inc.
Email: support@mvadigital.ca