Privacy Policy
Canary is a friendly air-quality companion that watches the places you care about and warns you before the air turns rough. This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices and rights you have.
This policy applies to the Canary website at canaryapp.us, the Canary mobile app, and related services (together, the "Service"), operated by BLI Entertainment ("Canary," "we," "us," or "our"). By using the Service you agree to this policy.
1. Information we collect
Information you give us
- Early-access signup: your email address, the profile that best describes you (for example, asthma or sensitive lungs, parent of a child with asthma, runner, or outdoor worker), gender, age range, how often bad air affects you, and a city or ZIP code you provide, along with your consent to be contacted.
- Saved places: the names, addresses, and geographic coordinates of places you choose to watch (such as home, work, or a school), and the alert threshold you set for each.
- Profile and settings: the sensitivity profile you select and your in-app preferences.
- Feedback: messages, bug reports, or notes you send us, including any details you include.
- Support requests: information you provide when you contact support.
Information collected automatically
- Device and technical data: an app-generated device identifier, IP address, approximate location derived from IP, device push token (when alerts are enabled), and basic app-interaction and marketing-attribution data (such as UTM parameters).
- Diagnostics: crash and performance data to keep the app stable, collected through our error-monitoring provider and configured to exclude directly identifying personal data by default.
- Timestamps of key events, such as signups, readings, and alerts.
Precise location
If you use the "My location" feature, the app accesses your device's location to check the air near you. Precise location is used only while you are using the app (foreground), only with your permission, and you can turn it off at any time in your device settings.
Payment information
Subscriptions are processed by our payment providers: Apple App Store and Google Play (via RevenueCat) for in-app purchases, and Stripe for any web purchases. We do not collect or store full payment-card numbers. We receive and store limited billing records such as your subscription status, plan, and the customer or subscription identifiers needed to keep your Canary+ access working, linked to your device identifier.
Health-adjacent information
Some information you provide (for example, indicating asthma or sensitive lungs) relates to health sensitivity. We use it only to tune how early Canary warns you and to operate the Service. We do not use it for advertising and do not sell it.
2. How we use information
- Provide, operate, and maintain the Service, including checking air quality for your saved places and sending alerts when a place crosses your line.
- Personalize how early we warn you based on your chosen profile.
- Process subscriptions, trials, and billing, and enforce plan limits.
- Respond to support and feedback, and improve features, copy, and reliability.
- Send you early-access and product updates you have asked for (you can opt out anytime).
- Protect the Service against fraud, abuse, and security issues, and comply with legal obligations.
3. Legal bases (EEA/UK users)
Where the GDPR or UK GDPR applies, we rely on: your consent (for marketing emails and precise location); performance of a contract (to provide the Service and process subscriptions); our legitimate interests (to secure, maintain, and improve the Service); and legal obligations (such as tax and record-keeping). You may withdraw consent at any time.
4. How we share information
We do not sell your personal information, and we do not use it for cross-context behavioral advertising. We share information only as follows:
- Service providers who process data on our behalf, including hosting and data storage (Vercel and Upstash), push-notification delivery (Expo), error monitoring (Sentry), payment processing and subscription management (Stripe, RevenueCat, Apple, and Google), and email delivery.
- Air-quality and geocoding data sources (such as Open-Meteo). When the app requests a reading, coordinates are sent to the data provider to return air-quality information.
- Legal and safety: when required by law, to enforce our terms, or to protect rights, safety, and property.
- Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this policy.
5. Data retention
| Data | Retention |
|---|---|
| Signup answers and email | Until you ask us to delete them, or up to 24 months of inactivity, whichever is first. |
| Feedback, device alert records, push-delivery records | Up to 12 months, unless you ask us to delete them sooner. |
| Device push tokens and saved places | While alerts are active; pruned when they become stale or on request. |
| Billing records | As long as needed to provide the subscription and to meet tax, accounting, and legal requirements. |
| Aggregated analytics | May be kept without direct identifiers so we can understand whether Canary is useful. |
6. Security
We use reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to withdraw consent, and to object to or restrict certain processing. You can also:
- Turn notifications on or off, and control location access, in your device settings.
- Unsubscribe from marketing emails using the link in any email.
- Request access, export, or deletion (see "How to reach us").
California residents: you have the right to know, delete, and correct personal information, and to opt out of "sale" or "sharing." We do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we will not discriminate against you for exercising your rights.
EEA/UK residents: you may lodge a complaint with your local data protection authority.
8. Children's privacy
Canary is intended for adults and is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you are under 18, you may use Canary only with the involvement of a parent or guardian. By design, Canary lets you name saved places (such as a school) rather than collect a child's name or personal details. If you believe a child has provided us personal information, contact us and we will delete it.
9. International transfers
We operate in the United States, and your information may be processed in the U.S. and other countries where our service providers operate. Where required, we use appropriate safeguards for international transfers.
10. Changes to this policy
We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, provide additional notice through the Service or by email.
11. How to reach us
To make a privacy request or ask a question, email support@canaryapp.us with the subject line "Privacy request." Include the email you used to sign up and, for app-related requests, your Canary device ID if available. We can remove signup records, feedback, device push tokens, saved-place alert records, and billing/entitlement records tied to the email or device ID you provide; we may retain aggregate counts that no longer identify you.
BLI Entertainment · 16255 Ventura Blvd, Ste 1240, Encino, CA 91436 · support@canaryapp.us