1. Your money never moves
Cap sees your spending to build your plan. It can never move your money. No payments, no transfers, no withdrawals.
You enter your bank login with Plaid, the service that connects Cap to your bank. Cap never sees it.
Your data is only used for your plan. Never sold.
2. Who looks after your data
Cap is published by Aquendia. This policy explains what information we collect, why, how we protect it and what your rights are. It covers the Cap app, this website and its calculators.
The person in charge of your personal information is Njomo Rostand, Aquendia.
Email: confidentialite@aquendia.com
Mailing address: [to be completed]
Write to this person with any question, request or complaint.
This policy aims to comply with Québec's Act respecting the protection of personal information in the private sector, as amended by Law 25, and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
3. What we collect, and why
| Information | What it's for |
|---|---|
| Email, language, province, first name (optional) | Creating your account and applying your province's rules. |
| Password | Protecting your account. We never see it in plain text. |
| Accounts you link: type, bank, balance | Building your plan. |
| Money in and out of those accounts | Knowing what you have left each month and dating your purchase. |
| Your goals: target price, city, target date | Working out the amount to reach and your likely date. |
| As a couple: what each of you chooses to share | Following your shared goal. |
| Your agreements and their date | Proving what you accepted, and when. |
| Your device (for notifications) | Sending you your recaps and milestones. |
| How you use the app, if you agree | Improving the app. Never amounts or spending details. |
| Technical logs | Running and protecting the service. Never amounts. |
We never ask for your Social Insurance Number.
Website calculators. The numbers you enter are only used to calculate the result. They're not tied to any account or to your identity. The website uses no cookies and no ad trackers. We only count the total number of uses.
Passwords are stored as Argon2id hashes. Usage events are pseudonymized.
4. Your sharing choices
To use Cap, three agreements are required: the terms of use, this policy, and access to your accounts to build your plan. Each one is shown to you separately, in plain words.
Four options are optional and off to start:
- sharing some accounts with your partner;
- sending us your spending category fixes, to sort spending better;
- contributing to anonymous statistics across households;
- letting us measure how you use the app.
Turn them on or off whenever you like, in Settings › My data. Turning one off takes effect right away. Each agreement is dated and tied to the version of the text you accepted.
Household statistics are only produced above a minimum number of households (k-anonymity).
5. Planning together
As a couple, you choose for each account what the other sees: nothing, the balance, or the details. Cap always respects that choice. You can change it or leave the household at any time: the other person stops seeing your data right away.
7. Where your data lives
Your data is stored in Canada.
Plaid may process some of your information outside Québec and Canada, mainly in the United States. It may then be subject to that country's laws.
Before any transfer outside Québec, we assess the risks to your privacy. We consider how sensitive the information is, the purpose, the protections in the contract and the laws of that country. The transfer only happens if the protection is adequate.
Privacy impact assessment (PIA) required by Québec's Law 25.
8. How long we keep it
- As long as your account exists, we keep your data.
- If you delete your account, we erase your information within 30 days at most, backup copies included.
- We only keep what the law requires, such as some billing records, and only for as long as required.
- Truly anonymous statistics, which can no longer identify you, may be kept.
- Inactive accounts: retention period [to be confirmed].
9. How we protect your data
- Cap can never move your money.
- Your data is encrypted while it travels and while it's stored.
- Your password is never stored in plain text. You can unlock the app with your face or fingerprint.
- Only people who need it can access data, and every access is recorded.
- Our technical logs never contain amounts.
- The app hides its content in your phone's list of open apps.
TLS encryption in transit and encryption at rest of sensitive data, including the access provided by Plaid.
10. Your rights
You can:
- see the information we hold about you and get a copy;
- have it corrected if it's wrong or incomplete;
- download it in a file other services can read;
- withdraw an agreement at any time;
- ask us to delete your account, in the app or on the deletion page;
- know what a number calculated by Cap is based on.
The easiest way: Settings › My data, in the app. You can also write to confidentialite@aquendia.com. We reply within 30 days. We may ask you to confirm your identity.
Not happy with our answer? You can contact the Commission d'accès à l'information du Québec or the Office of the Privacy Commissioner of Canada.
Rights of access, correction, portability (structured JSON export), consent withdrawal and deletion.
11. Automatic calculations
Your likely dates, odds, scenarios and saving ideas are calculated automatically, from your spending and published financial rules. They're estimates to guide you. They decide nothing for you and don't take away any right or service.
Every number has its explanation in the app (“Where does this number come from?”): the information used, the rules applied, the calculation steps and the assumptions.
12. If something goes wrong
We record every incident involving your information. If an incident could seriously harm you, we promptly notify the Commission d'accès à l'information, the Office of the Privacy Commissioner of Canada where required, and the people affected. We also act to limit the risk.
13. Minors
Cap is for adults. We don't knowingly collect information about minors.
14. Changes to this policy
If we make an important change to this policy, we'll tell you in the app before it applies. Where the law requires, we'll ask for your agreement again. The update date is shown at the top of the page.