Privacy Policy

How Little Journey Planner collects, uses, shares and protects personal information on littlejourney.ca and in the Little Journey app, and how Canadian families can exercise their privacy rights under PIPEDA and Quebec Law 25.

On this page

Who we are

Little Journey Innovation Inc. ("Little Journey", "we", "us") operates Little Journey Planner. This policy explains how we handle personal information on our marketing website at littlejourney.ca (the "site") and in the Little Journey app at app.littlejourney.ca (the "app").

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in Quebec, the Act respecting the protection of personal information in the private sector as amended by Law 25.

Effective date: October 29, 2026

Our privacy officer

Little Journey Innovation Inc. has designated a Privacy Officer who is responsible for protecting personal information. You can contact our Privacy Officer with any question, request or concern about this policy:

What we collect

On the marketing site

We keep the marketing site light. There is no newsletter or email sign-up on it today.

  • Technical information. When you visit, our hosting provider, Cloudflare, processes technical details such as your IP address, browser type and the pages you request so it can deliver the site and protect it from abuse.
  • Your cookie choice. We store your cookie preferences in a first-party cookie called lj_consent for 182 days, so we don't ask you again on every visit.
  • Analytics (only if you opt in). If you accept analytics cookies, we use Google Analytics 4 and Ahrefs Web Analytics to understand how people use the site, for example which pages are visited and which buttons are clicked. Google Analytics sets the cookies _ga and _ga_<id>, which last about two years. Ahrefs Web Analytics is designed to work without cookies. If you don't opt in, neither tool loads.
  • Forms. If we add a form to the site in the future, it may be provided by Tally, and we will collect only what the form asks for.

In the app

Little Journey is built for parents, and only parents create accounts.

  • Account information. The details you give us to create and sign in to your account.
  • Family information. The nicknames you choose for your children. We don't ask for children's full names or birth dates.
  • Calendar and activity information. The activities and plans you add to your household calendar, and the activities you choose to share with other families.
  • Sharing settings. Which activities you share, and with which families.

Why we use it

We use personal information to:

  • run the site and the app, and keep them secure and working properly;
  • create and manage your account;
  • let you plan activities and share the specific activities you choose with other families;
  • respond to your questions and requests;
  • understand how the site is used and improve it, but only if you have opted in to analytics; and
  • meet our legal obligations.

We don't sell your personal information, and we don't use your family's information in the app for advertising.

We ask for your consent before we collect, use or share personal information, unless the law allows otherwise. On the site, analytics stays off by default: Google Analytics and Ahrefs Web Analytics load only after you opt in through our cookie banner, and we use Google Consent Mode with analytics and advertising storage set to "denied" until you choose.

You can change your mind at any time:

  • Cookies: use the "Cookie settings" button in the site footer to update or withdraw your choice. When you withdraw consent, we delete the Google Analytics cookies on our site and reload the page so analytics stops. You can also delete cookies in your browser. Our Cookie Policy has the details.
  • App information: you can edit or remove information in the app, or contact our Privacy Officer.

Withdrawing consent may mean some features no longer work. We will tell you if that's the case.

Children's information

Little Journey accounts are for parents and guardians only. Children don't sign up or use their own accounts. Inside the app, you identify each child by a nickname you choose, and we don't require birth dates. Each household's calendar stays private by default; you decide, one activity at a time, what to share with another family. Please avoid adding more detail about your children than you need to plan.

Service providers we work with

We share personal information only with service providers that help us run Little Journey, and only as needed for the work they do for us. We expect them to protect it and use it only for that purpose.

  • Supabase provides the database, sign-in (authentication) and file storage services for the Little Journey app. It stores and processes app data, including account details, your children's nicknames, activity and calendar information, and sharing settings, in its US West (Oregon) region (us-west-2) in the United States.
  • Cloudflare hosts this website and protects it at the network edge. Our staff-only admin area uses Cloudflare Access, which sets a CF_Authorization cookie for staff members; it is not set for regular visitors.
  • Cloudinary stores and delivers images.
  • Google Analytics and Ahrefs Web Analytics measure site use, only if you opt in.
  • Tally provides form embeds if we use a form.
  • GitHub stores our website content. Our staff use it; it doesn't hold visitor or family information from the app.

We may also disclose personal information if the law requires it.

Storage and transfers outside Quebec or Canada

The Little Journey app stores its data with our service provider Supabase in the United States (Supabase's US West (Oregon) region, us-west-2). This means your account details, your children's nicknames, your activity and calendar information, and your sharing settings are stored and processed in the United States.

While your information is in the United States, it is subject to the laws of the United States and may be accessible to courts, law enforcement and national security authorities there under those laws.

We protect information we transfer with contractual and security safeguards. This includes our service agreement with Supabase, and the information is encrypted when it travels between you, the app and Supabase.

Some of our other service providers listed above, such as Cloudflare, Cloudinary, Google and Ahrefs, may also process information outside Quebec or outside Canada, including in the United States, with the same consequences.

For people in Quebec: before transferring personal information outside Quebec, we carried out a privacy impact assessment, as required by section 17 of Quebec's private-sector privacy law (as amended by Law 25). It considered the sensitivity of the information, the purposes for which it is used, the safeguards that protect it, including contractual ones, and the legal framework that applies in the United States.

How long we keep it

We keep personal information only as long as we need it for the purposes above, or as the law requires.

  • The lj_consent cookie lasts 182 days.
  • Google Analytics cookies last about two years, unless you withdraw consent or clear them sooner.
  • App account information is kept while your account is active. After you delete your account, we delete or anonymize your information as soon as reasonably possible, unless we must keep it longer by law.

How we protect it

We use reasonable administrative, technical and physical safeguards, suited to the sensitivity of the information, to protect it against loss, theft and unauthorized access. These include encrypted connections (HTTPS), restricted staff access to our admin tools through Cloudflare Access, and limiting who can see personal information to people who need it for their work. No system is perfectly secure, but if a privacy incident creates a risk of serious harm, we will notify you and the appropriate regulators as the law requires.

Your rights

You have the right to:

  • Access the personal information we hold about you;
  • Correct information that is inaccurate or incomplete;
  • Withdraw consent to how we use your information, subject to legal or contractual limits;
  • Ask us to delete your information, or, in Quebec, ask us to stop sharing it or to de-index it where the law allows; and
  • Portability (Quebec): receive computerized personal information you gave us in a structured, commonly used technology format, or ask us to send it to another organization.

How to make a request

Email our Privacy Officer at privacy@littlejourney.ca. We may need to confirm your identity before we act on your request. We will respond within 30 days and, if we can't fully grant the request, we will explain why and tell you how to challenge our decision.

Complaints

If you have a concern, please contact our Privacy Officer first so we can try to fix it. You also have the right to complain to:

  • the Office of the Privacy Commissioner of Canada (priv.gc.ca); or
  • if you live in Quebec, the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).

Changes to this policy

We may update this policy as Little Journey changes or the law changes. We will post the new version on this page with a new effective date. If we make a significant change, we will let you know through the site or the app before it takes effect and ask for your consent again where required.