Toronto Live Map · Privacy
Privacy
Last updated: 16 October 2026 (draft)
The short version
- No accounts. Not on the website, not in the app, not on the board.
- No tracking. No cookies, no analytics, no advertising, no tracking libraries, and no crash reporting.
- The board downloads public train data. That is all it does online. It sends nothing about you with those requests.
- Your Wi-Fi password goes from your phone to your board only. It is never sent to us.
- If you give us your email for launch news or a C$1 reservation, we use it only for that. We never sell it or share it for marketing.
1. Who we are
Vivolit is the trade name of 12308444 Canada Inc., a company based in Toronto, Ontario. "We" in this policy means Vivolit.
Person in charge of the protection of personal information: our Privacy Officer, reachable at info@vivolit.ca. Mailing address: Toronto, Ontario (full mailing address on request at info@vivolit.ca).
2. This website
- The pages load nothing from other companies: no fonts, no analytics, no embedded videos, no social buttons, no cookies. A Content-Security-Policy in every page enforces this.
- Like any web server, our hosting provider receives your IP address, browser type and the page requested in order to deliver the page. It may keep these in short-term server logs under its own policy. We do not use them to identify you. The site is hosted on Firebase Hosting (Google).
- If you arrive through a tagged link (for example from a poster, an ad or a newsletter), the tag is in the page address. We keep it only if you sign up, and only to count which posters and ads work.
- Links to other sites, such as Kickstarter, Stripe and OpenStreetMap, take you to sites with their own privacy policies.
3. Launch emails (the sign-up form)
| What | Why | Kept |
|---|---|---|
| Email address (required) | To send launch news and a few build updates, with your consent | Until you unsubscribe, then removed from the list. |
| Your station (optional) | To learn which parts of the city are interested. We report only counts, never names. | As above |
| First three characters of your postal code (optional) | Same reason. It covers an area, not an address. | As above |
| Campaign tag (only if the page address had one, e.g. utm_source=poster) | To count which posters, ads and links bring sign-ups | As above |
| Proof of consent (date, time, which form) | Required by Canada's anti-spam law (CASL) | As long as we email you, plus the period the law requires |
The form saves your sign-up directly in our database on Google Cloud Firestore (part of Firebase), in Google Cloud's Toronto region (northamerica-northeast2). The database accepts new sign-ups only; it cannot be read from the website. Before we send the first email, we move the list to our email provider, an email service provider that we will name here before the first email, which acts on our behalf, and ask you to confirm your address. Every email has an unsubscribe link and our mailing address.
4. C$1 VIP reservation
If you reserve a VIP spot (see the reservation terms), the payment is handled by Stripe, through a Stripe Payment Link. Your card details go to Stripe, not to us. We receive your name, email address, the amount and the date, and the campaign tag if the page address had one.
Before you go to Stripe, the reservation form saves the email you type, with the date, the campaign tag if any, and whether you ticked "also email me project news", in the same Firestore database as the sign-ups. We use it to send your VIP link and to match your C$1 payment. If you do not complete the payment, we may send you one reminder and then delete it.
We use this to send you the launch-day link and reservation messages, and to answer payment questions. We keep payment records as long as Canadian tax law requires. Reservation messages are not marketing. You get launch news only if you also signed up for it.
5. The Vivolit app
The app has no account, no advertising, no analytics and no crash reporting. It talks only to your own board, over Bluetooth or your home network. We do not receive any information from the app.
| Information | Where it goes | Kept |
|---|---|---|
| Your Wi-Fi name and password | Sent once from your phone to your board over an encrypted Bluetooth connection. Never sent to us. | Not kept by the app. The board keeps it so it can reconnect. |
| The set-up code from the board's QR sticker, and a key made from it | Stays in your phone's secure storage (Keychain or Keystore). The key goes to your board with each request on your home network. | Until you remove the board in the app or uninstall the app |
| The board's name, identifier, network address, last mode, and when the app last reached it | On your phone only | Same |
| Camera | Used only to read the QR sticker. Images are processed on the phone and not saved or sent. | Not kept |
| Bluetooth and local network access | To find and control your board directly | Not applicable |
We do not use your location. On Android 11 and older, the system requires the location permission to scan for Bluetooth devices; the app never reads your location.
6. The board
What it sends over the internet
- About every 20 seconds, the board downloads the public subway data feed published under the Open Government Licence – Toronto (today:
gtfsrt.ttc.ca). The request is encrypted (HTTPS). - The request carries the board's software version and nothing about you. There is no account, name, email, serial number, Wi-Fi name or location in it.
- Any server that answers an internet request sees the IP address of your home network. The data feed's host sees it under its own policies.
- The board does not use a time server. It has no telemetry, no analytics and no microphone or camera.
Our relay server (planned)
To spread the load on the public feed, we may run a small relay server that copies the public feed. If we turn it on, boards ask the relay first and go to the public feed if the relay does not answer.
The relay keeps no request logs and stores no IP addresses. To stop any single address from asking too often, it keeps a scrambled (salted hash) form of the address in memory for at most one minute. The relay runs on a content-delivery provider that we will name here before the relay is used, which handles the connection on our behalf. It may process it outside your province or outside Canada, and it keeps its own aggregate traffic and security statistics.
Stored on the board
- Your Wi-Fi name and password, and the board's set-up code, are stored in the board's memory.
- Holding the button on the back, or using Forget Wi-Fi in the app, erases the Wi-Fi details (see Support).
- Before giving the board away, reset the Wi-Fi.
- On Bluetooth and on your network the board shows a name made from part of its hardware address, for example VIVOLIT-3FA2C1.
Software updates
Today, updates can be installed only from the app, over your home network, and they are signed so the board accepts only our software. If we add an automatic update check, it will contact our server. We will update this policy and the app store privacy labels before that ships.
7. Service providers and where data is processed
We use a few providers who process information on our behalf, under contracts that limit their use of it. Some of them may store or process information outside Quebec or outside Canada, for example in the United States, where it may be accessible to authorities under local law.
- Website hosting: Firebase Hosting (Google LLC)
- Sign-up storage: Google Cloud Firestore (Google LLC), Toronto region
- Email list: to be named here before first use
- Payments: Stripe (Stripe Payments Canada, Ltd.)
- Relay, if used: to be named here before first use
We do not sell personal information and we do not share it for advertising.
8. Your rights
You can:
- ask what personal information we hold about you;
- have it corrected;
- withdraw your consent, for example by unsubscribing;
- ask us to delete it, unless the law requires us to keep it, as with payment records.
Write to info@vivolit.ca and we will answer within 30 days. If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada. If you live in Quebec, you can complain to the Commission d'accès à l'information du Québec.
Because the app and the board send us nothing about you, in most cases we have nothing to give you or delete. You remain in control of what is stored on your own phone and board.
9. Children
The website, the app and the reservation are not directed at children under 13, and we do not knowingly collect their information.
10. Changes and contact
If we change how we handle information, we will update this page and its date first. If the change is significant, we will tell people on our email list.
Questions: info@vivolit.ca · Vivolit (12308444 Canada Inc.), Toronto, Ontario (full mailing address on request at info@vivolit.ca), Toronto, Ontario.