Privacy Policy

Privacy Policy

NeoDivergent Technologies Inc. · Effective 21 November 2026 · Version 2.0

The short version

  • Your expenses, receipts and support letters are stored on your phone, encrypted.
  • If you turn on cloud backup, an encrypted copy is stored with Google Firebase in Canada.
  • Creating an account is optional. It is only needed for cloud backup and subscriptions. Sign-in is handled by Google Firebase, which processes sign-in details in the United States.
  • No advertising, no tracking, and we never sell your information.
  • You can delete your account and your backups at any time, in the app or at neodivergent.ca/delete-account.
  • This website is separate and collects a little, which Part B explains.
  1. Who we are

NeoDivergent Technologies Inc. (“NeoDivergent”, “we”, “us”, “our”) is a corporation based in Saskatchewan, Canada. We make the NeoDivergent mobile app and operate this website.

NeoDivergent is an independent app. It is not affiliated with, endorsed by, or operated by the Government of Saskatchewan, the Ministry of Social Services, or any other government body.

We have a Privacy Officer who is responsible for our compliance with this policy and with privacy law. You can reach them at info@neodivergent.ca.

  1. What this policy covers
  • Part A — the NeoDivergent app.
  • Part B — this website.

PART A — THE NEODIVERGENT APP

  1. What information the app handles

You decide what to enter. This may include:

  • About your child: a first name or nickname (optional), the name of their funding program, and funding dates and amounts.
  • Expenses: date, amount, vendor or provider, category, your notes, and whether you have marked an expense as submitted.
  • Files you attach: photos of receipts, invoices and support letters. These may contain your child’s name, a professional’s name, and health-related information such as a diagnosis.
  • Preferences: your language, reminder settings, and whether the app lock is on.
  • Account information (only if you create an account): your email address, a unique account ID, and the dates the account was created and last used.
  • Cloud backups (only if you turn them on): an encrypted copy of your app information and files, and the date and size of each backup.
  • Subscription status (only if you subscribe): whether your subscription is active and when it renews. Payment is handled entirely by Apple or Google. We never receive your card or bank details.

The app asks your permission before using your camera, your photos, or sending notifications. You can say no and still use the rest of the app.

  1. How it is protected
  • Your information on the phone is stored in an encrypted database, and attached files are encrypted with AES-256. The keys are created on your phone, kept in its secure storage, and never leave it.
  • The app lock uses your phone’s own face, fingerprint or passcode check. We never see or store your face, fingerprint or passcode.
  • Photos are made smaller and have location and camera details removed before they are saved.
  • Screenshots and screen recording are blocked while a receipt, support letter or backup recovery code is on screen. On iPhone only screen recording can be blocked; this is an Apple limitation.
  • On Android, the phone’s automatic Google backup is switched off for this app. On iPhone, the app’s files may be included in your iCloud backup, but they are encrypted and the keys are not included, so nobody can read them.
  • Cloud backups are stored with Google Firebase in Canada and are encrypted while being sent and while stored.

No security is perfect, and you are responsible for keeping your phone secure.

  1. What leaves your phone

This is the complete list.

  • Account sign-in (if you create an account): your email address and account ID go to Google Firebase Authentication, which runs in the United States.
  • Cloud backups (if you turn them on): your encrypted backup goes to Google Firebase in Canada.
  • Subscriptions: Apple or Google tells the app whether your subscription is active.
  • App update checks: when you open the app, it asks Expo, Inc. (United States) whether a newer version is available. This includes a random install ID, your phone type, the app version and your IP address, but nothing you have entered. See expo.dev/privacy.
  • Links you tap: some screens link to Government of Saskatchewan websites, which open in your browser. The app sends them nothing about you.
  • Sharing and downloading: when you choose Share, Download or Merge into one PDF, the file goes where you send it.
  • Reminders are scheduled on your phone and contain no information about your child.
  1. What we do not do
  • No advertising and no tracking across other apps or websites.
  • No crash reporting or usage analytics.
  • No selling, renting or trading of personal information.
  • No use of your information for any purpose other than running the app.
  • No automated decision-making or profiling.

We only share information with the service providers listed in section 18, so they can provide their service to us. We may disclose information if the law requires it, for example under a court order.

  1. Your child’s information

The app is used by parents and guardians. Information about your child is entered by you and is stored on your phone and, if you turn it on, in your encrypted backup. Because receipts and support letters can contain sensitive health information, we never use or share it for any other purpose.

  1. Deleting your information
  • One item: open it in the app and choose Delete.
  • Your account and cloud backups: in the app, go to Settings, then Account, then Delete account. Everything is deleted from our systems within 30 days. You can also ask at neodivergent.ca/delete-account.
  • Deleting your account does not cancel a subscription. Cancel it in your Apple or Google Play settings.
  • Everything on your phone: delete the app. This erases all its information and keys on that phone.

If you have emailed us and want that deleted, write to info@neodivergent.ca.

  1. Backups and losing data
  • If you have not made a backup and you delete the app or lose your phone, your information is gone and we cannot recover it.
  • Backups are protected by a recovery code that is shown to you once. Keep it somewhere safe.
  • Restoring a new iPhone from iCloud does not bring NeoDivergent information back, because the keys stay on the old phone. Use the app’s own backup and restore.

Please keep your own copies of important receipts. The funding program may ask for originals.

PART B — THIS WEBSITE

  1. What the website collects
  • If you use the contact form or email us: your name, email address and message. We use it only to reply. Please do not send us receipts or health information about your child.
  • Our website platform records basic visit information (IP address, browser type, pages viewed). We use it only to keep the site working and secure and to count visitors.

We do not run advertising on this website.

  1. Cookies

This website only uses cookies it needs to work and to count visitors. No advertising or tracking cookies. You can block cookies in your browser.

APPLIES TO BOTH

  1. How long we keep information
  • Information on your phone: as long as you keep it there.
  • Account and cloud backups: as long as your account exists, then deleted within 30 days of deleting it.
  • Emails and contact messages: up to two years, then deleted.
  • Website statistics: by our website platform’s own schedule.
  1. Your rights

Under Canadian privacy law you can ask what information we hold about you, ask us to correct it, withdraw your consent, and complain about how we handle it.

Inside the app you can view, change and delete everything yourself at any time. For anything else, write to info@neodivergent.ca. We will reply within 30 days and may need to confirm who you are.

If you are not happy with our reply, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or your provincial privacy regulator.

  1. Quebec

Our Privacy Officer (info@neodivergent.ca) is responsible for personal information under Quebec law. You may also ask us to stop sharing your information and ask for a copy in a common electronic format. The app is available in English and French, and a French version of this policy is available on request.

  1. Europe and the United Kingdom

We do not offer the app in Europe or the UK. If you use it from there: NeoDivergent Technologies Inc. is responsible for your information; we rely on your consent and on providing the app you asked for; sign-in and update checks are processed in the United States and backups in Canada; and you have the right to access, correct, delete, restrict, move or object to the use of your information, and to complain to your local regulator.

  1. Children

The app is for parents and guardians aged 18 or over. It is not for children, and we do not knowingly collect information from children. Information a parent enters about a child is controlled by that parent.

  1. Security incidents

If a security breach involving personal information we hold creates a real risk of significant harm, we will tell the people affected and the regulator, as the law requires.

  1. Service providers
  • Google Firebase (Google LLC) — cloud backups — stored in Canada.
  • Google Firebase Authentication (Google LLC) — account sign-in — United States.
  • Expo (650 Industries, Inc.) — app update checks — United States.
  • Apple and Google — app downloads and subscription payments — see their own privacy policies.
  1. Changes to this policy

If we change this policy we will update the date at the top and post it at neodivergent.ca/privacy. If a change is significant, we will also tell you in the app.

  1. Contact

NeoDivergent Technologies Inc.
Attn: Privacy Officer
500 – 211 19th Street East, Saskatoon, SK S7K 5R6, Canada
info@neodivergent.ca