Indivia
Français
Draft for the test period. This text has not been approved yet and may change. Parts marked “to be confirmed” are still being filled in.

Privacy policy

Last updated: October 18, 2026

Indivia is an app to keep track of your real estate, investments, budget and net worth. It is run by Emedianet inc. ("we", "us"). This policy explains in plain words what personal information we hold, why, where it is kept, who can see it and what you can do about it. It covers the Indivia app, the Indivia server and these web pages.

The short version

  • Your data is yours. We use it only to run Indivia for you. We never sell it or rent it, and we don't use it for advertising.
  • We email you news and offers only if you ticked the box for them (it is never ticked for you) and confirmed it from the email we sent. You can stop at any time, in one click.
  • The app keeps your data on your own device. If you sign in, a copy is kept on our server in Canada so your devices stay in sync.
  • A few service providers handle small parts of the work: sending emails, card payments and sales tax, purchases made in a phone's app store, and Google sign-in. Some of them are in the United States (see below). No artificial intelligence (AI) service receives your data, except the question you type in the AI guide, with names removed (see below).
  • You can see, export, correct or delete your data, and delete your account from the app.
  • No advertising trackers and no trackers from any other company. Anonymous usage counts stay on our own server, and you choose whether your device sends them.
  • Questions or complaints: write to our person in charge of the protection of personal information at support@indivia.app.

Who is responsible

Emedianet inc., Laval, Québec, Canada, is responsible for the personal information described here.

The person in charge of the protection of personal information is Patrick Rabbat, President. You can reach them at support@indivia.app.

What we collect

Your account

  • Your name, email address, preferred language and your role in your household (owner, editor or viewer).
  • Your password, kept only as a one-way fingerprint (a "hash") that cannot be turned back into the password.
  • Your two-step sign-in secret (encrypted with a server key) and your recovery codes (kept as fingerprints only).
  • If you sign in with Google: the account number and email address Google sends us. We never see your Google password.
  • If you add a passkey: its public part and the name you give it. The private part never leaves your device.
  • Your devices: the name you give each one, when it was added and when it last connected.
  • If you create your account on our website: when you accepted the terms of use and this privacy policy, and that the account was made there. The form is protected against robots by a hidden field, a limit on new accounts per internet address (kept in memory for one hour, never written down) and Cloudflare Turnstile (see Service providers).
  • If you ask for news and offers: your answer, when you asked and when you confirmed, where (sign-up or Your profile), the exact words you saw and the network you were on (cut like the sign-in history, never your full internet address). This is the proof of your consent that Canada's anti-spam law asks us to keep.

What you enter in the app

Everything you choose to enter: properties and ownership shares, the people and companies you own things with, loans, values, rents, revenues and expenses, investments and transactions, budget, goals, notes, and the files and photos you attach.

Indivia does not connect to your bank or broker. It only has what you type in or import from a file. Nothing is mandatory: you decide what to track.

Information about other people

You may enter information about other people: your spouse or partner, co-owners, tenants and rental applicants, previous landlords, your accountant or lender, or the person who would receive your data in an emergency (the legacy handoff). Only enter what you have the right to share. Tenant information is explained below.

Technical information

  • The server writes a line for each request it receives (date, address asked for, result and time taken) to keep the service working and secure.
  • To slow down password guessing, the server remembers the internet address of failed sign-ins for 15 minutes, in memory only.
  • Your sign-in history: each sign-in and failed sign-in, each new device, each change to your password or two-step sign-in, each data export, each link you share and each time it is opened. For each one we keep the date, the internet address shortened to its network (never the full address), the device name and its kind (for example Windows or iPhone). You can see it in Your profile, then Sign-in history. If you share a household, its owner can see your sign-in history too; the other people in it cannot.
  • There are no advertising trackers, analytics cookies or trackers from any other company in the app or on these pages.

Usage counts

  • Only if you say yes (asked once on each device, and in Settings, Usage counts; off until you turn it on): once a day the app sends counts for the day. Pages and tabs opened, buttons pressed (named by the app's own label, never by what is shown on them or typed), how long pages take to load and stay open (in rough ranges), imports that worked or failed (by file kind), setup steps, errors (their kind only), sync results, help topics opened, and which areas of the app your household uses (yes or no). With them: the date, the app version, the system (for example Windows) and the language. Never your account, your device, your name or email, amounts, dates you entered, text you type or where you click on the screen. "See exactly what is sent" shows the counts before they go.
  • For everyone: the server counts how many people use Indivia each day, week and month, and the province or state and the country each device is used from, once a day. The place comes from a location file kept on our own server (IP geolocation by DB-IP, https://db-ip.com); the internet address is only looked up, not kept for this.
  • Only daily totals are kept, never linked to you or a device. A total made up of fewer than 5 people is never shown. Only we read them, to improve Indivia; they are never sold or shared.

Daily closing prices

If your household is signed in to our server, your device sends once a day the list of the stock, fund and crypto symbols it holds (for example TSX:RY, with its currency), so the server knows which closing prices to publish. The list has no quantity, no account, no name, and nothing that links it to you, your household or your device; the server keeps each symbol with the last day it was sent and forgets it after 30 days without one. The prices then come back to every device the same way, without saying which ones it needs.

The AI guide (Ask how to enter something, on the Help page)

The Help page can write a step-by-step guide for what you describe (for example "I refinance my duplex with another bank"). It is off unless Indivia turns it on for your plan, and nothing is sent until you press Ask. Our server then removes from your question the names of your properties, people, companies and accounts (they become "Property 1", "Person 1"…), emails, phone numbers, postal codes, street addresses and long numbers, and adds the names of your financial institutions and the matching parts of Indivia's help. It never sends an amount, a date, a tenant, an account number, your name or your email. Depending on how Indivia runs the guide, the question is answered either on an AI server we run ourselves in Québec, or by Anthropic in the United States, which may not use it to train its models and deletes it within 30 days. Our server puts the names back in the answer and keeps only who asked, when, and the cost, never the question or the answer. Avoid typing a name or an amount in the question.

Plans, codes and referrals

  • Your plan and payments. The server keeps your household's plan, its renewal or end date, each change of plan, and a record of each payment, refund and credit (date, amount, sales tax and where it was charged, Stripe's fee, currency), to give you what you pay for and to keep the accounts the law requires. If you answer the optional question when you cancel, the server keeps your answer. Card payments are made on Stripe's page: we never see your card number. If you buy on an iPhone or an Android phone, Apple or Google takes the payment and tells our server only the plan, its dates and a purchase number.
  • Free access. If Indivia gives your household free access to a plan, the server keeps the plan, the dates and an internal note.
  • Promo codes. When you use a code, the server keeps which code your household used and when, to apply it and count its uses.
  • Referral codes. If you came from a partner's link (https://indivia.app/?ref=CODE), the website keeps the code in your browser for 60 days so you can type it when you create your account. If you type a partner's or a friend's code, the server records which partner or household referred yours. A partner is paid a share of what referred households pay; partners only ever receive counts and amounts, never your name, email or anything that identifies you. A friend who invited you is not told who you are either; they only see counts (friends who joined, rewards waiting and given). A friend's reward (a free month of each household's own plan) is given 30 days after your first payment, at most 12 a year for the household that invites, and only if that payment was not refunded or disputed and was not made with a card the inviting household also uses: to check this, the server asks Stripe for a card fingerprint (a code that identifies a card without its number) and compares it, without keeping it. The server keeps each reward with its date, state and reason.
  • Email confirmation and free trials. Before a free trial, you confirm your email with a link. To give each person one trial, the server keeps a scrambled code (a keyed hash: it cannot be turned back into your email) made from your email in a standard form, and another made from a random number your app creates when it is installed (the install number, sent with each request to the server). These two codes are kept after your account is deleted, so a trial can't be started again with the same email or computer; they contain no email and nothing that leads to you.
  • Your plan on your devices. The server gives the app a signed note saying which plan your household has and until when, so the app can check your plan without being online. It holds your household's number, the plan and its dates, and stays on your device after you sign out. It lasts until 30 days after your paid period ends; after that, the paid screens wait until the device connects again.
  • Disputed payments. If a card payment is disputed with your bank, the server records the dispute (amount, reason, outcome), ends the plan at once and tells Indivia's administrators.
  • People per household. A household has at most 6 people unless Indivia allows more; the server keeps that number for your household.

Why we use it

  • To run Indivia for you: sign you in securely, keep your devices in sync, send the emails you need (invitations, password links, security alerts and the reminders you set up), and run the features you use (links for your accountant or lender, reference requests). Rental ads are filled in on your device from Indivia's own templates; no AI writes them and nothing about them is sent to us.
  • To send you news and offers, only if you asked for them and confirmed it. Each of these emails names us, gives our contact email and mailing address, and has a one-click link to stop them, which works at once. Emails about your account and payments are not news and offers.
  • To protect the service and your account.
  • To improve Indivia, from the anonymous usage counts.
  • To answer you when you write to us.
  • To meet our legal obligations.

We don't use your information for any other purpose without asking you first. We don't build profiles of you, and no decision about you is made by a computer alone.

Where it is kept

  • On your device. The app keeps its own copy of your data on each computer or phone you use. If you turn on backups, they go to a folder you choose; we don't control that folder or the service behind it (for example OneDrive or Dropbox).
  • On our server in Canada, if you sign in with a plan that includes sync: a server we rent in OVHcloud's data centre in Beauharnois, Québec, on an encrypted disk. Its backups stay in Canada too.

How it is protected

  • The app and the server talk only over encrypted connections (HTTPS).
  • What the server itself must read to work for you (your email and name, your devices' names, the people you invite, reference requests, the reminders it emails and the titles of your links) is sealed with the server's key, which is kept apart from the database: a stolen copy of the database or of its backups doesn't show it.
  • In the database, each household's data is walled off from every other household's.
  • Two-step sign-in is required, and repeated wrong passwords or codes are slowed down.
  • We email you when a new device signs in or downloads your household's data, when your recovery key or a recovery code is used, and when all your data is exported. The person who runs the server is emailed when many sign-ins fail from one network, when a household downloads far more than it holds, and each time an administration command is run.
  • What you share with an accountant or lender, and the legacy handoff copy, are locked on your device with a code before they reach the server. The server never has that code.
  • Everything you enter is locked on your device (end-to-end encrypted) before it reaches the server: names of people, companies and properties, addresses, account numbers, payees and memos, amounts and dates, tenants' and applicants' details, notes, and the files and photos you attach. It is locked with your household's data key, which only your devices and your printed recovery key have: neither the server nor the person who runs it can read it, and we cannot recover it for you. A new device gets the key with a code shown on one of your devices, which works once for 15 minutes and never reaches the server, or with your recovery key. Your backups are locked with the same key.
  • What the server can still see: which kinds of records you have, how many, their internal ids and when they changed, and whether an owner is a person or a company. It needs these to sync your devices and apply sharing rules.

No system is perfectly secure. Use a strong password, keep your recovery codes safe, and lock your devices.

Who can see it

  • You and the people you invite into your household, according to their role. Items you mark as private stay yours alone. Co-owners you share an asset with see that asset.
  • People you send a link to. Your accountant or lender sees the package you share until the link ends. A previous landlord sees the reference request you send, and the tenant sees their own reference. The person you name for the legacy handoff receives your locked copy when the conditions you set are met.
  • Our service providers (below), only to provide their service to us.
  • No one else, unless the law requires it (for example a court order). When the law allows, we will tell you first.

Staff access. Nobody at Indivia can read what you enter in the app: it is locked on your devices. To run billing and answer you, the people who work for Indivia can see what the server holds about accounts (name, email, plan, payments, refunds, codes and rewards), each only in the areas their role allows. Each of them has their own staff sign-in, separate from the app, with two-step sign-in required, and the staff tools lock after a few minutes without use. Looking up a customer needs a written reason, which is kept in our staff log. Every action on your household (a refund, a credit, free access, a trial or plan change, a support command) also goes in your sign-in history with its reason.

Service providers

  • Resend sends the app's emails. It receives the recipient's email address and name and the content of the email (for example a password link or a reminder you set up). In the United States.
  • Stripe handles card payments, sales tax (Stripe Tax) and invoices if you choose a paid plan on a computer or in a browser. It receives your email, your billing address and your card; we receive from it only the plan, the dates, the amounts and, to check invite rewards, a card fingerprint that we don't keep. In Canada, the United States and other countries.
  • Apple (App Store) and Google (Google Play) take the payment if you buy a plan on an iPhone or an Android phone, under their own terms and privacy policies. We receive only the plan, its dates and a purchase number. In the United States and other countries.
  • Cloudflare (Turnstile), only on the website's sign-up form: it checks that a person, not a robot, is filling it in. It sees your browser and internet address while the form is open, never what you type in it. In the United States and other countries.
  • Google, only if you choose to sign in with it. Google confirms who you are and knows that you signed in to Indivia. In the United States and other countries.
  • Anthropic, only if Indivia runs the AI guide through it and you ask it a question: it receives your question with names removed (see The AI guide). In the United States.
  • Have I Been Pwned (Pwned Passwords): when you choose a password, the server checks it against passwords known from data breaches by sending only the first 5 characters of its fingerprint. It never sends your password, your email or anything else about you.
  • OVHcloud: the company that rents us the server and its backup storage in Beauharnois, Québec. It keeps the machine running; it does not use what is on it.

Some of these providers are outside Canada, so the information they handle may be subject to the laws of those countries. We send each one only what it needs.

The app also downloads public data, such as Bank of Canada exchange rates, without sending any personal information. Rental listing sites and tenant screening services are only opened from the app: you deal with them directly, under their own policies.

Tenant information (for landlords)

If you manage rental units, you may enter information about tenants and rental applicants: names, contact details, leases, rent payments and screening records (consent date, date of birth for a credit check, the kind of ID you looked at, credit check results, references and your decision).

  • As the landlord, you are responsible for this information. Privacy laws apply to you: collect only what you need to decide on a rental, get the person's consent, keep it safe, let them see and correct it, and delete it when you no longer need it.
  • Indivia is built to help: it never asks for a social insurance number or an ID number, it records only the date you looked at an ID, it needs a consent date before a credit or criminal record check, and it lets you set a "delete after" date.
  • We hold this information only on your behalf, to provide Indivia to you. We never use it for anything else, and we never share one landlord's tenant information with another landlord.
  • A reference request goes only to the previous landlord you name, with the tenant's consent. The tenant can see the answer and reply. The answer is saved in your app as soon as it arrives; the server deletes the request 90 days after it is answered, declined or expires.
  • If a tenant contacts us about their information, we will refer them to you or help you answer.

How long we keep it

  • Your household's copy stays on the server while your household has a plan that includes sync. When the plan ends (for example after you cancel, at the end of the period you paid for), the server keeps the copy 12 months, then deletes it. We email every owner of the household 30 days and 7 days before; choosing a plan again before then keeps it. An asset shared with a co-owner in another household stays while they still have it. Your devices keep their own copy in every case.
  • When you delete your account in the app (Your profile, then Delete my account), your sign-in, devices and private items are removed from the server right away. If you are the household's only owner and choose to delete the whole household, all of its data is removed from the server. Co-owners in other households keep their own copy of the assets you shared with them.
  • You can also ask us to delete your account or your data by writing to support@indivia.app. We answer deletion requests within 30 days.
  • The copy on your own device stays there; it is yours. Delete the app's data to remove it.
  • When your household moves to a plan that doesn't include Investor or Real-Estate Investor (a lower plan, the end of a trial, or a cancelled plan), what you entered only for that plan is hidden on your devices, left out of totals and reminders, and kept 365 days. We email the owners 30, 14, 5 and 1 days before, and on the day it is deleted; the app shows the same warnings. Choosing that plan again before the date brings it all back. Files you attached to that data (leases, scans) are not deleted from the device, but the app no longer opens them: Save my files puts them in a ZIP for you. Export all my data still includes the hidden data.
  • Copies in server backups disappear as the backups are replaced, within 14 days. Server logs are kept 30 days.
  • Your sign-in history is kept 12 months. When you delete your account it is deleted too, except the line saying the account was deleted, which is kept 12 months.
  • Links you share end on the date you choose. Reference requests are deleted 90 days after they are answered, declined or expire. Invitations nobody accepted are deleted after 30 days. The record of which reminder emails were sent is deleted 60 days after the item's end date.
  • Usage counts are kept as daily totals for 25 months.
  • The scrambled codes that give one free trial per email and per computer are kept after your account is deleted (they contain no email, see above). Records of rewards and disputed payments are kept with the payment records.
  • Records of payments, refunds, credits, sales tax and plan changes are kept 7 years (tax law asks for 6), also after you delete your account, without your name or email; then they are deleted.
  • Your answer about news and offers, and its proof, is kept while your account exists. A request you didn't confirm is deleted after 30 days.

Your rights

You can:

  • ask what personal information we hold about you, and get a copy, including in a structured, commonly used format;
  • have it corrected if it is wrong or incomplete;
  • withdraw your consent, for example by stopping sync, unlinking Google, or deleting your account;
  • have it deleted;
  • complain to us, and if you are not satisfied, to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in Québec, the Commission d'accès à l'information (cai.gouv.qc.ca).

You can do most of this yourself in the app. For anything else, write to support@indivia.app. We answer within 30 days.

If something goes wrong

If a security incident involves your personal information and could cause you serious harm, we will tell you and the privacy authorities (the Commission d'accès à l'information in Québec and the Office of the Privacy Commissioner of Canada) as quickly as possible, explain what happened and what you can do. We keep a record of every incident.

Children

Indivia is meant for adults. Don't create an account for anyone under the age of majority in their province.

Changes to this policy

We will update this policy as Indivia changes, for example when we add a feature or change a service provider. The date at the top shows the last change. Before an important change takes effect, we will tell you by email or in the app.

Contact

Patrick Rabbat, President, person in charge of the protection of personal information
Emedianet inc., Laval, Québec, Canada
support@indivia.app