Privacy Policy
Version of 2 October 2026. To be reviewed by a lawyer before launch.
KiloPlane takes the protection of your personal information seriously. This policy explains what information we collect, why, how long we keep it and what your rights are. It complies with Québec's Act respecting the protection of personal information in the private sector (as amended by Law 25), the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, for recipients outside Canada, the laws of their country (including the GDPR).
1. Person in charge of the protection of personal information
The person with the highest authority at KiloPlane acts as the person in charge of the protection of personal information. Contact: privacy@kiloplane.com. Their title and contact details are published on our website.
2. Information collected
| Information | Purpose |
|---|---|
| First name, last name, email, password (hashed), language | Account creation and security |
| Phone (optional) | Contact between the parties once a booking is accepted |
| Identity document, selfies, date of birth, nationality, document number | Identity verification and fraud prevention |
| Plane ticket, flight number, real flight date | Trip verification by the KiloPlane team |
| Parcel description, weight and photos; recipient's name, email and phone | Carrying out the transport and evidence in case of dispute |
| Location at delivery time (if you allow it) | Proof of delivery |
| Meeting places chosen for handover and delivery (a public place is recommended) and, if you add it, their GPS position | Organising handover and delivery; the exact place is only shared with the other party once the booking is accepted |
| Days of use and time spent in the app (screen open), with no detail of what you do | Usage statistics and service improvement |
| Payment data | Processed by our payment provider (Stripe); KiloPlane never stores card numbers |
| Messages between the parties | Organising handover and delivery, evidence in case of dispute |
| Commitments ticked in the app (contents, declared value, the traveler's commitment, check at handover): date, time, account and version of the text | Evidence of each party's commitments in a dispute or legal proceedings |
We only collect what is necessary for these purposes, and your consent is requested at sign-up. No location technology runs without your action: a location is only recorded when the traveler confirms a delivery, or when you add the position of a meeting place yourself, if you allow it. Meeting place search relies on OpenStreetMap data through our provider Geoapify: only the searched text is sent to it, never your identity.
3. Security measures
- Identity documents, selfies, tickets and parcel photos are encrypted (AES-256-GCM) before storage and stripped of their metadata (photo GPS location, phone model).
- They are only accessible to the verification team, with a named watermark; every access is logged.
- The identity document number is never stored in clear text (only a fingerprint and its last 4 characters).
- Verification, handover and delivery codes are never stored in clear text.
- The exact flight date is never shown to other users.
- Each KiloPlane team member only accesses the modules needed for their work (for example identity checks or support), read-only or with actions. These rights are granted by an access manager who cannot see any member information. Team sign-in requires a password and a one-time code sent by email.
4. Sharing
- Between users: before a booking is accepted, only the first name, the initial of the last name, the rating and the sign-up date are visible. Once accepted, the full name, email and phone are shared between the sender and the traveler. The traveler never sees the sender's identity document, and vice versa.
- Service providers: payment (Stripe), email delivery, hosting, place search (Geoapify). They act on our instructions under written agreements requiring them to protect your information.
- Complaint by a sender: if a traveler keeps a parcel after the return deadline set by the team, or does not pay the value of a lost or undelivered parcel in time, a team member specifically authorized for this task alone (a right granted by name, confirmed by password and recorded in the audit log) may disclose the traveler's full identity (name, date of birth, nationality, contact details and a watermarked copy of the verified ID document) to the sender concerned, solely so that they can file a complaint. This disclosure is confirmed by password, logged, and the traveler is notified.
- Authorities: upon lawful request, or in case of fraud or illegal activity.
We never sell your information.
5. Communication outside Québec
Some providers may store information outside Québec. Before any such communication, we carry out a privacy impact assessment and ensure by contract that the information receives adequate protection.
6. Retention
- Account: as long as it is active. On closure, the account is deactivated (no further sign-in) and its identifying information (name, email, phone, document details) is archived for 6 years — tax obligations, fraud prevention and dispute handling — then automatically anonymised.
- Identity verification photos: 1 year after the account is closed, to handle any claim, then destroyed.
- Booking and payment data: 6 years (tax obligations) in a form that identifies you; after that, only anonymised data (dates, routes, amounts) is kept, for statistics.
- Messages, handover and delivery evidence and commitments ticked in the app: 6 years after the booking, then erased.
- Days of use and time spent: 13 months, then erased.
7. Your rights
You may request access to your information, its correction, its portability in a structured technological format, withdrawal of your consent, and that its dissemination cease or any link be de-indexed. You can close your account from the app. To exercise your rights: privacy@kiloplane.com; we answer within 30 days. You may file a complaint with the Commission d'accès à l'information du Québec.
8. Confidentiality incidents
If a confidentiality incident presents a risk of serious injury, we promptly notify the Commission d'accès à l'information and the persons concerned, and we keep a register of incidents.
9. Minors
The service is reserved for people aged 18 or over.
10. Changes
We will notify you of any significant change to this policy.