Privacy policy

Last updated : November 4, 2026

1. Who are we?

Our website is: https://prepacivile.com.
Our mobile app is: PrépaCivileavailable for free on Android.
We are based in Quebec, Canada, and our mission is to strengthen citizens' resilience to emergencies and disasters.

2. Scope of this policy

This policy covers all services offered by PrépaCivile, including:

• the website prepacivile.com
• Mobile application PrépaCivile, fully free
• electronic communications and storage services, notifications and authentication managed by Firebase (Google)
• optional usage statistics, processed by PostHog (see section 4)
• the monitoring of technical errors, dealt with by Sentry (see section 5)

3. Data collected automatically

When you use our mobile application, we automatically collect the following data via Firebase :

a) Firebase Authentication

• A unique identifier (UID), anonymous or linked to your account
• Email address (if e-mail connection)
• Family code (related to the structure of family or collective groups)

(b) Firebase Firestore

• Data recorded in the modules: family plan, members, alerts, crisis log, assembly coordinates, quiz responses, preparation notes, etc.
• History of modification, addition and deletion of data associated with your profile or family

(c) Firebase Cloud Messaging (FCM)

• Notification chips allowing to send personalized alerts to your device

(d) Location (GPS)

• If you authorize, we use your position when:
  • You share your position with your cell
  • You add a gathering point or event in the crisis diary
  • You trigger an alert in ACTION mode
• Sharing in the background (optional). If you accept it in the application, your position can be sent to your cell, with your first name and status, even when the application is closed. You can withdraw this consent at any time in your profile. These positions are automatically deleted after 7 days.
• These data are not resold and are restricted to authorized persons and service providers, as described below.

(e) Weather warning sector

• To send you Environment Canada alerts in your area, the app determines your area from your position. Only the sector name is recorded, in a private space that you can only read: other members of your cell do not have access to it.

4. Optional use statistics

PrépaCivile offers you, entirely optional, to contribute to the improvement of the application by sharing usage statistics associated with a random identifier. This feature is used to understand which parts of the application are useful, measure its overall usage performance, and possibly produce aggregate statistics that can support the financing of the application. It does not in any case constitute targeted or behavioural advertising.

Consent. This collection is disabled by default. It is only activated after your explicit consent, requested during your first use. Refusing does not result in any loss of functionality. You can withdraw your consent at any time in Personal profile → Usage statistics This withdrawal immediately stops any new collection, but does not automatically delete the statistics already transmitted (see Section 11 for the procedure to be followed).

What these statistics can include:

• actions you perform in the application (e.g. opening a screen or tool)
• a random ID generated on your device, never linked to your PrépaCivile account
• common technical information: application version, operating system and its version, model and manufacturer of your device, language, time zone, screen dimensions, session ID

What PrépaCivile never transmits in these statistics: your name, email, phone number, account ID, specific location, address or municipality, the information of your family or professional unit, the identity of its members, the content of your alerts, the status you declare in an emergency situation, your crisis communications, your crisis log, or any free text that you enter. As with any network communication with a remote service, the technical information required to establish the connection can be processed by our provider's infrastructure, regardless of what PrépaCivile configures and transmits.

Supplier. These statistics are processed by PostHog, hosted on its European infrastructure (Germany). Our configuration disables session recording (session replay), automatic capture of on-screen interactions (autocapture) and geographic location enrichment (GeoIP). No identified visitor profile is created at this provider as part of our use.

Conservation. The statistics are kept for up to 1 year according to the policy of our PostHog package, after which they are automatically deleted.

5. Tracking technical errors

PrépaCivile uses Sentry, hosted in the United States, to detect and correct technical errors (crashes, bugs) of the application. This treatment is necessary for the proper functioning and reliability of the application, as well as bug correction for any software.

The Sentry configuration limits the data transmitted and disables session registration. PrépaCivile does not intentionally associate your name or email address with it; however, the infrastructure can process the technical information necessary for connection and diagnosis.

6. Media and files

When you add a photo, image, document or audio from the application, these files are stored in Firebase Storage.
We recommend that you do not include sensitive metadata (such as geolocation in EXIF photos) if you want to protect your privacy.

7. Cookies on the website

On this version of the website, calculators work in your browser and their results are not passed on to PrépaCivile. No web account is required to view articles and tools.

Google Analytics and the site's Analytics collection are not enabled. Registration for PrépaCivile publications is open with confirmation of the email address. A functional preference of territory can be read to adapt the presentation; it is not used for advertising tracking. See the Cookies page.

Registration for PrépaCivile publications

If you register, we store your email address, your choice of receipt (new articles and important updates), your registration status and the dates required for confirmation and unsubscribe. Your registration is enabled only after confirmation by email. New articles are grouped in a daily summary when there are new developments; important updates are reported by the editor.

Registration data is stored in the Hostinger hosting environment of the project, in a separate registry of historical subscribers Québec Preppers. Email transport uses Brevo via the already configured sending service. Brevo processes the addresses, email content and distribution information required for this service. The system does not automatically add historical subscribers to PrépaCivile.

Each email contains a preference management and unsubscribe link. Unsubscribe takes effect immediately for future PrépaCivile shipments. Confirmation links expire after 48 hours; unconfirmed requests are deleted after 30 days. Registration and consent or withdrawal details are retained during service management and, where necessary, to comply with unsubscribe or document your choices. You can request access or deletion of data by writing to team@prepacivile.com.

A temporary technical footprint, calculated from the network address, is used to limit the abuse of the form. It expires after an hour and is not used to track your browsing. Preference management links contain a security token: avoid sharing them.

Hostinger hosts the site files. Technical logs can be processed by the host for operation, security and diagnosis. When you write to us, your email address and the content of your message are used to process your request.

Links to Amazon and other external sites lead you to their own services and privacy policies. Some links may be affiliated; this relationship must be reported in the context of their presentation.

8. Sharing your data

We do not sell personal data. Collected data is used to provide the services described in this policy, including the app and email updates.

For the application, the providers involved are:

• Google Firebase, for hosting, authentication, notifications and database
• PostHog, for optional use statistics (see section 4)
• Sentryfor the monitoring of technical errors (see section 5)
• MapLibre/OpenStreetMap, for display of cards
• MapTiler. Some maps use the styles and tiles of MapTiler. When loading a map, MapTiler receives technical information necessary for the request, including IP address, device type and map area requested. PrépaCivile does not transmit to MapTiler the name, email address, status, crisis log or user's Firebase ID. Using MapTiler is limited to cartographic display.
• Expo/React Native, for the operation of the mobile application and the sending of notifications

9. Data retention

• The your profile data (member, family, history, journal) are kept as long as your profile remains active.
• The alerts and shared positions are deleted automatically after 7 days.
• If you delete the application without saved account, the anonymous data associated with your UID may be Unrecoverable.
• Optional usage statistics (Section 4) are kept for up to 1 year, according to a policy separate from your account.
• You can request the deletion of your data at any time (see section 11).

10. Data security

We put in place security measures:

• access restricted by Firestore safety rules based on your UID and your authorized cell membership
• logging sensitive accesses
• Encryption of files in transit and at rest via Firebase

However, no technology offers absolute security. The use of PrépaCivile is done at your risk, but in an optimal safe environment.

11. Your rights

You can:

• View the recorded data about you
• Download a copy of the data (on written request)
• Request deletion of your account and all associated data: directly in the application (Profile → "Delete my account and data"), or from this page
• Change your profile information at any time
• Withdraw your consent to optional usage statistics at any time, directly in the application (Personal Profile → Usage Statistics)

For any request, including for statistics already submitted: team@prepacivile.com

12. Access by minors

The application is intended for persons with 13 years and over. A young 12 years can use with an adult (parent or guardian) who creates and supervises his/her cell; this adult remains responsible for the account.
The only inserts displayed come from partners, are always clearly identified as such, and no targeted or behavioural advertising is used.

13. Hosting

Website: Hostinger. The application infrastructure is distinct from this web hosting.

Our services are hosted on several infrastructures, depending on the treatment concerned:

• Google Firebase (account, application data, files): Canada and the United States
• PostHog (Optional use statistics, Section 4): Germany (European Union)
• Sentry (following technical errors, section 5): United States of America

The use of these suppliers may result in the processing of information outside Quebec and Canada. The information is processed as part of PrépaCivile's confidentiality commitments and suppliers' contractual terms and conditions.

14. Changes to this policy

This policy can be updated without notice. Any changes will be indicated here with the revision date. We invite you to consult it regularly.

15. Contact

For any confidentiality questions or complaints:
📧 team@prepacivile.com
📍 Montréal, Québec, Canada