Privacy Policy

Effective date: July 27, 2026

This Privacy Policy describes how Lynk ("Lynk", "we", "us", or "our") collects, uses, discloses, and protects personal information in connection with the Lynk mobile application, the website located at lynkapp.ca, and any related services (collectively, the "Services"). We are committed to handling personal information in accordance with applicable privacy legislation, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

By using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Services.

1. Information we collect

Information you provide to us.

• Account information: name, email address, username, and password. Passwords are stored in hashed form only; we cannot read them.
• Date of birth: collected at sign-up solely to confirm that you are at least 13 years old.
• Phone number (optional): if you choose to add it, so that friends can find you by your number. This is optional and you can turn discovery off at any time.
• Profile information: optional content such as a profile photo, banner image, bio, and availability status.
• Content: plans you create or join, messages you send, comments, saved places, photos you upload, and other material you submit through the Services.
• Waitlist information: if you join our launch waitlist on the website, the email address you provide.

Information collected with your permission.

• Location data: with your consent, we use your device's location (which may be precise) to display places and activities near you and to personalize recommendations. Location is collected only while you use the relevant features and is not tracked in the background.
• Photo library and camera: with your consent, images you choose to upload.
• Microphone and voice: with your consent, audio you record when using the optional voice-to-plan feature. The recording is sent to our AI provider to convert it to text so we can pre-fill a draft plan; we do not retain the audio afterward.
• Contacts: with your consent, Lynk checks which of your contacts already use Lynk. Phone numbers are converted into irreversible cryptographic hashes on your device, and only those hashes are checked against our records — your actual contact list is never uploaded or stored.
• Notifications: with your consent, a device token used to deliver push notifications.

Information collected automatically.

• Usage and device data: log information such as device type, operating system version, app version, IP address, and timestamps of requests, used for security, debugging, and service operation.
• Interaction signals: which places you view, open, save, or skip, used to personalize the recommendations we show you. We do not use these signals for advertising.

2. How we use personal information

We use personal information to:

• Provide, maintain, and improve the Services, including your calendar, plans, friends, messaging, and nearby-place discovery;
• Personalize the places and activities we recommend, based on your interactions, saved places, and, with your permission, your location;
• Convert your voice into a draft plan when you use the optional voice-to-plan feature;
• Help you find friends who already use Lynk when you choose to sync contacts;
• Authenticate you and secure your account;
• Deliver service communications, such as password reset codes and plan notifications;
• Notify you about the launch of the app if you joined the waitlist;
• Enforce our Terms of Service, including processing blocks and reports and preventing fraud, spam, and abuse;
• Comply with legal obligations.

We do not sell or rent personal information, we do not use your personal information for third-party advertising, and we do not track you across other companies' apps or websites.

3. How information is shared

• With other users, as designed: your profile is visible to other users; your availability is visible to your friends; plans and messages are visible to their participants. You control what you share.
• Service providers: we use a limited number of providers who process data on our behalf under contractual obligations of confidentiality: infrastructure and hosting providers; Resend (delivery of transactional emails such as verification and password-reset codes, which receives your email address); Google (place search, which receives your location and search terms to return nearby results, but no account information); OpenAI (speech-to-text and text understanding for the AI search and voice-to-plan features, which receives the audio or text you submit and may retain it briefly to monitor for abuse); and Apple and Google push-notification services (which receive a device token and notification content to deliver notifications). None of these providers are advertising or analytics networks.
• Legal requirements: we may disclose information where required by law, regulation, legal process, or enforceable governmental request, or where necessary to protect the rights, safety, or property of Lynk, our users, or the public.
• Business transfers: if Lynk is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this Privacy Policy.

4. Consent

We collect, use, and disclose personal information with your consent, or as otherwise permitted or required by law. You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice, by adjusting your device permissions or deleting your account. Withdrawing consent for certain data (for example, location) may limit features that depend on it.

5. Retention and deletion

We retain personal information only for as long as necessary to fulfil the purposes described in this policy, or as required by law. You may delete your account at any time in Settings → Delete account, which permanently removes your profile, friendships, direct messages, plans you own, and associated personal data from our production systems. Residual copies may persist in encrypted backups for a limited period before being overwritten in the ordinary course.

6. Your rights

Subject to applicable law, you have the right to access the personal information we hold about you, to request correction of inaccurate information, to request deletion, and to challenge our compliance with this policy. To exercise these rights, contact us at the address below. We will respond within the timelines required by applicable law.

7. Security

We employ administrative, technical, and physical safeguards appropriate to the sensitivity of the information we hold, including encryption in transit, hashed credentials, token-based authentication, and rate limiting on sensitive endpoints. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International transfers

Our service providers may store or process information in jurisdictions outside your province or country of residence, including the United States. While information is in another jurisdiction, it may be subject to the laws of that jurisdiction. We take reasonable steps to ensure comparable protection through contractual and technical measures.

9. Children

The Services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete the account and associated data.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will revise the effective date above and, where appropriate, provide additional notice within the Services. Your continued use of the Services after changes take effect constitutes acceptance of the revised policy.

11. Contact us

For privacy inquiries, access requests, or complaints, contact our privacy officer at [email protected]. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.