Privacy Policy

This Policy explains how La100e Labs inc. collects, uses, discloses, retains and protects personal information through GoFuel. We collect only information reasonably necessary to operate the product, provide features you request, protect the Service and meet legal obligations.

1. Overview and responsible organization

GoFuel is operated by La100e Labs inc. (“La100e”, “we”, “us” or “our”), a Québec business corporation registered under Québec enterprise number 1181898603. Our address is 220-9150 boulevard de l’Acadie, Montréal, Québec H4N 2T2, Canada.

We handle personal information under Québec’s Act respecting the protection of personal information in the private sector, as amended by Law 25, and, where applicable, Canada’s Personal Information Protection and Electronic Documents Act. The Privacy Officer identified in Section 15 is responsible for this Policy and our privacy-governance program.

2. What we collect

Account and profile

• An automatically generated Supabase user identifier and authentication/session information.
• An optional display name.
• Terms version, selected contract language and acceptance time.

Settings and content you choose to save

• Fuel preference, search radius, map style, units, appearance and selected brand filters.
• Vehicle label/type, preferred fuel, tank capacity and annual kilometres.
• Favourite stations.
• Fill-up records, including station, fuel type, price, litres, source and time.
• Notification choices, thresholds, daily limits and alert history.

Location

• Precise latitude and longitude when you allow location access and request nearby-station or map features.
• The most recent coordinates cached locally on your device.
• If you save a place such as Home or Work, the name you give it or the city we fill in when you leave it blank, the exact coordinates Apple returns for the address you search, and the street line for that address, all stored in Supabase so the place is recognizable when you sign in on another device.

Device, subscription and diagnostics

• Apple Push Notification service token, platform, timestamps and device-specific alert settings.
• GoFuel Premium product identifier, entitlement status, renewal or expiry information, and RevenueCat customer/event identifiers. We do not receive your payment-card number.
• If you enable Analytics: limited app-open, app-close, paywall and subscription-funnel events and technical identifiers.
• If you enable Crash Reporting: crash reports, device/app technical information and diagnostic context that may include an pseudonymous account or subscription identifier.
• Size-bounded on-device application logs. Logs can contain technical events and pseudonymous Supabase or RevenueCat identifiers.

We do not require a name, telephone number, email address or password to create the in-app account without an email address. The generated identifier links records to your account, so those records remain personal information. We receive an email only if you voluntarily join the website waitlist, contact us, or provide one for a privacy request.

3. Why we use information

We use personal information only to:

• authenticate the account without an email address and synchronize selected data;
• show nearby stations, maps, routes, prices and distances;
• save preferences, favourites, vehicle information and fill-ups;
• calculate requested estimates, trends, savings and notification timing;
• send and record notifications the user enables;
• verify and provide GoFuel Premium entitlements;
• provide support and respond to privacy requests;
• diagnose crashes when Crash Reporting is enabled;
• understand limited product interactions when Analytics is enabled;
• secure the Service, prevent abuse and investigate incidents; and
• comply with law and enforce the Terms & Conditions.

We do not use the information for an incompatible new purpose without first giving the legally required notice and obtaining consent where required. We do not make decisions producing legal or similarly significant effects based solely on automated processing.

4. Location and optional home coordinates

Nearby searches and maps

With iOS permission, GoFuel obtains precise coordinates to centre maps, retrieve nearby stations and calculate distances. GoFuel sends the coordinates to its Supabase backend as part of a nearby-station query. Apple may receive location or search information when MapKit provides address search, maps or routes. GoFuel does not intentionally include precise coordinates in Firebase Analytics or Crashlytics events.

Location-triggered notifications

These features are off by default. They require an explicit action in GoFuel plus the relevant iOS location and notification permissions. iOS registers and evaluates each trigger on that device. Enabling a trigger on one device does not enable it on another. You may disable the feature or revoke an iOS permission at any time.

Home-based alerts

If this feature is available and you choose to configure it, your typed address or search query is sent to Apple MapKit for geocoding. GoFuel synchronizes the resulting exact latitude and longitude and the street line, along with the name you gave the place or the city we fill in when you leave it blank, to Supabase, so a place you saved on one device is identifiable on the others. The street line and the name are shown to you and nothing else reads them. The coordinates are used only to select, schedule or time notifications you request. We do not use them to monitor continuous movement, create travel history, advertise, determine prices or eligibility, or sell information. You can remove the saved home location in the App.

5. Consent and your choices

We obtain consent where required and rely on permissions or exceptions authorized by law only for their stated purposes. Refusing an optional permission affects only the feature that needs it.

• Location: manage access in iOS Settings.
• Location triggers: enable or disable them separately in GoFuel on each device.
• Notifications: manage them in GoFuel and iOS Settings.
• Analytics: independently off by default and controlled in GoFuel’s Privacy settings.
• Crash Reporting: independently off by default and controlled in GoFuel’s Privacy settings.
• Home location: optional and removable in the App.

Withdrawing consent does not affect processing already lawfully completed. Essential authentication, synchronization, security and subscription processing may be necessary to provide the feature you request.

6. Service providers and other disclosures

We disclose only the information necessary for the stated purposes to:

• Supabase, for authentication, database storage, nearby-station queries, edge functions and operational security;
• Backblaze B2, for database backup storage and restoration; copies also pass through a backup server;
• Apple, for App Store distribution and transactions, APNs notifications, MapKit search, maps, routing and iOS location triggers;
• RevenueCat, for GoFuel Premium subscription and entitlement management;
• Google Firebase Analytics and Crashlytics, only for the optional analytics and crash-reporting functions described above;
• Cloudflare, for website delivery and Turnstile abuse prevention; and
• authorities, courts, advisers, an acquirer or other persons when authorized or required by law, necessary to protect rights and security, or as part of a legitimate corporate transaction subject to appropriate safeguards.

These providers process information to deliver services to us under their terms and safeguards. Some, including Apple, also independently process information under their own privacy policies. A disclosure to a processor is not a sale. We do not sell, rent or trade personal information.

7. Processing outside Québec

The primary Supabase database is hosted in Montréal on AWS Canada Central infrastructure. Backblaze B2 stores database backups in the US West region. Other operations, including backup processing, support, authentication, notifications and diagnostics, may involve providers outside Québec or Canada. The database location does not determine the location of every provider operation. Foreign laws may permit access by authorities in those jurisdictions.

Québec law requires a privacy impact assessment and an appropriate written agreement before covered processing or communication outside Québec. You may contact the Privacy Officer for information about recipients, processing locations and the safeguards applicable to your information.

8. Retention

We retain information only as long as necessary for its stated purpose:

• Profile, settings, vehicle data, favourites, fill-ups and saved places (name, coordinates and street line): while the account remains active; earlier if you remove the item; otherwise through account deletion.
• Device token: until invalid, account deletion, or 12 months without refresh.
• Alert history: 90 days.
• Abuse/rate-limit records: 48 hours; a waitlist IP hash is retained for no more than 24 hours.
• Waitlist email: until withdrawal or 12 months after signup, whichever occurs first.
• Firebase Analytics user/event retention: configured for two months.
• Firebase Crashlytics reports: generally 90 days under Firebase’s retention controls.
• On-device GoFuel logs: up to seven days, size-bounded, excluded from device backups and cleared on account deletion or identity change.
• Support correspondence: three years after closure.
• Terms-acceptance and privacy-request evidence: three years after account termination or request closure.
• Confidentiality-incident register: at least five years after we learn of the incident, as required by Québec regulation.

Database backups are made daily for security and restoration. Their reference retention period is 180 days from creation, separate from deletion in active systems. Some older copies have longer existing storage locks and follow the applicable expiry and cleanup process. This is not a guarantee that every copy is erased within 180 days of your request.

Backup access is restricted to authorized recovery and security purposes. Recorded deletion requests must be reapplied after restoration before normal use resumes. Retention in a backup does not authorize renewed ordinary use of deleted information. Apple may independently retain transaction records under its legal obligations and policies.

9. Account deletion

You may request deletion using the account-deletion control when available in the App or by contacting the Privacy Officer. After a valid request:

1. normal account use is suspended and GoFuel notifications and ordinary processing stop;
2. we display or confirm the end of the 30-calendar-day cancellation period;
3. you may cancel the request at any time before that period ends;
4. permanent production deletion begins automatically after the period ends, without another action from you; and
5. once execution begins, the deletion cannot be reversed.

The in-app process does not offer an accelerated deletion control. You may contact the Privacy Officer to exercise applicable legal rights, including a request for earlier deletion required by law. The cancellation period does not postpone such a deletion or extend statutory response deadlines. Submitting the request again does not restart the period. Account deletion does not cancel GoFuel Premium; manage that subscription separately through Apple. We may retain narrowly limited records when authorized or required by law, and processor backups expire under Section 8.

10. Security and incidents

We use administrative, technical and physical safeguards appropriate to the sensitivity, quantity, use and storage of information, including encrypted transport, access controls, row-level database security and restricted service credentials. No safeguard can guarantee absolute security.

We assess suspected confidentiality incidents, take reasonable steps to reduce harm and recurrence, maintain the required register, and notify Québec’s Commission d’accès à l’information and affected persons when a serious risk of injury requires it.

11. Your privacy rights

Subject to applicable law, you may ask to:

• access personal information we hold about you;
• correct incomplete or inaccurate information;
• receive eligible computerized information you provided in a structured, commonly used technological format;
• withdraw consent to a use or disclosure;
• remove saved places or other optional content;
• request account deletion under Section 9;
• obtain information about our collection, use, disclosure, retention and safeguards; or
• make a privacy complaint.

We may need information to verify that you control the account without an email address. We respond to access and rectification requests within 30 days of receipt, as required by Québec law, and explain any lawful refusal. Other requests follow their applicable legal deadlines. You may complain to Québec’s Commission d’accès à l’information or another competent privacy authority.

12. Users aged 14 and older

GoFuel is not intended for children under 14. We do not knowingly collect personal information directly from a child under 14 without consent from the person having parental authority or tutor, unless the law clearly permits the collection for the child’s benefit. Contact us if you believe this has occurred.

13. Website and waitlist

Our website does not use advertising trackers. If you submit the optional waitlist form, we use your email only to send the GoFuel availability message and administer the request. Cloudflare Turnstile processes technical signals to prevent automated abuse. The waitlist records follow Section 8.

If you use the contact form, we use your name, email address, selected topic and message to respond to your request. Cloudflare Turnstile verifies the submission, and Resend delivers it to our support mailbox. Please do not include passwords or payment details.

14. Changes to this Policy

We may revise this Policy as GoFuel or legal requirements change. We will publish the revised date and give clear notice of material changes by an appropriate means. If a new purpose requires consent, we will request it separately before using information for that purpose. The September 16, 2026 revision clarifies account identifiers, backup providers and locations, retention, and deletion rights. It does not itself authorize a new use of personal information.

15. Privacy Officer

Privacy Officer, La100e Labs inc.
220-9150 boulevard de l’Acadie
Montréal, Québec H4N 2T2, Canada

Email: vieprivee@la100e.com / privacy@la100e.com
General support: support@gofuelapp.ca