Privacy Policy
At LegalPocket, we prioritize the security and confidentiality of your data. This Privacy Policy details the types of information we collect, our storage protocols, and our access standards.
By accessing or using LegalPocket, you acknowledge that you have read, understood, and agree to be bound by both our Terms of Use and this Privacy Policy. Access to our services is strictly conditioned upon your acceptance of these terms.
- Unified Agreement: This policy is an integral part of our Terms of Use, which you can find in the LegalPocket application under Profile > Privacy.Together, they govern the legal relationship between you and LegalPocket.
- Notice of Updates: We may update this policy as our services evolve. Any material changes will be communicated via email or posted within the application.
- Acceptance through Continued Use: Your continued use of LegalPocket after changes are posted constitutes your acceptance of the revised terms. This applies to all account holders, regardless of your notification settings.
1. Overview & Security
Zero-Knowledge for Sensitive Data
LegalPocket uses a Zero-Knowledge approach for your most sensitive identity numbers (SIN, passport number, and UCI). These are stored exclusively in your iCloud Keychain with Apple's end-to-end encryption—not on our servers or any third party.
This means we cannot view, read, or share this sensitive data, even if we wanted to.
Other profile information (name, status, dates) is stored on Google Firebase, a secure cloud service. We do not sell or share your data for advertising purposes.
We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial laws.
iCloud Keychain Requirement
To provide the highest level of security for sensitive identity numbers, LegalPocket uses Apple's iCloud Keychain for storage. This requires:
Note: The passcode/biometric is an Apple requirement for iCloud Keychain to function—it's not a LegalPocket app lock.
2. What Data We Collect & Where It's Stored
Sensitive Identity Numbers
Personal Details
Contact Information
Location Information
Immigration Status
Uploaded Documents
3. Who Can Access Your Data
LegalPocket Team
We can access your Firebase data (immigration status, location, uploaded documents) for support purposes. We cannot access your iCloud Keychain data (SIN, passport, UCI).
Google (Firebase)
Google stores and processes your Firebase data on their servers. They are bound by their privacy policy and data processing agreements.
Apple (iCloud Keychain)
Apple stores your sensitive data with end-to-end encryption. Neither Apple nor LegalPocket can read this data.
Law Enforcement
If required by law, we may disclose Firebase data. We cannot disclose iCloud Keychain data because we don't have access to it.
Business Transfers
If LegalPocket is sold or merged, your data may be transferred to the new owner.
- • Sell your data to advertisers or data brokers
- • Share your data for marketing purposes
- • Use your data to show you targeted ads
4. Deleting Your Data
You can delete your data at any time:
Delete Firebase Data
Profile → Manage Account → Delete Account. This removes your account and all data from Google Firebase.
Delete iCloud Keychain Data
Your sensitive data (SIN, passport, UCI) is stored locally. Delete it through the app or uninstall the app to remove it from your device.
Request by Email
Email legalpockettoronto@gmail.com and we'll delete your Firebase data within 30 days.
Note: Deleting your account is permanent. We cannot recover your data after deletion.
5. Children's Privacy
LegalPocket does not knowingly collect or solicit Personal Data from children under 13 years of age.
If we learn we have collected Personal Data from a child under 13, we will delete that information as quickly as possible.
If you believe a child under 13 has provided Personal Data to us, please contact us at legalpockettoronto@gmail.com
6. Security Measures
If we discover a breach that could cause you significant harm, we will notify you and the Privacy Commissioner of Canada as required by PIPEDA (Canadian privacy law).
Important: While we use industry-standard security practices, no system is 100% secure. We encourage you to use a strong, unique password.
7. Contact Us
Questions or Concerns?
If you have questions about this privacy policy, want to access your data, or have any concerns, please contact us:
We aim to respond to all inquiries within 7 business days.
This policy may be updated from time to time. We will notify you of significant changes through the app.