BinPilot Privacy Policy
Effective: 2026-08-30 · Last updated: 2026-08-30
1. Who we are
BinPilot is made by UNIGATA INC., based in Toronto, Ontario, Canada. In this policy "we", "us" and "our" mean UNIGATA INC., and "you" means the person using BinPilot.
Questions about this policy or your data: privacy@unigata.com
2. The short version
BinPilot tells you which bin goes out tomorrow, and lets a household share the job of taking it out. To do that it needs your collection address. Almost everything else is optional.
We do not track you. BinPilot contains no analytics SDK, no crash-reporting SDK, no advertising identifier, and no third-party tracker of any kind. We do not build a profile of you, we do not sell or rent your data, and we have never done either.
3. What we collect, and why
Only if you create an account
| What | Why | Where it lives |
|---|---|---|
| Email address | Signing you in; sending you a sign-in or password-reset link | Our database |
| Name | Showing who is who on your household's roster | Our database |
| Phone number | Optional. Held only if you choose to give one, so an administrator can be reached about their account. BinPilot has never sent an SMS, and we never use it for marketing. | Our database |
| Password | Signing you in. Stored only as a cryptographic hash — we never see it | Our authentication provider |
For the calendar itself
| What | Why | Where it lives |
|---|---|---|
| Your collection address | Finding which collection zone you are in. This is the one thing BinPilot cannot work without. | On your device; in our database only if you create a household |
| Your collection schedule | Showing the calendar and sending reminders, including when you are offline | On your device |
| Your reminder settings | Sending the reminders you asked for | On your device |
| Language and display preferences | Showing the app the way you set it | On your device |
Only if you use a household roster
| What | Why | Where it lives |
|---|---|---|
| Household name and members | Running the rotation | Our database |
| Who completed which duty, and when | Showing the household who did what | Our database |
| Proof photos, if a member takes one | Showing the household the bin went out | Our storage, in a private bucket |
| A device identifier | Tying a subscription to the devices you use it on | Our database |
If you subscribe
Payment is handled entirely by Apple (or Google on Android). We never receive or store your card number. We store only the fact that a subscription exists, its plan, and when it expires.
We use RevenueCat to keep that record in step with the app stores. When subscriptions are switched on, RevenueCat receives an identifier we generate for your account and the purchase events the store reports — never your name, address, email or card details. It is a payment-records processor working on our behalf, not an advertiser and not an analytics service.
⚠ In the current release RevenueCat is not active. The library ships inside the app but carries no key, so nothing is sent to it and no subscription can be purchased yet. This paragraph is written in advance, because the moment that key is added the app starts sending, and a privacy policy that is updated afterwards was wrong in the meantime.
4. ⚠ Your address is sent to the people who publish the schedule
This is the part most people would not guess, so it gets its own section.
BinPilot does not hold a copy of every municipality's calendar. Your device asks the municipality's own schedule provider directly, in real time, and to do that it sends the address you typed. There is no BinPilot server in that path — we do not see, log, or store those requests.
Depending on your municipality, your address may be sent to:
- ReCollect —
api.recollect.net,recollect.a.ssl.fastly.net - RecycleCoach / Circular Materials —
ca-web.apigw.recyclecoach.com,calendar.recyclecoach.com - Photon (address suggestions as you type) —
photon.komoot.io - City of Toronto —
map.toronto.ca,www.toronto.ca,services3.arcgis.com - City of Windsor —
mappmycity.ca
Each of these is an independent organisation with its own privacy practices, which we do not control and are not responsible for. We send them the minimum needed to identify your collection zone — your address, and nothing about who you are.
We do not collect GPS or device location. BinPilot never asks for location permission. The only address we know is the one you type in.
5. Where your data is stored
Account, household and photo data is stored with Supabase, our database and storage provider, on servers in the United States.
🔴 Your data leaves Canada. Your account and subscription live in Supabase's US West region (Oregon); your household, roster, duty history and proof photos live in its US East region (Northern Virginia). We are a Canadian company and you are most likely a Canadian resident, but the data itself is held in the United States and is therefore subject to lawful access requests under United States law. If that is not acceptable to you, please do not create an account — the calendar, the reminders and the sorting guide all work without one, and none of that leaves your device.
Data kept on your device — your schedule, reminders and preferences — stays on your device and is not transmitted to us.
6. How long we keep things
| Data | Kept for |
|---|---|
| Account and profile | Until you delete your account |
| Household, roster and duty history | Until the household's administrator deletes it or their account |
| Proof photos | Until you or your household's administrator delete them, or the account is deleted |
| Audit records of account deletions | Retained after deletion — see §7 |
| Data on your device | Until you delete the app or clear its data from Settings |
⚠ Proof photos are not yet deleted automatically. They are designed to expire on the evening before your household's next garbage collection — one cycle, never longer — and that automatic purge is built but not yet running. We would rather tell you that than describe a deletion that does not happen. When it runs, this row changes with it.
7. Deleting your account
You can delete your account from inside the app at any time: Account → Delete account. No email, no form, no waiting on us.
It is immediate and it cannot be undone. Here is exactly what happens:
- Your profile and your sign-in are permanently deleted.
- Your proof photos are permanently deleted from storage.
- If you administer a household, that household is closed — every member loses access, and their duty history and proof photos are deleted too. You are warned and must confirm before this happens.
- If you are a member of someone else's household, your seat is anonymised rather than removed: your name and the link to your account are erased, and the household keeps its record of which duties were done. You are no longer identifiable in it.
One thing is deliberately kept. We retain a dated record that an account deletion occurred, including the household affected and how many photos were purged. It contains no name, no email and no photograph. We keep it because it is the only evidence the deletion actually ran, and deleting the proof that we deleted your data would defeat the purpose.
8. Your rights
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), and comparable law where you live, you may ask us to:
- See the personal information we hold about you
- Correct anything inaccurate
- Delete your account and personal information (§7, and you can do it yourself)
- Withdraw consent for anything optional
- Complain to the Office of the Privacy Commissioner of Canada if you are unhappy with how we handled your request
Write to privacy@unigata.com. We will respond within 30 days, as PIPEDA requires.
9. Children
BinPilot is a household utility for the general public. It is not directed at children, it is not offered in the App Store's Kids Category, and we do not ask for or record anyone's age or date of birth. Because we do not collect age, we cannot and do not knowingly distinguish users by it. If you believe a child has provided us personal information and you are their parent or guardian, contact us and we will delete it.
10. Security
Passwords are stored hashed, never in readable form. Household data is protected by row-level security so one household cannot read another's. Proof photos live in a private bucket that is not publicly readable. Traffic is encrypted in transit.
No system is perfectly secure, and we will not pretend otherwise. If a breach affects your personal information we will notify you and the Privacy Commissioner as PIPEDA requires.
11. Changes to this policy
If we change what we collect or what we do with it, we will update this page and change the "Last updated" date. A material change will be surfaced in the app rather than left here to be discovered.
12. Contact
UNIGATA INC. · Toronto, Ontario, Canada · privacy@unigata.com
UNIGATA INC. · Toronto, Ontario, Canada · privacy@unigata.com