← Back to home

Privacy Policy

Effective date: 31 August 2026 · Last updated: 31 August 2026

KoaLab (“KoaLab”, “we”, “us”) is an independent software studio based in Québec, Canada. This policy explains what personal information we collect, why we collect it, and the rights you hold over it.

We apply the Act respecting the protection of personal information in the private sector (Québec, as amended by Law 25) and the Personal Information Protection and Electronic Documents Act (PIPEDA, Canada).

1. Scope

This policy covers this website (koalab.solutions) and the mobile applications and software we publish, except where a specific application presents its own privacy notice. Where an application notice differs from this policy, the application notice governs for that application.

2. Information we collect

2.1 On this website

This website sets no cookies. It embeds no third-party tracker, font, or script, runs no advertising or profiling tool, and builds no profile of you. No account can be created here and no form is submitted here.

The site is delivered through the Cloudflare network. In order to serve the page and to protect the service against abuse, Cloudflare, Inc. processes technical connection data — your IP address, the page requested, an approximate region derived from the network, and the browser type. We have no access to a log identifying your visit.

Cloudflare does provide us with aggregated traffic statistics derived from that data: number of visits, most-consulted pages, countries of origin, and volume of malicious requests blocked. These statistics are produced at the network level rather than by a script in the page, set no cookie, carry no identifier that would let us recognise you on a later visit, and never let us single out an individual visitor.

2.2 When you contact us

If you write to us, we receive the content of your message, your email address, and anything else you choose to include. We use it solely to answer you and, if a project follows, to carry it out.

2.3 In our applications

Each application discloses its own data practices in its store listing and, where applicable, in an in-app notice. As a rule, we design our applications to keep data on your device wherever the feature allows it, and we do not sell personal information — ever, in any product.

3. Why we use it

• To respond to your enquiries and to deliver work you have engaged us for;
• To operate, secure, and improve our applications;
• To meet legal, accounting, and regulatory obligations.

We do not use personal information for advertising, profiling, or automated decision-making that produces legal or similarly significant effects.

4. Consent

We collect personal information with your knowledge and consent, which you give by writing to us or by using a feature that requires it. You may withdraw consent at any time by contacting us; withdrawal does not affect processing already carried out, and may prevent us from continuing to provide a service.

5. Sharing and disclosure

We do not sell, rent, or trade personal information. We disclose it only:

• to service providers acting on our instructions and bound to protect it — currently Cloudflare, Inc. for hosting and email routing, and Google LLC for the mailbox that receives our correspondence;
• where required by law, court order, or a lawful request from a public authority;
• to protect our rights, safety, or property, or those of others.

6. Storage and transfers outside Québec

Our providers may store or process information outside Québec, including in the United States, where legislation may differ from Québec law. Before entrusting personal information to a provider outside Québec, we assess whether it receives adequate protection, as Law 25 requires.

7. Retention

We keep correspondence only as long as needed for the purpose it was collected for, or as long as a legal or accounting obligation requires. Once neither applies, we destroy it or anonymise it.

8. Security

This site is served exclusively over HTTPS. We limit access to personal information to those who need it, and we hold it no longer than necessary. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your rights

Subject to the conditions and exceptions set out in law, you may:

• Access the personal information we hold about you;
• Correct information that is inaccurate, incomplete, or ambiguous;
• Withdraw your consent to a given use;
• Request deletion, or that we cease disseminating information and de-index a link, where dissemination contravenes the law or a court order;
• Receive a copy of the computerised personal information you have provided, in a structured, commonly used technological format (portability);
• Complain to the Commission d'accès à l'information du Québec, or to the Office of the Privacy Commissioner of Canada.

We answer requests within 30 days. We may ask you to confirm your identity first, so that we do not disclose someone's information to the wrong person.

10. Person in charge of the protection of personal information

11. Children

Our website and applications are not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us with personal information, write to us and we will delete it.

12. Confidentiality incidents

Should a confidentiality incident occur that presents a risk of serious injury, we will notify the Commission d'accès à l'information and the persons concerned promptly, and record it in a register, as Law 25 requires.

13. Changes to this policy

We may update this policy. The effective date at the top always reflects the version in force. Material changes will be signalled on this page before they take effect.

14. Contact

Questions about this policy or about your personal information: .